{"resultsPerPage":2479,"startIndex":0,"totalResults":2479,"format":"NVD_CVE","version":"2.0","timestamp":"2025-10-22T01:15:31.843","vulnerabilities":[{"cve":{"id":"CVE-2001-1413","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the comprexx function for ncompress 4.2.4 and earlier, when used in situations that cross security boundaries (such as FTP server), may allow remote attackers to execute arbitrary code via a long filename argument."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en la función comprexx de ncompress 4.2.4 y anteriores, cuando se utiliza en situaciones que cruzan límites de seguridad (como servidores FTP), puede permitir a atacantes remotos ejecutar código de su elección mediante un argumento de nombre de fichero largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncompress:ncompress:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.4","matchCriteriaId":"008D3D9D-E146-4A74-8A92-815A51095085"}]}]}],"references":[{"url":"http://seclists.org/lists/vuln-dev/2001/Nov/0202.html","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200410-08.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/176363","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-536.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10619","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/vuln-dev/2001/Nov/0202.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200410-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/176363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-536.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0034","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when converting a FAT32 file system, which could cause the conversion to produce a file system with less secure permissions than expected."},{"lang":"es","value":"El program de Microsoft CONVERT.EXE, cuando se usa en sistemas Windows 2000 y Windows XP, no aplica los permisos NTFS por defecto cuando convierte un fichero FAT32, lo que podría significar que la conversión produce un sistema de ficheros con permisos menos seguros de lo esperado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"}]}]}],"references":[{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B237399","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/361065","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B237399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/361065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2002-0385","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a large number of '\"' (double quote) and and '>' characters, which causes the TCL interpreter to crash and include stack data in the output."},{"lang":"es","value":"Vignette Story Server 4.1 and 6.0 permite a atacantes remotos obtener información sensible mediante una petición conteniendo un número grande de caractéres \"comillas dobles\" y símbolos \"mayor que\", lo que hace que el intérprete se caiga y muestre datos de la pila en la salida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vignette:storyserver:4.1:*:*:*:*:*:*:*","matchCriteriaId":"A69859D5-F4AF-4239-ADB2-5AB3F6A3F25F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vignette:storyserver:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EC0BDA9F-F594-43E3-8514-A5D5FA6CBF41"},{"vulnerable":true,"criteria":"cpe:2.3:a:vignette:vignette:5.0:*:*:*:*:*:*:*","matchCriteriaId":"8D1E15D6-2CA5-419C-80AD-9E8FE6A054C3"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2003/a040703-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/7296","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11725","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2003/a040703-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/7296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-0712","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user, which could allow a master user to perform operations that require multiple authorizations."},{"lang":"es","value":"Entrust Authority Security Manager (EASM) 6.0 no requiere que múltiples usuarios máster cambien el password de un usuario máster, lo que permitiría que un usuario master ejecute operaciones que requieren autorización múltiple."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:entrust:entrust_authority_security_manager:5.0:*:*:*:*:*:*:*","matchCriteriaId":"9C76D126-F85B-435A-B761-F28FE8EDC147"},{"vulnerable":true,"criteria":"cpe:2.3:a:entrust:entrust_authority_security_manager:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F3D7C7A2-0468-4905-9669-C0EEF1094721"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/720017","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/AAMN-5KKVXC","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/7284","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11724","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/720017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/AAMN-5KKVXC","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/7284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1574","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors."},{"lang":"es","value":"Desbordamiento de búfer en el controlador de tarjeta de telefónica ixj en Linux anteriores a 2.4.20 tiene vectores de ataque e impacto desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/n-096.shtml","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-205.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-206.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-044.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-106.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/5985","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10417","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/n-096.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-205.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2002-206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-106.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/5985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1575","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline (%0a) characters in parameters such as \"required-subject,\" which can be used to modify the CC, BCC, and other header fields in the generated email message."},{"lang":"es","value":"cgiemail permite a atacantes remotos usar cgiemail como un proxy de spam mediante una inyección CRLF (caractéres de retorno de carro y nueva línea) de carácteres de nueva línea codificados (%0a) en parámetros como \"required subject\", lo que puede hacer que se modifiquen parámetros CC, BCC y otros campos de cabecera en el correo electrónico generado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:cgiemail:1.6:*:*:*:*:*:*:*","matchCriteriaId":"F471FE64-73DE-4E29-BF66-9451866A9FC4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=102406554627053&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106520691705768&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-437","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5013","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9361","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=102406554627053&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=106520691705768&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/5013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1576","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program."},{"lang":"es","value":"lserver en SAP DB 7.3 y anteriores usa el directorio de trabajo actual para encontrar y ejecutar el programa lserversrv, que permite a usuarios locales ganar privilegios con un lserversrv malicioso llamado desde un directorio que tiene un enlace al programa lserver."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_db:7.3.00:*:*:*:*:*:*:*","matchCriteriaId":"CB2D865C-9FB8-4209-A0DC-52FED2C34E89"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103903565829796&w=2","source":"cve@mitre.org"},{"url":"http://www.sapdb.org/sap_db_alert.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6316","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10762","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103903565829796&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sapdb.org/sap_db_alert.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/6316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10762","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1577","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the (1) SAP*, (2) SAPCPIC, (3) DDIC, (4) EARLYWATCH, or (5) TMSADM accounts."},{"lang":"es","value":"SAP R/3 2.0b y 4.6D instala varios clientes con nombres de usuario y contraseñas por defecto, lo que permite a atacantes remotos ganar privilegios mediante las cuentas (1) SAP*, (2) SAPCPIC, (3) DDIC, (4) EARLYWATCH, o (5) TMSADM"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_r_3:2.0b_to_4.6d:*:*:*:*:*:*:*","matchCriteriaId":"23C54F95-726A-4F62-B690-0E5DA3E88F81"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=103038238228119&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9964","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=103038238228119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1578","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected."},{"lang":"es","value":"La instalación por defecto de SAP R/3, cuando se usa Oracle y SQL*NET V2 3.x, 4.x y 6.10, permite a atacantes remotos obtener datos SAP sensibles y arbitrarios conectándose directamente a la base de datos y ejecutando consultas contra la base de datos, que no está protegida por contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_r_3:*:*:*:*:*:*:*:*","matchCriteriaId":"812BDEE8-05CD-40A7-9BF0-263C5AE9024F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0387.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4613","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8972","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-04/0387.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8972","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1579","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a connection to a high-numbered port, which generates an \"unknown connection data\" error."},{"lang":"es","value":"SAP GUI (Sapgui) 4.6D permite a atacantes remotos causar una denegación de servicio mediante una conexión a un puerto con un número alto, que genera un un error \"conexión de datos desconocida\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6:*:windows:*:*:*:*:*","matchCriteriaId":"E63EC32D-4655-4B26-9E1A-8E33257050F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6a:*:windows:*:*:*:*:*","matchCriteriaId":"D26797AD-F444-4918-AE21-11E9546C9FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6b:*:windows:*:*:*:*:*","matchCriteriaId":"8E59FDE0-8BF8-4BF3-AE4F-E7F810216A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6c:*:windows:*:*:*:*:*","matchCriteriaId":"33C7A581-C3CF-468F-8B06-1C9F227D5967"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6d:*:windows:*:*:*:*:*","matchCriteriaId":"4FCC8060-E285-43BA-9626-D9CB960A964D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0334.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3972","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8007","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-01/0334.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/3972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/8007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1580","sourceIdentifier":"cve@mitre.org","published":"2004-06-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347."},{"lang":"es","value":"Desbordamiento de enteros en imapparse.c de Cyrus IMAP server 1.4 y 2.1.10 permite a atacantes remotos ejecutar código arbitrario mediante un valor de longitud grande que facilita un ataque de desbordamiento de búfer, una vulnerabilidad distinta de CAN-2002-1347."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus_imap_server:1.4:*:*:*:*:*:*:*","matchCriteriaId":"82B7EED3-88ED-4959-9B0D-4593F82B482C"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus_imap_server:1.5.19:*:*:*:*:*:*:*","matchCriteriaId":"9651929E-7E3D-4967-B4EC-BC1D87386A5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus_imap_server:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"B03A2FFF-D736-436F-AB01-952C90CC88A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus_imap_server:2.0.16:*:*:*:*:*:*:*","matchCriteriaId":"686E6850-2FFB-4A83-9BBB-9C4FB456294E"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus_imap_server:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"EC21C9C1-C8A2-4879-A604-E1192438A847"},{"vulnerable":true,"criteria":"cpe:2.3:a:carnegie_mellon_university:cyrus_imap_server:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"FDF89521-977F-425A-BC5B-9D6F2F778125"}]}]}],"references":[{"url":"http://asg.web.cmu.edu/cyrus/download/imapd/changes.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000557","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2002/dsa-215","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/740169","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/301864","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6298","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10744","source":"cve@mitre.org"},{"url":"http://asg.web.cmu.edu/cyrus/download/imapd/changes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2002/dsa-215","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/740169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/301864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/10744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2002-1581","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view arbitrary files via .. (dot dot) sequences and a null byte (%00) in the configLanguage parameter."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en nph-mr.cgi en Mailreader.com 2.3.20 a 2.3.31 permite a atacantes remotos ver ficheros de su elección mediante secuencias .. (punto punto) y un byte nulo (%00) en el parámetro configLanguage"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailreader.com:mailreader.com:2.3.20:*:*:*:*:*:*:*","matchCriteriaId":"4973BA4E-9117-44F8-86AB-087378A6CC7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailreader.com:mailreader.com:2.3.21:*:*:*:*:*:*:*","matchCriteriaId":"204F09AB-0001-4B2F-8129-D63CBFEF0328"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailreader.com:mailreader.com:2.3.22:*:*:*:*:*:*:*","matchCriteriaId":"6384049E-8303-426F-BC5F-11FC4B2C2A0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailreader.com:mailreader.com:2.3.23:*:*:*:*:*:*:*","matchCriteriaId":"33E78F85-AC32-47D4-B7E0-CBF8183A4F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailreader.com:mailreader.com:2.3.24:*:*:*:*:*:*:*","matchCriteriaId":"7C8C4860-B717-42BB-8162-37F8E9EA7664"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailreader.com:mailreader.com:2.3.25:*:*:*:*:*:*:*","matchCriteriaId":"807B68CD-503D-4DD8-8D9E-8C5EF4A225C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailreader.com:mailreader.com:2.3.26:*:*:*:*:*:*:*","matchCriteriaId":"38FA70B9-4498-4F97-A6B5-46A10337D98A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailreader.com:mailreader.com:2.3.27:*:*:*:*:*:*:*","matchCriteriaId":"D293C206-3E79-49ED-9CC5-80631EF7D9EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailreader.com:mailreader.com:2.3.28:*:*:*:*:*:*:*","matchCriteriaId":"A6BE2D1D-826F-4647-ADB1-EE654FEB62A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailreader.com:mailreader.com:2.3.29:*:*:*:*:*:*:*","matchCriteriaId":"D160AC3B-E03D-4073-ADB3-5FC8309037E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailreader.com:mailreader.com:2.3.30:*:*:*:*:*:*:*","matchCriteriaId":"0A37F7F2-C147-4D04-83D0-421EDB1EF343"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailreader.com:mailreader.com:2.3.31:*:*:*:*:*:*:*","matchCriteriaId":"19CC1D27-027D-4032-B9CC-CD41ED085FD0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"http://mailreader.com/download/ChangeLog","source":"cve@mitre.org"},{"url":"http://mailreader.com/download/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-534","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10490.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/297428","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6055","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://mailreader.com/download/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mailreader.com/download/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10490.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/297428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1582","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in network.cgi."},{"lang":"es","value":"compose.cgi en Mailreader.com 2.3.30 y 2.3.31, cuando se usa Sendmail como Agente de Transferencia de Correo (MTA), permite a atacantes remotos ejecutar código arbitrario mediante metacaractéres de shell en la variable de configuración RealMail"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailreader.com:mailreader.com:2.3.30:*:*:*:*:*:*:*","matchCriteriaId":"0A37F7F2-C147-4D04-83D0-421EDB1EF343"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailreader.com:mailreader.com:2.3.31:*:*:*:*:*:*:*","matchCriteriaId":"19CC1D27-027D-4032-B9CC-CD41ED085FD0"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/10491.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mailreader.com/download/ChangeLog","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/297428","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6058","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/10491.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mailreader.com/download/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/297428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/6058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2002-1583","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument."},{"lang":"es","value":"Desbordamiento de búfer en sqllib/security/db2ckpw de IBM DB2 Universal Database 6.0 y 7.0 permite a usuarios locales ejecutar código de su elección mediante un nombre de usuario largo que se lee de un argumento de descriptor de fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:6.0:*:*:*:*:*:*:*","matchCriteriaId":"489B0F5D-2D6B-4599-BE7A-41A491E6318A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:7.0:*:linux:*:*:*:*:*","matchCriteriaId":"6EA810DB-104E-412A-8B6E-DBB5BEE743A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:7.1:*:linux:*:*:*:*:*","matchCriteriaId":"56D0096E-8145-4A36-BC18-A9C5C780D1A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*","matchCriteriaId":"80DE2026-D9F0-4AAA-97E6-F4FB0EBDB265"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:*:windows:*:*:*:*:*","matchCriteriaId":"B4EC24E8-4E4F-4D93-88E6-B27FEB663823"}]}]}],"references":[{"url":"http://www.iss.net/security_center/static/9078.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4817","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/alerts/2002/May/1004352.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.iss.net/security_center/static/9078.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/4817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/alerts/2002/May/1004352.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-0105","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ServerMask 2.2 and earlier does not obfuscate (1) ETag, (2) HTTP Status Message, or (3) Allow HTTP responses, which could tell remote attackers that the web server is an IIS server."},{"lang":"es","value":"ServerMask 2.2 y anteriores no ofuscan respuestas (1) ETag, (2) Mensaje de Estado HTTP, o (3) Permitir respuestas HTTP, lo que podría decir a atacantes remotos que el servidor es IIS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:port80_software:servermask:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"563FA27F-F5EA-475E-B774-98205B0D8397"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109215441332682&w=2","source":"cve@mitre.org"},{"url":"http://www.corsaire.com/advisories/c030224-001.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16947","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109215441332682&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.corsaire.com/advisories/c030224-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0119","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attackers to directly connect to the daemon and conduct unauthorized activities."},{"lang":"es","value":"El demonio secldapclntd en AIX 4.3, 5.1 y 5.2usa un socket de Internet cuando se comunica con el loadmodule, lo que permite que atacantes remotos se conecten directamente al demonio y realicen actividades no autorizadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"}]}]}],"references":[{"url":"http://secunia.com/advisories/8221","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/4699c03b46f2d4f68525678c006d45ae/85256a3400529a8685256cde0008ddde?OpenDocument","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/624713","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/7264","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/8221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/4699c03b46f2d4f68525678c006d45ae/85256a3400529a8685256cde0008ddde?OpenDocument","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/624713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/7264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-0170","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in ftpd in IBM AIX 5.2, when configured to use Kerberos 5 for authentication, allows remote attackers to gain privileges via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad desconocida en ftpd en IBM AIX 5.2, cuando se configura para utilizar autenticación Kerberos 5, permite a atacantes remotos ganar privilegios mediante vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"}]}]}],"references":[{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2003.0469.1","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IY42424","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4878","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/7346","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11823","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2003.0469.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IY42424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/7346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0175","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SGI IRIX before 6.5.21 allows local users to cause a denial of service (kernel panic) via a certain call to the PIOCSWATCH ioctl."},{"lang":"es","value":"SGI, IRIX anteriores a la 6.5.21 permiten que usuarios locales provoquen una denegación de servicio (kernel panic) mediante una cierta llamada al ioctl PIOCSWATCH."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2f:*:*:*:*:*:*:*","matchCriteriaId":"BB113626-38E2-4C42-A6A9-4BBDA0AC4A96"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:*","matchCriteriaId":"772E3C7E-9947-414F-8642-18653BB048E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*","matchCriteriaId":"8D51EC29-8836-4F87-ABF8-FF7530DECBB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*","matchCriteriaId":"518B7253-7B0F-4A0A-ADA7-F3E3B5AAF877"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4f:*:*:*:*:*:*:*","matchCriteriaId":"3CEC8518-4DBA-43AA-90B8-279F2DD4A2DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4m:*:*:*:*:*:*:*","matchCriteriaId":"3F8286F3-DF0E-4D8E-A27D-0C5182D5870C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5f:*:*:*:*:*:*:*","matchCriteriaId":"B306EE13-57CF-43A6-AA72-C641C53A2A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5m:*:*:*:*:*:*:*","matchCriteriaId":"6291BEE1-73D2-4976-B065-E135880F73B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6f:*:*:*:*:*:*:*","matchCriteriaId":"621C31D9-8102-4F2D-8008-B32020F0B831"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6m:*:*:*:*:*:*:*","matchCriteriaId":"3FF5E9B8-62F9-4A6F-9C0C-551980981366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7f:*:*:*:*:*:*:*","matchCriteriaId":"F883CF73-CDA0-4B50-98E6-1B5DE0A4A816"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7m:*:*:*:*:*:*:*","matchCriteriaId":"C6C9F200-68AC-4B45-8AFC-F604429FDF3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8f:*:*:*:*:*:*:*","matchCriteriaId":"1742BF2B-63C7-441D-9A01-DE65C95911D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8m:*:*:*:*:*:*:*","matchCriteriaId":"D30B7C42-CEE8-4377-957C-BCCE35C071A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9f:*:*:*:*:*:*:*","matchCriteriaId":"B859D7F7-B0A6-4148-8146-F651ED3F99AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9m:*:*:*:*:*:*:*","matchCriteriaId":"59EC5B1A-309A-4DE2-A197-F4DC07A8DC3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10f:*:*:*:*:*:*:*","matchCriteriaId":"0E7D3C74-CDD2-4DFF-A331-007E1669752A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10m:*:*:*:*:*:*:*","matchCriteriaId":"03FA10EA-F6E5-4A89-AC37-40FF6A147528"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11f:*:*:*:*:*:*:*","matchCriteriaId":"7C8E0DF6-D9C2-4DBC-9997-B5BFC6DEC9F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11m:*:*:*:*:*:*:*","matchCriteriaId":"D1E1480B-2183-45AD-B63F-16DEC9BF0398"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12f:*:*:*:*:*:*:*","matchCriteriaId":"2D08345C-F945-410C-9DCB-8C358178F975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12m:*:*:*:*:*:*:*","matchCriteriaId":"8764BE36-9377-486C-9198-DF79A5A60679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13f:*:*:*:*:*:*:*","matchCriteriaId":"25243FA1-7AF7-41D4-8FAD-A5AB289E120D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*","matchCriteriaId":"94D89730-AA61-4FC9-A6AB-0574CA51EE75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*","matchCriteriaId":"A7B59E7C-B059-41CD-AE33-E9623ADA12BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*","matchCriteriaId":"72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16f:*:*:*:*:*:*:*","matchCriteriaId":"27532639-37CD-4BD2-AE48-F741009D3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16m:*:*:*:*:*:*:*","matchCriteriaId":"F83879DE-1BD7-4FF7-ACC6-5B119DB09BF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17:*:*:*:*:*:*:*","matchCriteriaId":"8BE3F77A-909E-4947-A808-BCAB7F96A108"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17f:*:*:*:*:*:*:*","matchCriteriaId":"EED22734-8AAC-4897-BB71-438E19B8A005"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*","matchCriteriaId":"FEA9C28F-18E6-4199-9740-FAB00563EBF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18:*:*:*:*:*:*:*","matchCriteriaId":"A4F1E3C7-0FDD-46E1-8748-6A5FF669C95C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18f:*:*:*:*:*:*:*","matchCriteriaId":"C6E63313-9533-478D-ACC0-C050FBA3EACF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18m:*:*:*:*:*:*:*","matchCriteriaId":"EA0A7D5D-BDD9-45F8-9BE7-3B01D70C8CC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19:*:*:*:*:*:*:*","matchCriteriaId":"2334FD6C-444F-4042-AF6D-D654C18C9950"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19f:*:*:*:*:*:*:*","matchCriteriaId":"61370032-AB21-4E93-B143-A92A342AFB1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19m:*:*:*:*:*:*:*","matchCriteriaId":"C833FC19-D913-4C62-B14A-E1B3845D0275"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20:*:*:*:*:*:*:*","matchCriteriaId":"1EFCB9A7-9121-4FAE-B6FA-96C3A023ACEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20f:*:*:*:*:*:*:*","matchCriteriaId":"B90188D6-6C57-45C2-B266-50D65B4D33E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20m:*:*:*:*:*:*:*","matchCriteriaId":"39DD839E-159B-43FD-A1E6-A22EE658BEE0"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030603-01-P","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/142228","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/7868","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008770","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12241","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20030603-01-P","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/142228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/7868","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12241","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0193","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names (\"word$$.html\")."},{"lang":"es","value":"msxlsview.sh en xlsview de catdoc 0.91 y anteriores permiten a usuarios locales sobreescribir ficheros de su elección mediante un ataque de enlaces simbólicos en ficheros temporales con nombres predecibles (\"word$$.html\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:catdoc:catdoc:*:*:*:*:*:*:*:*","versionEndIncluding":"0.91","matchCriteriaId":"1E83122B-3A0B-4467-A8E3-4E0043BA9C46"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=183525","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13021/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13022/","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-575","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11193","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11560","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16335","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=183525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13021/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13022/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16335","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0202","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) halstead and (2) gather_stats scripts in metrics 1.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files."},{"lang":"es","value":"Los scripts de metrics 1.0 halstead y gather_stats permiten a usuarios locales sobreescribir ficheros arbitrarios mediante un ataque de enlaces simbólicos (symlink attack) sobre ficheros temporales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brian_renaud:metrics:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1F3E22B5-424B-481C-BDEC-96013B6AEE76"}]}]}],"references":[{"url":"http://www.debian.org/security/2003/dsa-279","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/7293","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11734","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/7293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0257","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the printer capability for IBM AIX .3, 5.1, and 5.2 allows local users to gain printq or root privileges."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la capacídad de impresión de IBM AIX .3, 5.1 y 5.2 pemite a usuarios locales ganar privilegios de printq o de root"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11ACD012-F05F-45CD-A170-96CBAA42FFE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"55919E74-09E7-44BA-9941-D1B69BB1692F"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"45F3C5D8-8BC3-44EB-917A-D0BA051D3D9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"}]}]}],"references":[{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2003.0660.1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12000","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2003.0660.1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12000","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0368","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nokia Gateway GPRS support node (GGSN) allows remote attackers to cause a denial of service (kernel panic) via a malformed IP packet with a 0xFF TCP option."},{"lang":"es","value":"Nokia Gateway GPRS support node (GGSN) permite que atacantes remotos provoquen una denegación de servicio (kernel panic) mediante un paquete IP mal construido (con opción TCP 0xFF)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nokia:ggsn:release_1:*:*:*:*:*:*:*","matchCriteriaId":"A77D4252-0D13-41E3-9BCB-D83F3A7238B5"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2003/a060903-1.txt","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/924812","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/7854","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12221","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2003/a060903-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/924812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/7854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12221","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0441","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Orville Write (orville-write) 2.53 and earlier allow local users to gain privileges."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Orville Write (orville-write) 2.53 y anteriores permiten a usuarios locales ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:orville-write:orville-write:2.53:*:*:*:*:*:*:*","matchCriteriaId":"8C5BE07A-6AA5-4352-905A-D6E9B727A731"}]}]}],"references":[{"url":"http://www.debian.org/security/2003/dsa-326","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/7988","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12381","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/7988","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12381","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0444","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in GTKSee 0.5 and 0.5.1 allows remote attackers to execute arbitrary code via a PNG image of certain color depths."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en GTKSee 0.5 y 0.5.1 permite a atacantes remotos ejecutar código arbitrario mediante una imagen PNG de ciertas profundidades de color."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gtksee:gtksee:0.5:*:*:*:*:*:*:*","matchCriteriaId":"B796E3B8-2E6F-433A-857F-F21BB5FE9BD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gtksee:gtksee:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7C58563-E401-4B81-9002-C9721E8AD21B"}]}]}],"references":[{"url":"http://www.debian.org/security/2003/dsa-337","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8061","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12462","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12462","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0513","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions on a web application via \"%2e%2e\" (encoded dot dot) directory traversal sequences in a URL, which causes Internet Explorer to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application."},{"lang":"es","value":"Microsoft Internet Explorer permite a atacantes remotos saltarse las restriciones de cookies pretendidas en una aplicación web mediante secuencias de atravesamiento de directorios \"%2e%2e\" (punto punto codificado) en una URL, lo que hace que Internet Explorer envíe la cookie fuera de los subconjuntos de URL especificados, por ejemplo a una aplicación vulnerable que corre en el mismo servidor que la aplicación objetivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0514","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via \"%2e%2e\" (encoded dot dot) directory traversal sequences in a URL, which causes Safari to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application."},{"lang":"es","value":"Apple Safari permite a atacantes remotos saltarse las restriciones de cookies pretendidas en una aplicación web mediante secuencias de atravesamiento de directorios \"%2e%2e\" (punto punto codificado) en una URL, lo que hace que Safari envíe la cookie fuera de los subconjuntos de URL especificados, por ejemplo a una aplicación vulnerable que corre en el mismo servidor que la aplicación objetivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0533","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via a packet that causes the DsRolerUpgradeDownlevelServer function to create long debug entries for the DCPROMO.LOG log file, as exploited by the Sasser worm."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en ciertas funciones de servicio de Active Directory en LSASRV.DLL de  Local Security Authority Subsystem Service (LSASS) en Microsoft Windows NT 4.0 SP6a, 2000 SP2 a SP4, XP SP1, Server 2003, NetMeeting, Windows 98, y Windows ME permite a atacantes remotos ejecutar código arbitrario mediante un paquete que causa que la función DsRolerUpgradeDownlevelServer cree entradas de depuración largas en el fichero DCPROMO.LOG, como las explotadas por el gusano Sasser."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:netmeeting:*:*:*:*:*:*:*:*","matchCriteriaId":"C85E1F3F-1839-4EB9-BF31-E29194F596CA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*","matchCriteriaId":"330B6798-5380-44AD-9B52-DF5955FA832C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:*:*:*:*","matchCriteriaId":"14F55877-A759-4C8A-84D5-70508E449799"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*","matchCriteriaId":"B9687E6C-EDE9-42E4-93D0-C4144FEC917A"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020069.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108325860431471&w=2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20040413C.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/753212","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10108","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15699","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A883","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A898","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A919","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020069.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108325860431471&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20040413C.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/753212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0592","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via \"%2e%2e\" (encoded dot dot) directory traversal sequences in a URL, which causes Konqueror to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application."},{"lang":"es","value":"Konqueror en KDE 3.1.3 y anteriores (kdelibs) permite a atacantes remotos saltarse las restriciones de cookies pretendidas en una aplicación web mediante secuencias de atravesamiento de directorios \"%2e%2e\" (punto punto codificado) en una URL, lo que hace que Konqueror envíe la cookie fuera de los subconjuntos de URL especificados, por ejemplo a una aplicación vulnerable que corre en el mismo servidor que la aplicación objetivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"417F34FB-A6B0-4090-BDC9-6D4C1BF0D3D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D435E39F-4F70-481B-9225-B072B79BEB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8AD68BAB-8945-4A22-938E-12C01D0111D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7B3220BF-B0AF-4C90-89BD-B425EE58021D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA53FB7A-AF7F-45B2-AF23-11B1FC4EC289"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"619EB7F6-8694-4344-A4C9-A35DA58391AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7FED2DFC-592C-4FD3-B0B7-C670C78F56DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0F7BAE27-7AB1-4DBD-98AD-6109F0D9A458"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AF8A54F6-96A9-44B8-97C8-50DA7276708D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1001754B-8EDB-41A2-9D5D-6E2A2B556DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror_embedded:0.1:*:*:*:*:*:*:*","matchCriteriaId":"68C3DE36-4687-4157-8C7F-223B289B9A8B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-459","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:022","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-074.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A823","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-074.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0593","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera allows remote attackers to bypass intended cookie access restrictions on a web application via \"%2e%2e\" (encoded dot dot) directory traversal sequences in a URL, which causes Opera to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application."},{"lang":"es","value":"Opera permite a atacantes remotos saltarse las restriciones de cookies pretendidas en una aplicación web mediante secuencias de atravesamiento de directorios \"%2e%2e\" (punto punto codificado) en una URL, lo que hace que Opera envíe la cookie fuera de los subconjuntos de URL especificados, por ejemplo a una aplicación vulnerable que corre en el mismo servidor que la aplicación objetivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CECFBC71-7814-4A24-A918-C593673727B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:*","matchCriteriaId":"B4F51D99-C77D-4DB6-8D4B-DF1CE9078543"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:*","matchCriteriaId":"FAA91E77-301C-48F6-9A57-D5FDCEF743BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:*","matchCriteriaId":"1C49DDEF-681C-4A34-9FF8-17249C42842D"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:*","matchCriteriaId":"EF365891-F3FA-4740-94B2-01F85254A2F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E42B4261-C511-4F3A-8596-6BD4E343DC31"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:*","matchCriteriaId":"B8D681B3-73E6-4257-84B4-DE83F6D659B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:*","matchCriteriaId":"8BF4EF8B-18CA-417C-BA30-024EE25B6AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:*","matchCriteriaId":"D9E5F2A5-F50F-4085-AB7D-8C91121A429A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:*","matchCriteriaId":"3E90912E-0CF8-404B-9E86-461497C65A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.05:*:*:*:*:*:*:*","matchCriteriaId":"9E19DD71-9447-4946-931F-4866537C8BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.06:*:*:*:*:*:*:*","matchCriteriaId":"54075890-6E0C-4AB7-8BD5-2023419CC251"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:6.10:*:*:*:*:*:*:*","matchCriteriaId":"007C7237-022A-441E-80F1-B87E9F1D499E"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D7C35850-B79C-4EE4-A6F2-CC5D2304724B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta1:*:*:*:*:*:*","matchCriteriaId":"50B797C8-3290-4278-9D4B-A15A14FB8D3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.0:beta2:*:*:*:*:*:*","matchCriteriaId":"E10F658D-D2E4-4789-8172-F8842C3EEA05"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.01:*:*:*:*:*:*:*","matchCriteriaId":"55B110B5-ADE5-46AB-8BF1-AF61A0ECE5D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.02:*:*:*:*:*:*:*","matchCriteriaId":"E7C6479D-4E40-4ED0-9A9D-9725CF3F0DB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.03:*:*:*:*:*:*:*","matchCriteriaId":"81687D99-7444-4205-A7BE-992CC758675F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.10:*:*:*:*:*:*:*","matchCriteriaId":"D75C4301-68E9-4A10-B9C5-711252BF629B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.11:*:*:*:*:*:*:*","matchCriteriaId":"CC690371-3326-421E-8BAC-14F48840671B"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.20:*:*:*:*:*:*:*","matchCriteriaId":"6BE50982-8026-466C-9F51-867425C9986F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.21:*:*:*:*:*:*:*","matchCriteriaId":"B85C5F65-B814-4BF5-AB43-D0CFFE8175A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.22:*:*:*:*:*:*:*","matchCriteriaId":"8B0FAFA5-D27A-4F57-8B25-3E98DBF279A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.23:*:*:*:*:*:*:*","matchCriteriaId":"A8F6644C-97E6-4023-9C5C-5C1E1B0B55D7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2003-0594","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via \"%2e%2e\" (encoded dot dot) directory traversal sequences in a URL, which causes Mozilla to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application."},{"lang":"es","value":"Mozilla permite a atacantes remotos saltarse las restriciones de cookies pretendidas en una aplicación web mediante secuencias de atravesamiento de directorios \"%2e%2e\" (punto punto codificado) en una URL, lo que hace que Mozilla envíe la cookie fuera de los subconjuntos de URL especificados, por ejemplo a una aplicación vulnerable que corre en el mismo servidor que la aplicación objetivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A76ACC55-754D-4501-8312-5A4E10D053B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8987151-0901-4547-B750-5DC470BB9CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"53E60BCC-6D1C-489E-9F3B-9BE42B46704F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66A87ED8-9E1F-4C2C-B806-A41765081C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C795D86F-9B08-41FE-B82B-5BBB3DE6357D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"2637D552-4A3D-4867-B52A-ACCED8681AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CC237C8-CFE0-4128-B549-93CD16894E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*","matchCriteriaId":"6B8EA79A-8426-44CF-AF13-58F7EF8B6D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"367A5D46-0FF3-4140-9478-251363822E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CAA58EE9-05C7-4395-A8A4-5F54BE4C5DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C656A621-BE62-4BB8-9B25-A3916E60FA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F8DE4889-424F-4A44-8C14-9F18821CE961"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED69BEB9-8D83-415B-826D-9D17FB67976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9AE678D7-812D-4C55-91B0-F3AC6BE0CD58"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:021","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-112.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A873","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A917","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9826","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-112.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0601","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Workgroup Manager in Apple Mac OS X Server 10.2 through 10.2.6 does not disable a password for a new account before it is saved for the first time, which allows remote attackers to gain unauthorized access via the new account before it is saved."},{"lang":"es","value":"Workgroup Manager en Apple Mac OS X Server 10.2 a 10.2.6 no deshabilita una contraseña para una cuenta nueva antes de que sea guardado por primera vez, lo que permite a atacantes remotos ganar acceso no autorizado mediante la nueva cuenta antes de que sea guardada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=25631","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8266","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12728","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=25631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12728","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0607","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in xconq 7.4.1 allows local users to become part of the \"games\" group via the (1) USER or (2) DISPLAY environment variables."},{"lang":"es","value":"Desbordamiento de búfer en xconq 7.4.1 permite a usuarios locales convertirse en parte del grupo \"games\" mediante las variables de entorno USER y DISPLAY."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stanley_t._shebs:xconq:7.4.1:*:*:*:*:*:*:*","matchCriteriaId":"49589A1A-81AF-4566-93B2-A8185C47058E"}]}]}],"references":[{"url":"http://www.debian.org/security/2003/dsa-354","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8307","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12765","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12765","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0612","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in main.c for Crafty 19.3 allow local users to gain group \"games\" privileges via long command line arguments to crafty.bin."},{"lang":"es","value":"Desbordamiento de búfer en main.c de Crafty 19.3 permite a usuarios locales ganar privilegios del grupo \"games\" mediante argumentos de línea de comandos largos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:robert_hyatt:crafty:19.3:*:*:*:*:*:*:*","matchCriteriaId":"15A671B0-1573-459C-B51B-048E2A573402"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=203541","source":"cve@mitre.org"},{"url":"http://packages.debian.org/changelogs/pool/non-free/c/crafty/crafty_19.15-1/changelog.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/9577/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009393","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009398","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/357601","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9893","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13017","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15501","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=203541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packages.debian.org/changelogs/pool/non-free/c/crafty/crafty_19.15-1/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/9577/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009398","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/357601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15501","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0618","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obtain sensitive information about files for which the user does not have appropriate permissions."},{"lang":"es","value":"Múltiples vulnerabilidades en suidperl 5.6.1 y anteriores permiten a un usuario local obtener información sensible sobre ficheros para los que el usuario no tiene permisos adecuados."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug:\nhttps://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=114923\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw.  More information regarding issue severity can be found here:\nhttp://www.redhat.com/security/updates/classification/\n\nThis issue does not affect Red Hat Enterprise Linux 4.","lastModified":"2006-09-19T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl:suidperl:*:*:*:*:*:*:*:*","matchCriteriaId":"6F6CF2C3-FCBD-43C0-BB7E-F3F0A2C444E8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=203426","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-431","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9543","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15012","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=203426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0648","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code."},{"lang":"es","value":"Múltiples desbordamientos de búfer en vfte, basado en fte, anteriores a 0.50, permite a usuarios locales ejecutar código arbitrario"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fte:fte_text_editor:*:*:*:*:*:*:*:*","matchCriteriaId":"835060B0-8E64-4F52-A0C2-2B9374EDC2BF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"http://secunia.com/advisories/11290","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009655","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009656","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-472","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/354838","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/900964","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10041","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15726","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/354838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/900964","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0663","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the Local Security Authority Subsystem Service (LSASS) in Windows 2000 domain controllers allows remote attackers to cause a denial of service via a crafted LDAP message."},{"lang":"es","value":"Vulnerabilidad desconocida en Local Security Authority Subsystem Service (LSASS) en controladores de dominio Windows 2000 permite a atacantes remotos causar una denegación de servicio mediante un mensaje LDAP elaborado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/639428","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10114","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15700","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1016","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/639428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0687","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2023-11-07T01:56:20.970","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate has been revoked by its Candidate Numbering Authority (CNA) because it was internally assigned to a problem that was not reachable (the affected routine was not used by the software).  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2003-0696","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The getipnodebyname() API in AIX 5.1 and 5.2 does not properly close sockets, which allows attackers to cause a denial of service (resource exhaustion)."},{"lang":"es","value":"La API getipnodebyname() en AIX 5.1 y 5.2 no cierra adecuadamente los sockets, lo que permite a atacantes causar una denegación de servicio (agotamiento de recursos)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/8738","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13328","source":"cve@mitre.org"},{"url":"https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=7&heading=AIX51&topic=SECURITY&month=200310&label=getipnodebyname%28%29+API+does+not+close+sockets.&date=20031001&bulletin=datafile150755&embed=true","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/8738","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=7&heading=AIX51&topic=SECURITY&month=200310&label=getipnodebyname%28%29+API+does+not+close+sockets.&date=20031001&bulletin=datafile150755&embed=true","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0700","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The C-Media PCI sound driver in Linux before 2.4.22 does not use the get_user function to access userspace in certain conditions, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0699."},{"lang":"es","value":"El controlador de sonido C-Media PCI para Linux anteriores a 2.4.22 no utliliza la función get_user para acceder al espacio de usuario en ciertas condiciones, lo cual cruza límites de seguridad y puede facilitar la explotación de vulnerabilidades, una vulnerabilidad diferente de CAN-2004-0699."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.21","matchCriteriaId":"E589A4E5-99D5-48B4-836A-0B41790FBD4E"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2003-238.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-044.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A401","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-238.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A401","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0718","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing XML elements with a large number of attributes."},{"lang":"es","value":"El Manejador de Mensajes WebDAV de Internet Information Server (IIS) 5.0, 5.1, y 6.0 permite a atacantes remotos causar una denegación de servicio (consumición de memoria y CPU), caída de aplicación mediante un mensaje XML conteniendo elementos XML con un gran número de atributos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F7C954A7-FF84-4DEB-8728-5B207F374ECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_services:5.0:*:*:*:*:*:*:*","matchCriteriaId":"413C07EA-139F-4B7D-A58B-835BD2591FA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109762641822064&w=2","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-030","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17645","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17656","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1330","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1427","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4767","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109762641822064&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17656","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4767","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0719","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets."},{"lang":"es","value":"Desbordamiento de búfer en la implementación del protocolo Private Communications Transport (PCT) en la librería SSL de Microsoft, usada en Microsoft Windows NT 4.0 SP6a, 2000 SP2 a SP4, XP SP1, Server 2003, NetMeeting, Windows 98, y Windows ME."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:netmeeting:*:*:*:*:*:*:*:*","matchCriteriaId":"C85E1F3F-1839-4EB9-BF31-E29194F596CA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*","matchCriteriaId":"330B6798-5380-44AD-9B52-DF5955FA832C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:*:*:*:*","matchCriteriaId":"14F55877-A759-4C8A-84D5-70508E449799"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*","matchCriteriaId":"B9687E6C-EDE9-42E4-93D0-C4144FEC917A"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/586540","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/361836","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://xforce.iss.net/xforce/alerts/id/168","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1093","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A889","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A903","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A951","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/586540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/361836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://xforce.iss.net/xforce/alerts/id/168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A951","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0781","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in ecartis before 1.0.0 does not properly validate user input, which allows attackers to obtain mailing list passwords."},{"lang":"es","value":"Vulnerabilidad desconocida en ecartis anteriores a 1.0.0 no validad adecuadamente datos introducidos por el usuario, lo que permite a atacantes obtener contraseñas de listas de correo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"758B78FC-4A81-494F-955B-1C3E1A658736"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-467","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12929","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0782","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in ecartis before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code."},{"lang":"es","value":"Mültiples desbordamientos de búfer en ecartis anteriores a 1.0.0 permite a atacantes causar una denegación de servicio y posiblemente ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"758B78FC-4A81-494F-955B-1C3E1A658736"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-467","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12928","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0796","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in rpc.mountd SGI IRIX 6.5.18 through 6.5.22 allows remote attackers to mount from unprivileged ports even with the -n option disabled."},{"lang":"es","value":"Vulnerabilidad desconocida en rpc.mountd de SGI IRIX 6.5.18 a 6.5.22 permite a atacantes remotos montar de puertos no privilegiados incluso con la opción -n deshabilitada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17f:*:*:*:*:*:*:*","matchCriteriaId":"EED22734-8AAC-4897-BB71-438E19B8A005"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*","matchCriteriaId":"FEA9C28F-18E6-4199-9740-FAB00563EBF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18f:*:*:*:*:*:*:*","matchCriteriaId":"C6E63313-9533-478D-ACC0-C050FBA3EACF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18m:*:*:*:*:*:*:*","matchCriteriaId":"EA0A7D5D-BDD9-45F8-9BE7-3B01D70C8CC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19f:*:*:*:*:*:*:*","matchCriteriaId":"61370032-AB21-4E93-B143-A92A342AFB1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19m:*:*:*:*:*:*:*","matchCriteriaId":"C833FC19-D913-4C62-B14A-E1B3845D0275"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20f:*:*:*:*:*:*:*","matchCriteriaId":"B90188D6-6C57-45C2-B266-50D65B4D33E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20m:*:*:*:*:*:*:*","matchCriteriaId":"39DD839E-159B-43FD-A1E6-A22EE658BEE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21f:*:*:*:*:*:*:*","matchCriteriaId":"CE9CF799-3B52-4694-A706-37FA08EC9ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21m:*:*:*:*:*:*:*","matchCriteriaId":"4E5A5AD7-F8AD-448F-8125-ACB0E7BA0A4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.22:*:*:*:*:*:*:*","matchCriteriaId":"C63CC83D-BF18-42BF-A5DF-3516508B072F"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20031102-01-P.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20031102-02-P.asc","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9085","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13807","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20031102-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20031102-02-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0797","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in rpc.mountd in SGI IRIX 6.5 through 6.5.22 allows remote attackers to cause a denial of service (process death) via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad desconocida en rpc.mountd de SGI IRX 6.5  a 6.5.22 permite a atacantes remotos causar una denegación de servicio (muerte del proceso) mediante vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17f:*:*:*:*:*:*:*","matchCriteriaId":"EED22734-8AAC-4897-BB71-438E19B8A005"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*","matchCriteriaId":"FEA9C28F-18E6-4199-9740-FAB00563EBF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18:*:*:*:*:*:*:*","matchCriteriaId":"A4F1E3C7-0FDD-46E1-8748-6A5FF669C95C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18f:*:*:*:*:*:*:*","matchCriteriaId":"C6E63313-9533-478D-ACC0-C050FBA3EACF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18m:*:*:*:*:*:*:*","matchCriteriaId":"EA0A7D5D-BDD9-45F8-9BE7-3B01D70C8CC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19:*:*:*:*:*:*:*","matchCriteriaId":"2334FD6C-444F-4042-AF6D-D654C18C9950"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19f:*:*:*:*:*:*:*","matchCriteriaId":"61370032-AB21-4E93-B143-A92A342AFB1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19m:*:*:*:*:*:*:*","matchCriteriaId":"C833FC19-D913-4C62-B14A-E1B3845D0275"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20:*:*:*:*:*:*:*","matchCriteriaId":"1EFCB9A7-9121-4FAE-B6FA-96C3A023ACEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20f:*:*:*:*:*:*:*","matchCriteriaId":"B90188D6-6C57-45C2-B266-50D65B4D33E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20m:*:*:*:*:*:*:*","matchCriteriaId":"39DD839E-159B-43FD-A1E6-A22EE658BEE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21:*:*:*:*:*:*:*","matchCriteriaId":"E2C1514F-A4DD-462C-9955-2AD8CF5B7F14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21f:*:*:*:*:*:*:*","matchCriteriaId":"CE9CF799-3B52-4694-A706-37FA08EC9ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21m:*:*:*:*:*:*:*","matchCriteriaId":"4E5A5AD7-F8AD-448F-8125-ACB0E7BA0A4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.22:*:*:*:*:*:*:*","matchCriteriaId":"C63CC83D-BF18-42BF-A5DF-3516508B072F"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20031102-01-P.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20031102-02-P.asc","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8520","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9084","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13808","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20031102-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20031102-02-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13808","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0806","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of a domain, allows remote attackers to execute arbitrary code."},{"lang":"es","value":"Desbordamiento de búfer en el proceso de inicio de sesión de Windows (winlogon) en Microsoft Windows NT 4.0 SP6a, 2000 SP2 a SP4, y XP SP1, cuando lo hace un miembro de un dominio, permite a atacantes remotos ejecutar código de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*","matchCriteriaId":"330B6798-5380-44AD-9B52-DF5955FA832C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:*:*:*:*","matchCriteriaId":"14F55877-A759-4C8A-84D5-70508E449799"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*","matchCriteriaId":"B9687E6C-EDE9-42E4-93D0-C4144FEC917A"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/471260","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10126","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15702","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1054","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A895","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A896","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/471260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A896","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0807","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request."},{"lang":"es","value":"Desbordamiento de búfer en los componentes (1) Servicios de Internet COM y (2) Proxy RPC sobre HTTP de Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, y Server 2003 permite a atacantes remotos causar una denegación de servicio mediante una petición especialmente elaborada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://securitytracker.com/alerts/2004/Apr/1009762.html","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-115.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/698564","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10123","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15709","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1030","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A969","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A995","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Apr/1009762.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-115.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/698564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0814","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's \"href\" to the malicious Javascript, then calling execCommand(\"Refresh\") to refresh the page, aka BodyRefreshLoadsJPU or the \"ExecCommand Cross Domain\" vulnerability."},{"lang":"es","value":"Internet Explorer 6 SP1 y anteriores permiten que atacantes remotos se salten restricciones y ejecuten Javascript fijando el \"\"href\"\" al Javascript malicioso y a continuación llamando al comando execCommand(\"\"Refresh\"\"). También se la conoce como vulnerabilidad \"\"ExecCommand Cross Domain\"\" o BodyRefreshLoadsJPU ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://secunia.com/advisories/10192","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1007687","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0177.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/326412","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.safecenter.net/liudieyu/BodyRefreshLoadsJPU/BodyRefreshLoadsJPU-Content.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/337086","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A335","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A341","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A342","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A343","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A344","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A349","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A392","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1007687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/326412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.safecenter.net/liudieyu/BodyRefreshLoadsJPU/BodyRefreshLoadsJPU-Content.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/337086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0815","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the createTextRange method and using CreateLink, as demonstrated using LinkillerSaveRef, LinkillerJPU, and Linkiller, or (2) modifying the createRange method and using the FIND dialog to select text, as demonstrated using Findeath, aka the \"Function Pointer Override Cross Domain\" vulnerability."},{"lang":"es","value":"Internet Explorer 6 SP1 y anteriores permite que atacantes remotos se salten restricciones de seguridad y lean ficheros arbitrario mediante (1) modificando el método createTextRange  y usando CreateLink, como se demuestra usando LinkillerSaveRef, LinkillerJPU, yLinkiller. Y (2) modificando el método createRange  y usando el diálogo FIND para seleccionar texto,  como se demuestra usando Findeath. También se la conoce como vulnerabilidad \"\"Function Pointer Override Cross Domain\"\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=106321757619047&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106322542104656&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10192","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1007687","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-021.shtml","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0150.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7888","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7889","source":"cve@mitre.org"},{"url":"http://www.safecenter.net/UMBRELLAWEBV4/Linkiller/Linkiller-Content.HTM","source":"cve@mitre.org"},{"url":"http://www.safecenter.net/UMBRELLAWEBV4/LinkillerJPU/LinkillerJPU-Content.HTM","source":"cve@mitre.org"},{"url":"http://www.safecenter.net/UMBRELLAWEBV4/LinkillerSaveRef/LinkillerSaveRef-Content.HTM","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/337086","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9014","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13676","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A351","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A352","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A353","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A356","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A357","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A359","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A472","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106321757619047&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=106322542104656&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1007687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-021.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0150.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.safecenter.net/UMBRELLAWEBV4/Linkiller/Linkiller-Content.HTM","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.safecenter.net/UMBRELLAWEBV4/LinkillerJPU/LinkillerJPU-Content.HTM","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.safecenter.net/UMBRELLAWEBV4/LinkillerSaveRef/LinkillerSaveRef-Content.HTM","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/337086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A472","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0816","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, (2) using the window.open method to load a file: URL containing Javascript, as demonstrated using WsOpenFileJPU, (3) setting the href property in the base tag for the _search window, as demonstrated using WsBASEjpu, (4) loading the search window into an Iframe, as demonstrated using WsFakeSrc, (5) caching a javascript: URL in the browser history, then accessing that URL in the same frame as the target domain, as demonstrated using WsOpenJpuInHistory, NAFjpuInHistory, BackMyParent, BackMyParent2, and RefBack, aka the \"Script URLs Cross Domain\" vulnerability."},{"lang":"es","value":"Internet Explorer 6 SP1 y anteriores permite que atacantes remotos se salten restricciones de seguridad mediante: (1) uso del método NavigateAndFind  para descargar un fichero, (2) uso del método window.open  para cargar un fichero, (3) fijando la propriedad href en el tag base para la ventana _search, (4) cargando la venta de búsqueda en un Iframe, (5) capturando una URL de javascript en el histórico del navegador."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=106321638416884&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106321693517858&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106321781819727&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106321882821788&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106322063729496&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106322240132721&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10192","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1007687","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0146.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/652452","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/771604","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.safecenter.net/UMBRELLAWEBV4/NAFfileJPU/NAFfileJPU-Content.htm","source":"cve@mitre.org"},{"url":"http://www.safecenter.net/UMBRELLAWEBV4/WsOpenFileJPU/WsOpenFileJPU-Content.HTM","source":"cve@mitre.org"},{"url":"http://www.safecenter.net/liudieyu/BackMyParent/BackMyParent-content.htm","source":"cve@mitre.org"},{"url":"http://www.safecenter.net/liudieyu/BackMyParent2/BackMyParent2-Content.HTM","source":"cve@mitre.org"},{"url":"http://www.safecenter.net/liudieyu/NAFjpuInHistory/NAFjpuInHistory-Content.HTM","source":"cve@mitre.org"},{"url":"http://www.safecenter.net/liudieyu/RefBack/RefBack-Content.HTM","source":"cve@mitre.org"},{"url":"http://www.safecenter.net/liudieyu/WsBASEjpu/WsBASEjpu-Content.HTM","source":"cve@mitre.org"},{"url":"http://www.safecenter.net/liudieyu/WsFakeSrc/WsFakeSrc-Content.HTM","source":"cve@mitre.org"},{"url":"http://www.safecenter.net/liudieyu/WsOpenJpuInHistory/WsOpenJpuInHistory-Content.HTM","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/336937","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/337086","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A361","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A362","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A363","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A409","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A416","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A459","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A479","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106321638416884&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=106321693517858&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=106321781819727&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=106321882821788&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=106322063729496&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=106322240132721&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1007687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2003-09/0146.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/652452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/771604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.safecenter.net/UMBRELLAWEBV4/NAFfileJPU/NAFfileJPU-Content.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.safecenter.net/UMBRELLAWEBV4/WsOpenFileJPU/WsOpenFileJPU-Content.HTM","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.safecenter.net/liudieyu/BackMyParent/BackMyParent-content.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.safecenter.net/liudieyu/BackMyParent2/BackMyParent2-Content.HTM","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.safecenter.net/liudieyu/NAFjpuInHistory/NAFjpuInHistory-Content.HTM","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.safecenter.net/liudieyu/RefBack/RefBack-Content.HTM","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.safecenter.net/liudieyu/WsBASEjpu/WsBASEjpu-Content.HTM","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.safecenter.net/liudieyu/WsFakeSrc/WsFakeSrc-Content.HTM","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.safecenter.net/liudieyu/WsOpenJpuInHistory/WsOpenJpuInHistory-Content.HTM","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/336937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/337086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A479","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0817","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object."},{"lang":"es","value":"Internet Explorer 5.01 hasta la 6 SP1 permite que atacantes remotos se salten restricciones de seguirdad y lean ficheros arbitrarios mediante objetos XML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://secunia.com/advisories/10192","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9012","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A508","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A520","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A543","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A548","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A549","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A556","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A566","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0818","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings."},{"lang":"es","value":"Múltiples desbordamientos de enteros en la librería ASN.1 de Microsoft (MSASN1.DLL), usada en LSASS.EXE, CRYPT32.DLL, y otros ejecutables de Microsoft y librerías en Windows NT/2000/XP, permite a atacantes remotos ejecutar código arbitrario mediante codificaciones ASN.1 BER con campos de longitud muy largos que hace que se sobreescriban datos arbitrarios del montón."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*","matchCriteriaId":"E69D0E21-8C62-403E-8097-2CA403CBBB1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*","matchCriteriaId":"B127407D-AE50-4AFE-A780-D85B5AF44A2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*","matchCriteriaId":"5D42E51C-740A-4441-8BAF-D073111B984C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*","matchCriteriaId":"34ACB544-87DD-4D9A-99F0-A10F48C1EE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*","matchCriteriaId":"74AD256D-4BCE-41FB-AD73-C5C63A59A06D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*","matchCriteriaId":"B518E945-5FDE-4A37-878D-6946653C91F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*","matchCriteriaId":"B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107643836125615&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107643892224825&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=107650972617367&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=107650972723080&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/216324","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/583108","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-041A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-007","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A653","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A796","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A797","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A799","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107643836125615&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107643892224825&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=107650972617367&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=107650972723080&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/216324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/583108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-041A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A799","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0819","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol."},{"lang":"es","value":"Desbordamiento de búfer en el filtro H.323 Microsoft Internet Security and Acceleration Server 2000 permite a atacantes remotos ejecutar código arbitrario en el Servicio de Cortafuegos de Microsoft mediante cierto tráfico H.323, como se demostró por por la suite de pruebas del protocolo H.225 NISCC/OUSPG PROTOS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:proxy_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F7BF233-8DE6-4DC4-B9ED-5D4A180DD8B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:proxy_server:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"CE48AD5F-D719-4D39-ACE1-53D0FE5F6525"}]}]}],"references":[{"url":"http://secunia.com/advisories/10611","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2004-01.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/749342","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9406","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9408","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008698","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2004/006489/h323.htm","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-001","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A478","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2004-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/749342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2004/006489/h323.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A478","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0823","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by calling the window.moveBy method, aka HijackClick, a different vulnerability than CVE-2003-1027."},{"lang":"es","value":"Internet Explorer 6SP! y anteriores permite que atacantes remotos redirijan los comportamientos de copias/pegar y otras acciones del ratón a otras ventenas, mediante llamada al método window.moveBy. También se la conoce como vulnerabilidad HijackClick"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=106322197932006&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10192","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/413886","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/337086","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1006036","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A368","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A369","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A370","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A371","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A372","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A588","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A733","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106322197932006&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/413886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/337086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1006036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A733","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0825","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code."},{"lang":"es","value":"El Servicio de Nombres de Internet de Windows (WINS) en Microsoft Windows Server 2003, y posiblemente Windows NT y Server 2000 no valida adecuadamente la longitud de ciertos paquetes, lo que permite a ciertos paquetes causar una denegación de servicio y posiblemente ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:*:r2:x64:*:*:*:*:*","matchCriteriaId":"0A8D49FA-C8F8-4B59-BBCB-924CC105B371"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*","matchCriteriaId":"E69D0E21-8C62-403E-8097-2CA403CBBB1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*","matchCriteriaId":"B127407D-AE50-4AFE-A780-D85B5AF44A2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*","matchCriteriaId":"34ACB544-87DD-4D9A-99F0-A10F48C1EE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*","matchCriteriaId":"74AD256D-4BCE-41FB-AD73-C5C63A59A06D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*","matchCriteriaId":"B518E945-5FDE-4A37-878D-6946653C91F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"237D7C18-C8D6-4FDB-A160-FA17DD46A55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*","matchCriteriaId":"B5CAF64E-98AA-4813-A2A2-5AC3387CF230"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/o-077.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/445214","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3903","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9624","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-006","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15037","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A704","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A800","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A801","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A802","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-077.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/445214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A802","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0828","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in freesweep in Debian GNU/Linux 3.0 allows local users to gain \"games\" group privileges when processing environment variables."},{"lang":"es","value":"Desbordamiento de búfer en freesweep en Debian Linux 3.0 permite a usuarios locales ganar privilegios del grupo \"games\" cuando se procesan las variables de entorno."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gus_and_psilord:freesweep:0.88:*:*:*:*:*:*:*","matchCriteriaId":"74AD2B68-B2AB-4580-9B07-EC922192570B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gus_and_psilord:freesweep:0.90:*:*:*:*:*:*:*","matchCriteriaId":"EAD0F83F-E779-4DD4-9DD8-CEEB0AFFB373"}]}]}],"references":[{"url":"http://www.debian.org/security/2003/dsa-391","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8716","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13301","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13301","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0902","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in minimalist mailing list manager 2.4, 2.2, and possibly other versions, allows remote attackers to execute arbitrary commands."},{"lang":"es","value":"Vulnerabilidad desconocida en en el minimalist mailing list manager 2.4, 2.2, y posiblemente otras versiones, permite que atacantes remotos ejecuten comandos arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minimalist:minimalist:2.2:*:*:*:*:*:*:*","matchCriteriaId":"908AA41D-44A9-4A0A-8670-3A5FF24A3BD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:minimalist:minimalist:2.4:*:*:*:*:*:*:*","matchCriteriaId":"F5ED34B7-CF88-4A83-A67D-BC146F023FC1"}]}]}],"references":[{"url":"http://www.debian.org/security/2003/dsa-402","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2003/dsa-402","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-0903","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code via a malformed UDP response to a broadcast request."},{"lang":"es","value":"Desbordamiento de búfer en un componente de Microsoft Data Access Components (MDAC) 2.5 a 2.8 permite a atacantes remotos ejecutar código arbitrario mediante una respuesta UDP malformada a una petición de difusión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.5:*:*:*:*:*:*:*","matchCriteriaId":"49A5B686-0B8A-4904-8166-24D899D24ED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.6:*:*:*:*:*:*:*","matchCriteriaId":"01EAE3CC-D507-40A4-9198-873EE0E3DCE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.7:*:*:*:*:*:*:*","matchCriteriaId":"307B13E2-EB93-420B-B47E-0681864DC429"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:data_access_components:2.8:*:*:*:*:*:*:*","matchCriteriaId":"1F233914-2763-42E8-BCB9-E0D1186783E8"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/139150","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3457","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9407","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-003","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14187","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A525","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A553","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A751","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A775","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/139150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A553","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A775","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0904","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed."},{"lang":"es","value":"Microsoft Exchange 2003 y Outlook Web Access (OWA), cuando usan SharePoint Services 2.0, hace que la autenticación Kerberos se desactive para IIS, lo que puede causar que usuarios de OWA vean los buzones de correo de otros usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2003:-:*:*:*:*:*:*","matchCriteriaId":"E2337C2B-EEC2-48B3-93C0-FE1FE7D41273"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_services:2.0:*:*:*:*:*:*:*","matchCriteriaId":"858F70F4-3128-477D-ACAA-73F0AFA23A2B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:enterprise:*:x64:*","matchCriteriaId":"59E2CE79-BC83-43EC-B49E-4434DF73EBD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:datacenter:*:x64:*","matchCriteriaId":"E5E5E406-5BBC-4025-AD08-621F578175C8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:standard:*:x64:*","matchCriteriaId":"0296BB49-A899-4B35-AC88-B9DA43789ACD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:web:*:*:*","matchCriteriaId":"8D942E11-FF2D-4355-A746-01B30F9884BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:r2:*:*:*:*:*:x64:*","matchCriteriaId":"D152040C-B12C-4A27-8393-5C9CC2C8569F"}]}]}],"references":[{"url":"http://secunia.com/advisories/10615","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/530660","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.microsoft.com/exchange/support/e2k3owa.asp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0311&L=ntbugtraq&F=P&S=&P=9281","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/9118","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/9409","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-002","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13869","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A477","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/10615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/530660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.microsoft.com/exchange/support/e2k3owa.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0311&L=ntbugtraq&F=P&S=&P=9281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/9118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/9409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2003-0905","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Windows Media Station Service and Windows Media Monitor Service components of Windows Media Services 4.1 allows remote attackers to cause a denial of service (disallowing new connections) via a certain sequence of TCP/IP packets."},{"lang":"es","value":"Vulnerabilidad desconocida en los componentes Windows Media Station Service y Windows Media Monitor Service de Windows Media Services 4.1 permite a atacantes remotos causar una denegación de servicio (impidiendo nuevas conexiones) mediante ciertas secuencias de paquetes TCP/IP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_services:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AA3DDE73-E623-45A3-AA49-17BAFB89A2CC"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/982630","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9825","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-008","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15038","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A842","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/982630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0906","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1 allows remote attackers to execute arbitrary code via a malformed WMF or EMF image."},{"lang":"es","value":"Desbordamiento de búfer en el dibujado de los formatos de imagen (1) Windows Metafile (WMF) o (2) Enhanced Metafile (EMF) en Microsoft Windows NT 4.0 SP6a, 2000 SP2 a SP4, y XP SP1 permite a atacantes remotos ejecutar código arbitrario mediante una imagen WMF o EMF malformada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*","matchCriteriaId":"330B6798-5380-44AD-9B52-DF5955FA832C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:*:*:*:*","matchCriteriaId":"14F55877-A759-4C8A-84D5-70508E449799"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*","matchCriteriaId":"B9687E6C-EDE9-42E4-93D0-C4144FEC917A"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/547028","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10120","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1064","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A897","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A959","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/547028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A959","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0907","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code via quotation marks in an hcp:// URL, which are not quoted when constructing the argument list to HelpCtr.exe."},{"lang":"es","value":"El Centro de Ayuda y Soporte en Microsoft Windows XP SP1 no valida adecuadamente URLs HCP, lo que permite a atacantes remotos ejecutar código arbitrario mediante insertando comillas en una URL hcp://, las cuales no son entrecomilladas cuando se construye la lista de argumentos a HelpCtr.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-88"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:*:*","matchCriteriaId":"E3527F41-A6ED-437D-9833-458A2C60C2A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*","matchCriteriaId":"B47EBFCC-1828-45AB-BC6D-FB980929A81A"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020065.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108196864221676&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.idefense.com/application/poi/display?id=100&type=vulnerabilities","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/260588","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10119","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15704","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1000","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A904","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108196864221676&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.idefense.com/application/poi/display?id=100&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/260588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2003-0908","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a \"Shatter\" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using the File Open dialog in the Help window, a different vulnerability than CVE-2004-0213."},{"lang":"es","value":"Utility Manager enMicrosoft Windows 2000 ejecuta winhlp32.exe con privilegios de sistema, lo que permite a usuarios locales ejecutar código de su elección mediante un ataque de estilo \"shatter\" (hacer añícos) usando mensajes de Windows, como se ha demostrado usando el diálogo de apertura de ficheor en la ventana de ayuda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0082.html","source":"cve@mitre.org"},{"url":"http://www.appsecinc.com/resources/alerts/general/04-0001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/526084","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securiteam.com/windowsntfocus/5LP0C2ACKU.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10124","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15632","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1046","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.appsecinc.com/resources/alerts/general/04-0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/526084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securiteam.com/windowsntfocus/5LP0C2ACKU.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0909","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe command-line tool or the Task Scheduler service, aka \"Windows Management Vulnerability.\""},{"lang":"es","value":"Windows XP permite a usuarios locales ejecutar programas de su elección creando una tarea con un nivel de prioridad elevado mediante la herramienta de línea de comandos eventriggers.exe o el servicio Planificador de Tareas, también conocida como \"Vulnerabilidad de Administración de Windows\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/206468","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10125","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15678","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1004","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/206468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0910","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory."},{"lang":"es","value":"La función NtSetLdtEntries en el interfaz de programación de la Tabla de Descriptores L ocales (LDT) de Windows NT 4.0 y Windows 2000 permitea  atacantes locales ganar acceso a memoria del kernel y ejecutar código de su elección mediante un cierto tipo descriptor de segmento de datos que apunta a memoria protegida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020068.html","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20040413D.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/122076","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10122","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15707","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A890","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A911","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020068.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20040413D.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/122076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0924","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files."},{"lang":"es","value":"netpbm 2:9.25 y anteriores no crea adecuadamente ficheros temporales, lo que permite a usuarios locales sobreescribir ficheros arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netpbm:netpbm:*:*:*:*:*:*:*:*","versionEndIncluding":"9.25","matchCriteriaId":"739F589E-8507-4D16-95A3-31270D1FD557"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-426","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-02.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/487102","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:011","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-030.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-031.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9442","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14874","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A804","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A810","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/487102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A810","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0928","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Clearswift MAILsweeper before 4.3.15 does not properly detect and filter RAR 3.20 encoded files, which allows remote attackers to bypass intended policy."},{"lang":"es","value":"Clearswift MAILsweepe anteriores a 4.3.15 no detecta y filtra adecuadamente ficheros codificados RAR 3.20, lo que permite a atacantes remotos saltarse la política pretendida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.15","matchCriteriaId":"09D10925-2F78-40C9-9B32-08C689D6412D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109241692108678&w=2","source":"cve@mitre.org"},{"url":"http://www.corsaire.com/advisories/c030807-001.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109241692108678&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.corsaire.com/advisories/c030807-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0929","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy."},{"lang":"es","value":"Cleanswift MAILsweeper anteriores a 4.3.15 no detectan y filtran de manera adecuada ficheros codificados ZIP 6.0, lo que permite a atacantes remotos saltarse la política pretendida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.15","matchCriteriaId":"09D10925-2F78-40C9-9B32-08C689D6412D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109241692108678&w=2","source":"cve@mitre.org"},{"url":"http://www.corsaire.com/advisories/c030807-001.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109241692108678&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.corsaire.com/advisories/c030807-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-0930","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Clearswift MAILsweeper before 4.3.15 does not properly detect filenames in BinHex (HQX) encoded files, which allows remote attackers to bypass intended policy."},{"lang":"es","value":"Clearswift MAILsweeper anteriores a 4.3.15 no detecta nombres de fichero en ficheros codificados BinHex (HQX), lo que permite a atacantes remotos sortear la política pretendida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3.15","matchCriteriaId":"09D10925-2F78-40C9-9B32-08C689D6412D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109241692108678&w=2","source":"cve@mitre.org"},{"url":"http://www.corsaire.com/advisories/c030807-001.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109241692108678&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.corsaire.com/advisories/c030807-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-0931","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sygate Enforcer 4.0 earlier allows remote attackers to cause a denial of service (service hang) by replaying a malformed discovery packet to UDP port 39999."},{"lang":"es","value":"Sygate Enforcer 4.0 y anteriores permite a atacantes remotos causar una denegación de servicio (cuelgue)  reenviando un paquete de descubierta malformado al puerto UDP 39999"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sygate_technologies:enforcer:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0","matchCriteriaId":"6D18D087-0213-428E-A53D-02A5866C48E7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109215951022437&w=2","source":"cve@mitre.org"},{"url":"http://www.corsaire.com/advisories/c031120-001.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16949","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109215951022437&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.corsaire.com/advisories/c031120-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16949","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0949","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xsok 1.02 does not properly drop privileges before finding and executing the \"gunzip\" program, which allows local users to execute arbitrary commands."},{"lang":"es","value":"Vulnerabilidad desconocida en xsok 1.02 permite que usuarios locales ejecuten comandos arbitrarios relacionados con una \"\"missing privilege release\"\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_bischoff:xsok:1.02:*:*:*:*:*:*:*","matchCriteriaId":"E9310CC3-A1A8-43B9-A5D0-CA2090BB8BAF"}]}]}],"references":[{"url":"http://www.debian.org/security/2003/dsa-405","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9321","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14098","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2003/dsa-405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0963","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflows in (1) try_netscape_proxy and (2) try_squid_eplf for lftp 2.6.9 and earlier allow remote HTTP servers to execute arbitrary code via long directory names that are processed by the ls or rels commands."},{"lang":"es","value":"Desbordamiento de búfer en try_netscape_proxy y try_squid_eplf en lftp 2.6.9 y anteriores permite a servidores HTTP remotos ejecutar código arbitrario mediante nombres de directorio largos que son procesados por los comandos ls o rels."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_v._lukyanov:lftp:2.3:*:*:*:*:*:*:*","matchCriteriaId":"39A0F70E-3C7D-421C-A719-18ACEEB7B902"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_v._lukyanov:lftp:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"6EF18837-2EB8-4E76-85F4-C76C7494BAE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_v._lukyanov:lftp:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"07BB574A-166F-453F-899C-881C7F11B97A"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"42857A56-4D5B-425C-BD04-B36C8EA5A265"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"929305F4-2C65-472B-B72B-F6F8231054E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"A6F9DB4E-3F80-4F55-A196-ED980E6B87E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"3D26360D-8E29-42A1-B5C0-6625B52352A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"DEA467A4-F1FD-44E0-8444-590741EACCA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"D194098E-509A-4DEF-9C7A-E7D7E000F0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"7043A058-1A78-488E-907A-C63FD61B4F15"},{"vulnerable":true,"criteria":"cpe:2.3:a:alexander_v._lukyanov:lftp:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"4B30C4BF-0C0D-4DA8-87DC-4F4FD1EB5C12"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040101-01-U","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107126386226196&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107152267121513&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107167974714484&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107177409418121&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107340499504411&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10525","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10548","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-406","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2003:116","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2003_051_lftp.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-403.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-404.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11180","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040101-01-U","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107126386226196&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107152267121513&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107167974714484&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107177409418121&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107340499504411&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2003:116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2003_051_lftp.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-403.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-404.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0965","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the admin CGI script for Mailman before 2.1.4 allows remote attackers to steal session cookies and conduct unauthorized activities."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Mailman anteriores a 2.1.4 permite a atacantes remotos robar cookies de sesión y llevar a cabo actividades no autorizadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.4","matchCriteriaId":"E2119A71-0B5A-47F5-9935-B1D71D5A1295"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842","source":"cve@mitre.org"},{"url":"http://mail.python.org/pipermail/mailman-announce/2003-December/000066.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10519","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-436","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:013","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3305","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-020.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9336","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14121","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A813","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail.python.org/pipermail/mailman-announce/2003-December/000066.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10519","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A813","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0966","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the frm command in elm 2.5.6 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code via a long Subject line."},{"lang":"es","value":"Desbordamiento de búfer en el comando frm en elm 2.5.6 y anteriores permite a atacantes remotos ejecutar código arbitrario mediante una línea de Asunto muy larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:elm_development_group:elm:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.6","matchCriteriaId":"8B33294D-1293-4966-97FA-25B443640AFC"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=112078","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-009.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9430","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14840","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=112078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-009.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0969","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability."},{"lang":"es","value":"mpg321 0.2.10 permite a atacantes remotos sobreescribir memoria y posiblemente ejecutar código arbitrario mediante un fichero mp3 que pasa ciertas cadenas a la función printf, posiblemente disparando una vulnerabilidad de cadena de formato."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mpg321:mpg321:0.2.10:*:*:*:*:*:*:*","matchCriteriaId":"2495F9C3-C643-40E7-93FE-9D349CA16D7D"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-411","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_02_tcpdump.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3331","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9364","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14148","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_02_tcpdump.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14148","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0977","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CVS server before 1.11.10 may allow attackers to cause the CVS server to create directories and files in the file system root directory via malformed module requests."},{"lang":"es","value":"Vulnerabilidad desconocida en servidores CVS anteriores a 1.11.10 puede permitir a atacantes causar que el servidor CVS cree directorios y ficheros en el directorio raíz del sistema de ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.7:*:*:*:*:*:*:*","matchCriteriaId":"C9F7CA6E-7D45-46C9-A437-0D0C4D3F25CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*","matchCriteriaId":"62135DD0-140D-42C2-9302-31B5E2DE1A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*","matchCriteriaId":"D92B456C-5F8E-4DC2-940C-AE06B42DD3A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"37B53C85-AA0E-40DD-B477-058586197714"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.1_p1:*:*:*:*:*:*:*","matchCriteriaId":"D1D1234F-1BB0-432B-B7B7-A97E3ADD5561"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"6D472B97-F7C2-4973-9D71-AB3CF1F8774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.3:*:*:*:*:*:*:*","matchCriteriaId":"9D0DCF26-59A8-46AC-99D7-97C203A0D702"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.4:*:*:*:*:*:*:*","matchCriteriaId":"B31BAACA-7518-48D2-ADEE-F59F4569D3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.5:*:*:*:*:*:*:*","matchCriteriaId":"9D2748A8-5047-4338-A08E-986497AE4B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.6:*:*:*:*:*:*:*","matchCriteriaId":"525C4E91-2186-4D3A-9DF0-1C6A75A3F919"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"57F41B40-75E6-45C8-A5FB-8464C0B2D064"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"300A6A65-05FD-401C-80F6-B5F5B1F056E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"AA3D53C9-3806-45E6-8AE9-7D41280EF64C"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"cve@mitre.org"},{"url":"http://ccvs.cvshome.org/servlets/NewsItemView?newsID=84&JServSessionIdservlets=8u3x1myav1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000808","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107168035515554&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107540163908129&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10601","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-422","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2003:112","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-003.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-004.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13929","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11528","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A855","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A866","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ccvs.cvshome.org/servlets/NewsItemView?newsID=84&JServSessionIdservlets=8u3x1myav1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107168035515554&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107540163908129&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2003:112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A866","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0978","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in gpgkeys_hkp (experimental HKP interface) for the GnuPG (gpg) client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious keyserver to cause a denial of service (crash) and possibly execute arbitrary code during key retrieval."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en el cliente de GnuPG (gpg) 1.2.2 y anteriores permite a atacantes remotos o a un servidor de claves malicioso causar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario durante un obtención de clave."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.2:*:*:*:*:*:*:*","matchCriteriaId":"49A642D7-007E-479D-963E-A74AAE195A54"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"86144B81-D321-4ECA-937F-FFA8A043FCE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"5A93CAE1-0DFC-43E1-997D-22CDC338D3E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.2.2:rc1:*:*:*:*:*:*","matchCriteriaId":"9896332E-819B-4392-B704-B143DBBE90A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4B641ED5-4326-43E7-BF42-982B44478A05"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:privacy_guard:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D81AF47A-56BA-4D90-A4D4-D7A37333A117"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107047470625214&w=2","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2003_048_gpg.html","source":"cve@mitre.org"},{"url":"http://www.s-quadra.com/advisories/Adv-20031203.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13892","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107047470625214&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2003_048_gpg.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s-quadra.com/advisories/Adv-20031203.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0979","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeScripts VisitorBook LE (visitorbook.pl) does not properly escape line breaks in input, which allows remote attackers to (1) use VisitorBook as an open mail relay, when $mailuser is 1, via extra headers in the email field, or (2) cause the guestbook database to be deleted via a large number of line breaks that exceeds the $max_posts variable."},{"lang":"es","value":"FreeScripts VisitorBook LE (visitorbook.pl) no añade caractéres de escape  adecuadamente a saltos de linea en la entrada, lo que permite a atacantes remotos:\r\n\r\nusar VisitorBook como un relé de correo abierto, cuando $mailuser es 1, mediante cabeceras extra en el campo de correo electrónico, y \r\ncausar que la base de datos del libro de visitas sea borrada mediante un gran número de saltos de línea que exceda la variable $max_posts"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freescripts:visitorbook:le:*:*:*:*:*:*:*","matchCriteriaId":"C05BD42A-A99E-4683-A034-BE7CDBA4F289"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107107840622493&w=2","source":"cve@mitre.org"},{"url":"http://www.westpoint.ltd.uk/advisories/wp-03-0001.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107107840622493&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.westpoint.ltd.uk/advisories/wp-03-0001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-0980","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in FreeScripts VisitorBook LE (visitorbook.pl) allows remote attackers to inject arbitrary HTML or web script via (1) the \"do\" parameter, (2) via the \"user\" parameter from a host with a malicious reverse DNS name, (3) via quote marks or ampersands in other parameters."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en FreeScripts VisitorBook LE (visitorbook.pl) permite a atacantes remotos inyectar HTML o script web arbitrario mediante \r\n\r\nel parámetro \"do\",\r\nel parámetro \"user\" de una máquina con un nombre DNS inverso malicioso, y \r\nmediante comillas (\") o ampesands (&) en otros parámetros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freescripts:visitorbook:le:*:*:*:*:*:*:*","matchCriteriaId":"C05BD42A-A99E-4683-A034-BE7CDBA4F289"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107107840622493&w=2","source":"cve@mitre.org"},{"url":"http://www.westpoint.ltd.uk/advisories/wp-03-0001.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107107840622493&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.westpoint.ltd.uk/advisories/wp-03-0001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-0981","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeScripts VisitorBook LE (visitorbook.pl) logs the reverse DNS name of a visiting host, which allows remote attackers to spoof the origin of their incoming requests and facilitate cross-site scripting (XSS) attacks."},{"lang":"es","value":"FreeScripts VisitorBook LE (visitor.pl) almacena el nombre DNS inverso de una máquina visitante, lo que permite a atacantes remotos suplantar el origen de sus peticiones entrantes y facilitar ataques de scripting en sitios cruzados (XSS)."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-346"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freescripts:visitorbook_le:-:*:*:*:*:*:*:*","matchCriteriaId":"A8641B1D-117C-4913-B66D-48D7768F18FE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107107840622493&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-03-0001.txt","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107107840622493&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-03-0001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-0982","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the authentication module for Cisco ACNS 4.x before 4.2.11, and 5.x before 5.0.5, allows remote attackers to execute arbitrary code via a long password."},{"lang":"es","value":"Desbordamiento de búfer en el módulo de autenticación de Cisco ACNS 4.x anteriores a 4.2.11, y 5.x anteriores a 5.0.5, permite a atacantes remotos ejecutar código arbitrario mediante una contraseña larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_and_content_networking_software:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6C11A917-8173-4266-8098-687A96937C10"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_and_content_networking_software:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4DBF9A68-C8CA-4AB8-B831-89E63D1CCF0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_and_content_networking_software:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"60D8DB6E-ED9E-4981-9DF3-7CD268E455B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_and_content_networking_software:4.2:*:*:*:*:*:*:*","matchCriteriaId":"BAFC2175-854C-4C6F-BBA3-22B130391DB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_and_content_networking_software:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"C89D5B75-0262-43BC-915B-144DEF76F012"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_and_content_networking_software:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"6385CE52-78E9-401A-9CA4-D7DACCAB8F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_and_content_networking_software:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7FE863AC-3902-4BD2-90A8-12E4D19E63F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_and_content_networking_software:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"66527B05-A7BE-4582-A458-4EBB9F7B7E18"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_and_content_networking_software:5.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C2711B21-43C2-4EF9-BEFD-F0B4450E86BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_distribution_manager_4630:*:*:*:*:*:*:*:*","matchCriteriaId":"71568B23-8055-4625-A13C-E5B9032DEEA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_distribution_manager_4630:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EC79750C-9CA0-4A9F-BF18-06BEF13A3F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_distribution_manager_4630:4.1:*:*:*:*:*:*:*","matchCriteriaId":"E6766073-A568-4299-B528-3F29C5D9A421"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_distribution_manager_4650:*:*:*:*:*:*:*:*","matchCriteriaId":"0F368653-EF5E-43EB-93CB-1CCD0FFD6FFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_distribution_manager_4650:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5F52DDF6-B959-4221-834E-2371DF46BD4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_distribution_manager_4650:4.1:*:*:*:*:*:*:*","matchCriteriaId":"4E842071-A161-4F02-B0CC-D3A6582D9930"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_distribution_manager_4670:*:*:*:*:*:*:*:*","matchCriteriaId":"A3DE3F02-3223-4CB9-81FB-87CA0DD1B914"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:507:*:*:*:*:*:*:*","matchCriteriaId":"2B947FCA-35E1-4F88-A8EA-7C90BBA0294F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:507_2.2_.0:*:*:*:*:*:*:*","matchCriteriaId":"AF48646D-F72D-4236-ABC5-A37ACA801973"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:507_3.1:*:*:*:*:*:*:*","matchCriteriaId":"B7705CE1-4982-45AF-8CB1-271225180BAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:507_4.0:*:*:*:*:*:*:*","matchCriteriaId":"DDF9A0A5-3107-44F6-9383-A2FFE15377AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:507_4.1:*:*:*:*:*:*:*","matchCriteriaId":"97C1B960-F088-4486-BB87-37BBD713F184"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:560:*:*:*:*:*:*:*","matchCriteriaId":"ADA1C53F-0548-47ED-8C81-534D621BC00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:560_2.2_.0:*:*:*:*:*:*:*","matchCriteriaId":"096CEE42-5DF7-4661-A908-B598DE27032E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:560_3.1:*:*:*:*:*:*:*","matchCriteriaId":"85526696-0617-45E2-B2DA-8AAB05F0E255"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:560_4.0:*:*:*:*:*:*:*","matchCriteriaId":"F6EB111F-D6C5-4906-8316-A317B27BC599"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:560_4.1:*:*:*:*:*:*:*","matchCriteriaId":"D3FF8F15-7851-4052-B353-76251BB55F77"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:590:*:*:*:*:*:*:*","matchCriteriaId":"5362FE38-A346-4959-B1B6-E4E981BF2292"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:590_2.2_.0:*:*:*:*:*:*:*","matchCriteriaId":"BADA2500-631D-429C-8F2E-CEF687B1CE20"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:590_3.1:*:*:*:*:*:*:*","matchCriteriaId":"49C0C24A-36A3-4C25-9279-3E2F495AA59D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:590_4.0:*:*:*:*:*:*:*","matchCriteriaId":"359CA948-212B-49F1-A659-7E8FC2E6F845"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:590_4.1:*:*:*:*:*:*:*","matchCriteriaId":"C84BE6AF-044E-46D6-94F4-6A9F665F62CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:7320:*:*:*:*:*:*:*","matchCriteriaId":"A2C96FD2-7C6B-4526-A3EE-0CE578526B00"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:7320_2.2_.0:*:*:*:*:*:*:*","matchCriteriaId":"3DE7E43C-4ACC-403D-AE2C-D42BD51C1F0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:7320_3.1:*:*:*:*:*:*:*","matchCriteriaId":"41E0ADD3-EF9C-4904-83D8-AAB9729A33C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:7320_4.0:*:*:*:*:*:*:*","matchCriteriaId":"2A206212-F490-4A31-989F-C2F4A01B1DD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine:7320_4.1:*:*:*:*:*:*:*","matchCriteriaId":"EA3940DE-75B0-41BF-A6B3-4D01091D7A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine_module:for_cisco_router_2600_series:*:*:*:*:*:*:*","matchCriteriaId":"35B4109D-A187-4970-92C3-D8538C7F1AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine_module:for_cisco_router_3600_series:*:*:*:*:*:*:*","matchCriteriaId":"525F7DA9-7464-4DFD-9D1F-5A35319B4C7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:content_engine_module:for_cisco_router_3700_series:*:*:*:*:*:*:*","matchCriteriaId":"A1CC447F-7C04-488E-8F56-0BF9A16438DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:enterprise_content_delivery_network_software:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7C9A7E8B-B8A9-430B-8712-7CA4C60B349E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:enterprise_content_delivery_network_software:4.1:*:*:*:*:*:*:*","matchCriteriaId":"2721E909-0237-4633-BAE0-758A1357B23C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_router_4430:*:*:*:*:*:*:*:*","matchCriteriaId":"B5A3BF42-76DF-47E2-A7B4-FAC4D693F493"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_router_4450:*:*:*:*:*:*:*:*","matchCriteriaId":"AA736E0A-0D31-4869-892E-8875B6ACE4D6"}]}]}],"references":[{"url":"http://secunia.com/advisories/10409","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20031210-ACNS-auth.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/352462","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9187","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13945","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20031210-ACNS-auth.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/352462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0983","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unity on IBM servers is shipped with default settings that should have been disabled by the manufacturer, which allows local or remote attackers to conduct unauthorized activities via (1) a \"bubba\" local user account, (2) an open TCP port 34571, or (3) when a local DHCP server is unavailable, a DHCP server on the manufacturer's test network."},{"lang":"es","value":"Cisco Unitiy en servidores IBM es entregado con una configuración por defecto que debería haber sido deshabilitada por el fabricante, lo que permite a atacantes locales o remotos conducir actividades no autorizadas mediante \r\n\r\nuna cuenta de usuario \"bubba\" local, o \r\nun puerto TCP 34571 abierto, o \r\ncuando un servidor DHCP local no está disponible, un servidor DHCP en la red de prueba del fabricante."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:80-7111-01_for_the_unity-svrx255-1a:*:*:*:*:*:*:*:*","matchCriteriaId":"EE5BFD5D-964B-4036-908F-64F3B43F8220"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:80-7112-01_for_the_unity-svrx255-2a:*:*:*:*:*:*:*:*","matchCriteriaId":"47C52046-B9A6-4A8D-B8BA-2EC40D3893EE"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20031210-unity.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20031210-unity.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-0984","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Real time clock (RTC) routines in Linux kernel 2.4.23 and earlier do not properly initialize their structures, which could leak kernel data to user space."},{"lang":"es","value":"Las rutinas de reloj de tiempo real (RTC - real time clock) en Linux kernel 2.4.23 y anteriores no inicializan adecuadamente sus estructuras, lo que podría filtrar datos del kernel en espacio de usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000799","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107394143105081&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10533","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10536","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10537","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10538","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10555","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10582","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10583","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20162","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20163","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20202","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20338","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-3904.html","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:001","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2003_049_kernel.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3317","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-January/msg00000.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-417.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-188.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9154","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008594","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13943","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1013","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A859","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9406","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107394143105081&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10536","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-3904.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2003_049_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-January/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-417.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-188.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0985","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mremap system call (do_mremap) in Linux kernel 2.4.x before 2.4.21, and possibly other versions before 2.4.24, does not properly perform bounds checks, which allows local users to cause a denial of service and possibly gain privileges by causing a remapping of a virtual memory area (VMA) to create a zero length VMA, a different vulnerability than CAN-2004-0077."},{"lang":"es","value":"La llamada de sistema mremap (do_mremap) en Linux kernel 2.2, 2.4 y 2.6 y posiblemente otras versiones anteriores a 2.4.24, no realiza adecuadamente comprobaciones de límites, lo que permite a usuarios locales causar una denegación de servicio y posiblemente ganar privilegios causando que se reasigne una área de memoria virtual (WMA) para crea una WMA de longitud cero, vulnerabilidad distinta a CAN-2004-0077."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040102-01-U","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-01/0070.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000799","source":"cve@mitre.org"},{"url":"http://download.immunix.org/ImmunixOS/7.3/updates/IMNX-2004-73-001-01","source":"cve@mitre.org"},{"url":"http://isec.pl/vulnerabilities/isec-0013-mremap.txt","source":"cve@mitre.org"},{"url":"http://klecker.debian.org/~joey/security/kernel/patches/patch.CAN-2005-0528.mremap","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107332754521495&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107332782121916&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107340358402129&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107340814409017&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107350348418373&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107394143105081&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10532","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20163","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20202","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20338","source":"cve@mitre.org"},{"url":"http://svn.debian.org/wsvn/kernel/patch-tracking/CVE-2005-0528?op=file&rev=0&sc=0","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-045.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-413","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-417","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-423","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-427","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-439","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-440","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-442","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-450","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-470","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-475","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/490620","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.24","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-3904.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:001","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_03_linux_kernel.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3315","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-416.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-417.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-418.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-419.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9356","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14135","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A860","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A867","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040102-01-U","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-01/0070.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://download.immunix.org/ImmunixOS/7.3/updates/IMNX-2004-73-001-01","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://isec.pl/vulnerabilities/isec-0013-mremap.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://klecker.debian.org/~joey/security/kernel/patches/patch.CAN-2005-0528.mremap","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107332754521495&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107332782121916&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107340358402129&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107340814409017&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107350348418373&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107394143105081&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.debian.org/wsvn/kernel/patch-tracking/CVE-2005-0528?op=file&rev=0&sc=0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-045.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/490620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.24","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-3904.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_03_linux_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3315","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-416.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-417.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2003-418.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2003-419.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A867","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0987","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret."},{"lang":"es","value":"mod_digest de Apache no verifica adecuadamente el nonce de una respuesta de cliente usando un secreto AuthNonce."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 1.3.31:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.30","matchCriteriaId":"4D39DD14-A1F3-4A1F-8AE5-92E61185D50C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108437852004207&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200405-22.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008920","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1","source":"cve@mitre.org"},{"url":"http://www.mail-archive.com/dev%40httpd.apache.org/msg19007.html","source":"cve@mitre.org"},{"url":"http://www.mail-archive.com/dev%40httpd.apache.org/msg19014.html","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:046","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-600.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-816.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9571","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.529643","source":"cve@mitre.org"},{"url":"http://www.trustix.org/errata/2004/0027","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15041","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100108","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4416","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108437852004207&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200405-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/dev%40httpd.apache.org/msg19007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mail-archive.com/dev%40httpd.apache.org/msg19014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-600.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-816.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.529643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.org/errata/2004/0027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4416","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0988","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the VCF file information reader for KDE Personal Information Management (kdepim) suite in KDE 3.1.0 through 3.1.4 allows attackers to execute arbitrary code via a VCF file."},{"lang":"es","value":"Desbordamiento de búfer en el lector de información de ficheros VCF del paquete KDE Personal Information Manager (kdepim) en KDE 3.1.0 a 3.1.4 permite a atacantes ejecutar código arbitrario mediante un fichero VCF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C6EB3F5C-A86E-40E7-B9D7-E8DAB273D880"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B7E2C256-8E9F-4D12-ABF4-FECE06B52CAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"33AF934D-B51B-4A81-BC47-FFEAB9A62C30"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4A3096F2-B0F1-45E1-806D-6434DE56619A"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000810","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107412130407906&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200404-02.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/820798","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kde.org/info/security/advisory-20040114-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:003","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-005.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-006.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9419","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14833","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A858","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A865","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107412130407906&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200404-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/820798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kde.org/info/security/advisory-20040114-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A865","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0989","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057."},{"lang":"es","value":"tcpdump anteriores a 3.8.1 permite a atacantes remotos causar una denegación de servico (bucle infinito) mediante ciertos paquetes ISAKMP, una vulnerabilidad distinta de CAN-2004-9957."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:tcpdump:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8.0","matchCriteriaId":"DF58D46A-19E6-42EF-877A-C215DAB5AC19"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*","matchCriteriaId":"F3FDE8C4-5FFD-4CC2-9F35-7C32043966D1"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://lwn.net/Alerts/66445/","source":"cve@mitre.org"},{"url":"http://lwn.net/Alerts/66805/","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107577418225627&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10636","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10637","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10639","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10644","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10652","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10668","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10718","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11022","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11032/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12179/","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-425","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/738518","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:008","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00006.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00009.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00015.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-legacy-list/2004-January/msg00726.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-007.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-008.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/350238/30/21640/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9507","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008716","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10599","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A847","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A852","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lwn.net/Alerts/66445/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lwn.net/Alerts/66805/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107577418225627&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11032/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12179/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/738518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-legacy-list/2004-January/msg00726.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/350238/30/21640/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0990","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The parseAddress code in (1) SquirrelMail 1.4.0 and (2) GPG Plugin 1.1 allows remote attackers to execute commands via shell metacharacters in the \"To:\" field."},{"lang":"es","value":"El código parseAddress en SquirrelMail 1.4.0 y GPG Plugin 1.1 permite a atacantes remotos ejecutar comandos mediante metacaractéres de shell en el campo \"Para:\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:squirrelmail:gpg_plugin:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6FB5BBEA-384E-4B88-A71E-C90A6D440116"},{"vulnerable":false,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2C179A3C-8C8C-429B-BACA-8ADAE4170465"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107247236124180&w=2","source":"cve@mitre.org"},{"url":"http://www.bugtraq.org/advisories/_BSSADV-0001.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/348366","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9296","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14079","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107247236124180&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bugtraq.org/advisories/_BSSADV-0001.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/348366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9296","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0991","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the mail command handler in Mailman before 2.0.14 allows remote attackers to cause a denial of service (crash) via malformed e-mail commands."},{"lang":"es","value":"Vulnerabilidad desconocida en el manejador de instrucciones por correo en Mailman anteriores a 2.0.14 permite a atacantes remotos causar una denegación de servicio (caída) mediante instrucciones de correo electrónico malformadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:1.0:*:*:*:*:*:*:*","matchCriteriaId":"46CF8999-445E-4E03-89F1-81669F9F93D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:1.1:*:*:*:*:*:*:*","matchCriteriaId":"1D965E3E-E08C-40EA-AF66-470F473F0262"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0:*:*:*:*:*:*:*","matchCriteriaId":"64179C1D-C96F-431F-AD80-CBCA77CB9E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EC6B30F6-70A8-43C7-BA5C-6DD8A6ED829D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"767101D3-ABB0-4D34-AA28-75F78A392F39"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0:beta5:*:*:*:*:*:*","matchCriteriaId":"BEB60D06-E9D0-4949-8542-334D180F491D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7F884774-D1A1-42A6-A3FE-9B0500725666"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2C56B981-FD66-46F2-806A-3FFDEC520482"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5E3E1994-6CAC-48E9-8438-0D894A76FE66"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DB8742B0-A91D-457D-BF57-06AFC5219BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6F04EDBE-4B04-4B4C-A2BE-5286AC7C8952"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"615566E3-9EBD-49B3-9727-0883D3F0334B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F59D0CCF-3CD0-4D99-B1F1-38F331422801"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FADF5CE8-D072-4CFE-8A96-BA86187B478B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"72278005-5F2A-4459-8813-DF7EC2D1F063"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"4E39A909-E266-4BA9-87C6-DE26052433E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"ABA16FD9-0625-4D3D-9F10-130A28C88DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"EE33EFBF-E155-4C3B-93CC-63AA1266A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.13:*:*:*:*:*:*:*","matchCriteriaId":"78F2FB70-7EB9-4AA7-9E85-C151C3CC8104"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D6A976-FFEA-4DB6-B002-8036E778C78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842","source":"cve@mitre.org"},{"url":"http://mail.python.org/pipermail/mailman-announce/2004-February/000067.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-436","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:013","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-019.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9620","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15106","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail.python.org/pipermail/mailman-announce/2004-February/000067.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-019.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15106","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0992","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the create CGI script for Mailman before 2.1.3 allows remote attackers to steal cookies of other users."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el scritp de creación de CGI en Mailman anteriores a 2.1.3 permite a atacantes remotos robar cookies de otros usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.3","matchCriteriaId":"12663F37-D788-42D4-A7C3-27AF6940F67A"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842","source":"cve@mitre.org"},{"url":"http://mail.python.org/pipermail/mailman-announce/2003-September/000061.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:013","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-020.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A815","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail.python.org/pipermail/mailman-announce/2003-September/000061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-020.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A815","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0993","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_access in Apache 1.3 before 1.3.30, when running big-endian 64-bit platforms, does not properly parse Allow/Deny rules using IP addresses without a netmask, which could allow remote attackers to bypass intended access restrictions."},{"lang":"es","value":"Apache 1.3 anteriores a 1.3.30, cuando se ejecuta en plataformas big-endian de 64 bits, no analiza adecuadamente reglas de aceptación/denegación usando direcciones IP sin máscara de red, lo que podría permitir a atacantes remotos saltarse las restricciones de acceso pretendidas."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apach HTTP Server 1.3.31:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"28EC1F94-04F3-490A-8324-1EB60EEBAD4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"30D94958-0D13-4076-B6F0-61D505136789"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B22DA22E-54DA-46CF-B3AE-4B0900D8086A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F90F496A-5D57-448F-A46F-E15F06CBFD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"89B58983-633F-4D20-80AE-8E7EB865CF83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.7:*:dev:*:*:*:*:*","matchCriteriaId":"34FD94C9-2352-4147-9BF2-A3CF841A159B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"19C8989C-D8A6-4AE9-99B6-F2DAE5999EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"7B6EE0E2-D608-4E72-A0E5-F407511405C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"33FD6791-3B84-40CA-BCF4-B5637B172F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"6DDD2F69-CFD4-4DEA-B43A-1337EEFA95A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"0A80B17D-FD66-40BD-9ADC-FE7A3944A696"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*","matchCriteriaId":"713ADED4-CBE5-40C3-A128-99CFABF24560"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"70FA0B8E-1A90-4939-871A-38B9E93BCCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*","matchCriteriaId":"83BDEAE5-29B9-48E3-93FA-F30832044C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.22:*:*:*:*:*:*:*","matchCriteriaId":"A2720E06-1B0E-4BFE-8C85-A17E597BB151"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.23:*:*:*:*:*:*:*","matchCriteriaId":"3EE1DECF-36C7-4968-8B7A-7A2034C2A957"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.24:*:*:*:*:*:*:*","matchCriteriaId":"B67BD173-8517-4E97-BC65-D9657C63601A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.25:*:*:*:*:*:*:*","matchCriteriaId":"B392A96F-FD2F-4073-8EED-EB31E1F20FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.26:*:*:*:*:*:*:*","matchCriteriaId":"E130104B-86F5-411E-8AC0-9B4B780BCA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.27:*:*:*:*:*:*:*","matchCriteriaId":"0E62E621-74DA-4D99-A79C-AD2B85896A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.28:*:*:*:*:*:*:*","matchCriteriaId":"2C577188-BD56-4571-A61A-1684DC9E9DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.29:*:*:*:*:*:*:*","matchCriteriaId":"5B3A4CD9-1E96-4D3B-938D-F2D15855B0DD"}]}]}],"references":[{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:046","source":"cve@mitre.org"},{"url":"http://issues.apache.org/bugzilla/show_bug.cgi?id=23850","source":"cve@mitre.org"},{"url":"http://marc.info/?l=apache-cvs&m=107869603013722","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108437852004207&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200405-22.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1","source":"cve@mitre.org"},{"url":"http://www.apacheweek.com/features/security-13","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9829","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.529643","source":"cve@mitre.org"},{"url":"http://www.trustix.org/errata/2004/0027","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15422","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100111","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4670","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://issues.apache.org/bugzilla/show_bug.cgi?id=23850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=apache-cvs&m=107869603013722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108437852004207&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200405-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apacheweek.com/features/security-13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.529643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.org/errata/2004/0027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4670","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0994","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain SYSTEM privileges."},{"lang":"es","value":"La funcionalidad gui para una sesión interactiva en ymantec LiveUpdate 1.70.x hasta la 1.90.x (usadas en Norton Internet Security 2001 hasta 2004, SystemWorks 2001 hasta 2004, y AntiVirus y Norton AntiVirus Pro 2001 hasta 2004, AntiVirus for Handhelds v3.0) permite que usuarios locales obtengan privilegios SYSTEM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2.1:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"A9415109-C554-40F6-851E-CC016951BDF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2001:*:*:*:*:*:*:*","matchCriteriaId":"19595AF4-8C85-4646-B42B-4B5863798AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2001:*:pro:*:*:*:*:*","matchCriteriaId":"532CF7E7-2F8A-4AC2-91F4-C8D35B8943EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:*","matchCriteriaId":"8F6F3B3C-7C60-4A38-91F0-E09148DB4FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2002:*:pro:*:*:*:*:*","matchCriteriaId":"BFFF5F92-2CB6-4155-91AA-B80476509376"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2003:*:*:*:*:*:*:*","matchCriteriaId":"34B1D862-2CB4-4D50-9BBA-0507FEAA1924"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2003:*:pro:*:*:*:*:*","matchCriteriaId":"C1538C84-EB7B-407C-9B05-27B9B0A10F16"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2004:*:pro:*:*:*:*:*","matchCriteriaId":"486AF3E7-B5EC-49D2-9822-0F8E152DEDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:v3.0:*:handhelds:*:*:*:*:*","matchCriteriaId":"7980AED6-1CB7-46C0-AD67-238B4A18060B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2001:*:*:*:*:*:*:*","matchCriteriaId":"2D2C8E23-852E-4715-9D8D-18F26B1263A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2001:*:pro:*:*:*:*:*","matchCriteriaId":"DBF82809-CE59-4B2A-89C0-FB1AF760704E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2002:*:*:*:*:*:*:*","matchCriteriaId":"F05FEBA2-33E8-4074-8B57-4FE6FFEF2F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2002:*:pro:*:*:*:*:*","matchCriteriaId":"A5FA0458-AB41-495E-B41F-C18B4E6876CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2003:*:*:*:*:*:*:*","matchCriteriaId":"AEF97C5F-3A80-4973-85FD-5BCE43B32AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2003:*:pro:*:*:*:*:*","matchCriteriaId":"1F0BF645-7C56-4ED6-91C0-AE4CFAB62EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2004:*:*:*:*:*:*:*","matchCriteriaId":"2ACBDE0C-91D2-4357-9724-B60BBFF5D2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2004:*:pro:*:*:*:*:*","matchCriteriaId":"D7875372-44D7-47AB-8F8C-4A3AB98FB3B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_system_works:2001:*:*:*:*:*:*:*","matchCriteriaId":"B37463FB-DA25-43F4-BB92-50354DF5A8C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_system_works:2002:*:*:*:*:*:*:*","matchCriteriaId":"4BCEEC08-41F6-423A-B845-541227B64CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_system_works:2003:*:*:*:*:*:*:*","matchCriteriaId":"A4C31257-E62D-495D-9F7B-09D234B7BF64"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_system_works:2004:*:*:*:*:*:*:*","matchCriteriaId":"F589D9AA-FD1B-4929-93DC-801C36087E64"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:windows_liveupdate:1.70.x:*:*:*:*:*:*:*","matchCriteriaId":"6118EFBA-C50B-4790-B301-5B996F759105"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:windows_liveupdate:1.90.x:*:*:*:*:*:*:*","matchCriteriaId":"247F0A9D-E8E4-484A-99AA-4368B84F702B"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-January/015510.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-January/015510.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107393473928245&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3428","source":"cve@mitre.org"},{"url":"http://www.secnetops.biz/research/SRT2004-01-09-1022.txt","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-January/015510.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-January/015510.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107393473928245&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secnetops.biz/research/SRT2004-01-09-1022.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0995","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Microsoft Message Queue Manager (MSQM) allows remote attackers to cause a denial of service (RPC service crash) via a queue registration request."},{"lang":"es","value":"Desbordamiento de búfer en Microsof Message Queue Manager (MSQM)  permite a atacantes remotos causar una denegación de servicio (caída de servicio RPC) mediante una petición de registro de cola."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-039","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13131","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13131","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-0996","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown \"System Security Vulnerability\" in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 allows attackers to gain privileges via the help interface."},{"lang":"es","value":"\"Vulnerabilidad de seguridad de sistema\" desconocida en Computer Associates (CA) Unicenter Remote Control (URC) 6.0 permite a atacantes ganar privilegios mediante el interfaz de ayuda."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_remote_control_host:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FCCE6E32-B899-4AFB-9D95-C318AF5E4D1A"}]}]}],"references":[{"url":"http://support.ca.com/techbases/rp/urc6x-secnote.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.secunia.com/advisories/10420/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.ca.com/techbases/rp/urc6x-secnote.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.secunia.com/advisories/10420/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-0997","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown \"Denial of Service Attack\" vulnerability in Computer Associates (CA) Unicenter Remote Control (URC) 6.0 allows attackers to cause a denial of service (CPU consumption in URC host service)."},{"lang":"es","value":"Vulnerabilidad de \"ataque de denegación de servicio\" desconocida en  Computer Associates (CA) Unicenter Remote Control (URC) 6.0 permite a atacantes causar una denegación de servicio (consumición de CPU en anfitrión del servicio URC)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_remote_control_host:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FCCE6E32-B899-4AFB-9D95-C318AF5E4D1A"}]}]}],"references":[{"url":"http://support.ca.com/techbases/rp/urc6x-secnote.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.secunia.com/advisories/10420/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.ca.com/techbases/rp/urc6x-secnote.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.secunia.com/advisories/10420/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-0998","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown \"potential system security vulnerability\" in Computer Associates (CA) Unicenter Remote Control 5.0 through 5.2, and ControlIT 5.0 and 5.1, may allow attackers to gain privileges to the local system account."},{"lang":"es","value":"\"vulnerabilidad potencial de seguridad de sistema\" desconocida en Computer Associates (CA) Unicenter Remote Control 5.0 a 5.2, y ControlIT 5.0 y 5.1 puede permitir a atacantes ganar privilegios de la cuenta de sistema local."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_remote_control:5.2:*:*:*:*:*:*:*","matchCriteriaId":"B43CE892-50CB-429F-B986-6FD4398A1D71"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_remote_control:6.0:*:*:*:*:*:*:*","matchCriteriaId":"53C2C33D-8403-4C75-8A52-713393FE408F"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_remote_control_option:5.0:*:*:*:*:*:*:*","matchCriteriaId":"97E875A6-C08A-44D3-B018-C444CB587EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_remote_control_option:5.1:*:*:*:*:*:*:*","matchCriteriaId":"7466B723-0D4F-47E8-8FAA-6FEABAC2C539"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:controlit:5.0:*:advanced:*:*:*:*:*","matchCriteriaId":"35509F76-AAA6-4E8F-9DBC-9A3169BE6B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:controlit:5.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"BB927AD3-4266-4853-A9C2-997BD27BA86E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:controlit:5.1:*:enterprise:*:*:*:*:*","matchCriteriaId":"B5DFD65B-6A4B-4435-B96E-7679DB42AFD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:unicenter_remote_control_option:5.1:*:*:de:*:*:*:*","matchCriteriaId":"48FD622F-9F6D-4181-B201-8D7C76F57885"}]}]}],"references":[{"url":"http://support.ca.com/techbases/rp/urc5x-secnote.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.secunia.com/advisories/10420/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.ca.com/techbases/rp/urc5x-secnote.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.secunia.com/advisories/10420/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-0999","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown multiple vulnerabilities in (1) lpstat and (2) the libprint library in Solaris 2.6 through 9 may allow attackers to execute arbitrary code or read or write arbitrary files."},{"lang":"es","value":"Múltiples vulnerabilidades desconocidas en lpstat y la librería libprint en Solaris 2.6 a 9 puede permitir a atacantes ejecutar código arbitrario o leer o escribir ficheros arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57451","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4098","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1000","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xchat 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an invalid ID number, which causes a null dereference."},{"lang":"es","value":"xchat 2.0.6 permite a atacantes remotos causar una denegación de servicio (caída) mediante una petición DCC pasiva con número ID inválido, lo que causa una desreferencia nula."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"2191D045-A2A9-47E0-A5CB-A4FF7C7D7179"}]}]}],"references":[{"url":"http://mail.nl.linux.org/xchat-announce/2003-12/msg00000.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107152093419276&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://mail.nl.linux.org/xchat-announce/2003-12/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107152093419276&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]}]}},{"cve":{"id":"CVE-2003-1001","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth requests for (1) TACACS+ or (2) RADIUS authentication."},{"lang":"es","value":"Desbordamiento de búfer en el Módulo de Servicios de Cortafuegos Cisco (FWSM) en dispositivos de la seria Cisco Cayalyst 6500 y 7600 permiten a atacantes remotos causar una denegación de servicio (caída y recarga) mediante una petición HTTP auth para autenticación TACACS+ o RADIUS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*","matchCriteriaId":"99DE48DF-A309-4A1C-B977-AE81B4EDB589"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-1:2.2\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"EC58B690-8D30-4A04-82AA-A827F87DEE02"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-1:3.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"E6BED8BD-79D2-4DD9-A895-66A8C9349F62"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-2:2.2\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"41491D13-A3F9-464A-A84B-A58320838CBD"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-2:3.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"9E0747C3-2712-4FA9-92E3-260B3CF080DC"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_ws-x6380-nam:2.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"CFF4CBFF-56C4-4411-9F12-2506C3DD563E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_ws-x6380-nam:3.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"DD4D3F34-A1B3-4469-BF21-666FDAE9198B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-1:2.2\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"B64454B8-75A5-4A63-A4DC-ECA17CFBCD7E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-1:3.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"E6353A76-2075-4245-94C5-D23BF9C03732"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-2:2.2\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"19A1FA93-21B3-4CD4-8A62-C66D82CFB2D5"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-2:3.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"97742EE8-200E-4A6F-BB81-C2344EF44BD6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_ws-x6380-nam:2.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"BFA58891-105C-4E1F-9B9F-540F5DC0442E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_ws-x6380-nam:3.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"32583745-9640-4032-B1E1-598ABB4E89A0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:*:*:*:*:*:*:*:*","matchCriteriaId":"2A9CB22A-21E0-46F6-B6CD-BB38A80FA7A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B9CAFC15-178C-4176-9668-D4A04B63E77B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F1D952CE-9CDE-442D-8544-4614DBE5AC12"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"567897E0-416B-47D8-ABAF-412DA5FF9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.6\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C6E0B307-56E1-4E0E-A68E-5D95CBC91A8D"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-1002","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is set."},{"lang":"es","value":"El Módulo de Servicios de Cortafuegos Cisco (FWSM) en dispositivos de la seria Cisco Cayalyst 6500 y 7600 permite a atacantes remotos causar una denegación de servicio (caída y recarga) mediante SNMPv3 cuando está establecido snmp-server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*","matchCriteriaId":"99DE48DF-A309-4A1C-B977-AE81B4EDB589"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-1:2.2\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"EC58B690-8D30-4A04-82AA-A827F87DEE02"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-1:3.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"E6BED8BD-79D2-4DD9-A895-66A8C9349F62"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-2:2.2\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"41491D13-A3F9-464A-A84B-A58320838CBD"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_ws-svc-nam-2:3.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"9E0747C3-2712-4FA9-92E3-260B3CF080DC"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_ws-x6380-nam:2.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"CFF4CBFF-56C4-4411-9F12-2506C3DD563E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6500_ws-x6380-nam:3.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"DD4D3F34-A1B3-4469-BF21-666FDAE9198B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-1:2.2\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"B64454B8-75A5-4A63-A4DC-ECA17CFBCD7E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-1:3.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"E6353A76-2075-4245-94C5-D23BF9C03732"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-2:2.2\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"19A1FA93-21B3-4CD4-8A62-C66D82CFB2D5"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_ws-svc-nam-2:3.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"97742EE8-200E-4A6F-BB81-C2344EF44BD6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_ws-x6380-nam:2.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"BFA58891-105C-4E1F-9B9F-540F5DC0442E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_7600_ws-x6380-nam:3.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"32583745-9640-4032-B1E1-598ABB4E89A0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:*:*:*:*:*:*:*:*","matchCriteriaId":"2A9CB22A-21E0-46F6-B6CD-BB38A80FA7A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B9CAFC15-178C-4176-9668-D4A04B63E77B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F1D952CE-9CDE-442D-8544-4614DBE5AC12"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"567897E0-416B-47D8-ABAF-412DA5FF9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.6\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C6E0B307-56E1-4E0E-A68E-5D95CBC91A8D"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20031215-fwsm.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-1003","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco PIX firewall 5.x.x, and 6.3.1 and earlier, allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is set."},{"lang":"es","value":"Cisco PIX Firewall 5.x.x y 6.3.1 y anteriores, permite a atacantes remotos causar una denegación de servicio (caída y recarga) mediante un mensaje SNMPv3 cuando está activado snmp-server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:pix_firewall:6.2.2_.111:*:*:*:*:*:*:*","matchCriteriaId":"ECBC761F-A8F5-4CD8-B19C-5CE8FFC58FDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7AA2E425-904C-4070-8F5F-B81BCF3147F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.1:*:*:*:*:*:*:*","matchCriteriaId":"604CF950-5D4B-4DC6-819E-0528B22CB05C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"E12887E5-A2BB-4B1E-9621-2961458BCE21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.1\\(4.206\\):*:*:*:*:*:*:*","matchCriteriaId":"3B5BE2F7-687C-477B-818B-A102526DF36D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2:*:*:*:*:*:*:*","matchCriteriaId":"999A0969-60EB-4B2E-A274-9F05D9F840E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"626E41D2-A5EF-493D-9486-3D9BC3793EAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"EBA31E4D-2215-4E4A-BCCC-B3D922CB752D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2\\(3.210\\):*:*:*:*:*:*:*","matchCriteriaId":"4F16AD2C-1CC1-43D9-A944-F67071B62E66"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"A42FFBF7-9ADB-4F14-BED8-F2E53BEE7B62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"25D16481-CA9A-4B4D-AC9D-3A4F0387FF19"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"56E4588E-6C1F-4720-8082-0EF299435CB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.2\\(9\\):*:*:*:*:*:*:*","matchCriteriaId":"D24E0E92-59D7-4B16-8B0D-2FD0EE821D93"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.3:*:*:*:*:*:*:*","matchCriteriaId":"ED24C763-7558-4AC0-AE10-FDA3D3078D27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"4CC85ED3-B598-4A87-A2B8-8D3B52ECC2F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.3\\(1.200\\):*:*:*:*:*:*:*","matchCriteriaId":"C84CE24E-4ED6-43D0-A234-FBD24D22A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.3\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"FF84B9FE-7C6C-4578-A5A9-EF0D5EEEEC19"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:5.3\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"72C3E2B4-3A36-44B5-90D3-1BF9FAD98579"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0:*:*:*:*:*:*:*","matchCriteriaId":"58BE9C02-2A01-4F6F-A6BD-BC0173561E9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C558CED8-8342-46CB-9F52-580B626D320E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"0F85D19E-6C26-429D-B876-F34238B9DAAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"FEC7CCF7-CBC6-4EDC-8EDD-884DFFFBCC7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"E5011A33-CD6D-4EFC-ACFD-E51C9AE726A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4.101\\):*:*:*:*:*:*:*","matchCriteriaId":"09063867-0E64-4630-B35B-4CCA348E4DAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1:*:*:*:*:*:*:*","matchCriteriaId":"78F98CD7-A352-483C-9968-8FB2627A7CBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F97FE485-705F-4707-B6C6-0EF9E8A85D5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"E2B925E8-D2C2-4E8C-AC21-0C422245C482"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"B9170562-872E-4C32-869C-B10FF35A925E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"D0927A68-8BB2-4F03-8396-E9CACC158FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"559DDBA3-2AF4-4A0C-B219-6779BA931F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2:*:*:*:*:*:*:*","matchCriteriaId":"ED9D142A-DDC8-4BD6-8C22-F242C9C0B1ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5226C9CC-6933-4F10-B426-B47782C606FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"757DAE9A-B25D-4B8A-A41B-66C2897B537E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"5E3DC170-E279-4725-B9EE-6840B5685CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3.100\\):*:*:*:*:*:*:*","matchCriteriaId":"8091EDA9-BD18-47F7-8CEC-E086238647C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6F867890-74A4-4892-B99A-27DB4603B873"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"CE05B514-F094-4632-B25B-973F976F6409"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.102\\):*:*:*:*:*:*:*","matchCriteriaId":"40954985-16E6-4F37-B014-6A55166AE093"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20031215-pix.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20031215-pix.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-1004","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco PIX firewall 6.2.x through 6.2.3, when configured as a VPN Client, allows remote attackers to cause a denial of service (dropped IPSec tunnel connection) via an IKE Phase I negotiation request to the outside interface of the firewall."},{"lang":"es","value":"Cisco PIX Firewall 6.2.x a 6.2.3, cuando se configura como un cliente VPN, permite a atacantes remotos causar una denegación de servicio (conexión túnel IPSec descartada) mediante una petición de negociación IKE (intercambio de claves) Fase 1 al interfaz externo del cortafuegos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:pix_firewall:6.2.2_.111:*:*:*:*:*:*:*","matchCriteriaId":"ECBC761F-A8F5-4CD8-B19C-5CE8FFC58FDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2:*:*:*:*:*:*:*","matchCriteriaId":"ED9D142A-DDC8-4BD6-8C22-F242C9C0B1ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5226C9CC-6933-4F10-B426-B47782C606FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"757DAE9A-B25D-4B8A-A41B-66C2897B537E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"5E3DC170-E279-4725-B9EE-6840B5685CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3.100\\):*:*:*:*:*:*:*","matchCriteriaId":"8091EDA9-BD18-47F7-8CEC-E086238647C6"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20031215-pix.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20031215-pix.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-1006","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in cd9660.util in Apple Mac OS X 10.0 through 10.3.2 and Apple Mac OS X Server 10.0 through 10.3.2 may allow local users to execute arbitrary code via a long command line parameter."},{"lang":"es","value":"Desbordamiento de búfer en cd9660.util de Apple Mac OS X 10.0 a 10.3.2 y Apple Mac OS X Server 10.0 a 10.3.2 puede permitir a usuarios locales ejecutar código arbitrario mediante un parámetro de línea de comandos largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/878526","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/347578","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/347707","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/348097","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9228","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13995","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/878526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/347578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/347707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/348097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1007","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AppleFileServer (AFS) in Apple Mac OS X 10.2.8 and 10.3.2 does not properly handle certain malformed requests, with unknown impact."},{"lang":"es","value":"AppleFileServer (AFS) en Apple Mac OS X 10.2.8 y 10.3.2 no maneja adecuadamente ciertas peticiones malformadas, con impacto desconocido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008532","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9264","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14051","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1008","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Mac OS X 10.2.8 and 10.3.2 allows local users to bypass the screen saver login window and write a text clipping to the desktop or another application."},{"lang":"es","value":"Vulnerabilidad desconocida en Max OS X 10.2.8 y 10.3.2 permite a usuarios locales saltarse la ventana de inicio de sesión del salvapantallas y escribir un texto resaltando el escritorio u otra aplicación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14195","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14195","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1009","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory Services in Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 and Apple Mac OS X Server 10.2 through 10.3.2 accepts authentication server information from unknown LDAP or NetInfo sources as provided by a malicious DHCP server, which allows remote attackers to gain privileges."},{"lang":"es","value":"Los servicios de directorio en Apple Mac OS X 10.0.2, 10.0.3, 10.2.8, 10.3.2 y Apple Mac OS X Server 10.2 a 10.3.2 aceptan información de servidor de autenticación de fuentes LDAP o NetInfo proporcionadas por un servidor DHCP malicioso, lo que permite a atacantes remotos ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=32478","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.carrel.org/dhcp-vuln.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9110","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13874","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=32478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.carrel.org/dhcp-vuln.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13874","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1010","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in fs_usage in Mac OS X 10.2.8 and 10.3.2 and Mac OS X Server 10.2.8 and 10.3.2 allows local users to gain privileges via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad desconocida en fs_usage en Mac OS X 10.2.8 y 10.3.2 y Mac OS X Server 10.2.8 u 10.3.2 permite a usuarios locales ganar privilegios mendiante vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":false,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9265","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14193","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14193","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1011","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Mac OS X 10.0 through 10.2.8 allows local users with a USB keyboard to gain unauthorized access by holding down the CTRL and C keys when the system is booting, which crashes the init process and leaves the user in a root shell."},{"lang":"es","value":"Apple Mac OS X 10.0 a 10.2.8 permite a usuarios locales con un teclado USB ganar acceso no autorizado pulsando las tecla CTRL y C cuando el sistema está arrancando, lo que hace que se caiga el proceso init y deja al usuario con un intérprete de comandos de root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/343087","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8945","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13573","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/343087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13573","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1012","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SMB dissector in Ethereal before 0.10.0 allows remote attackers to cause a denial of service via a malformed SMB packet that triggers a segmentation fault during processing of Selected packets."},{"lang":"es","value":"El diseccionador SMB en Ethereal 0.10.0 permite a atacantes remotos causar una denegación de servicio mediante un paquete SMB malformado que dispara un fallo de segmento durante el proceso de paquetes seleccionados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*","matchCriteriaId":"83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CB461B6B-B731-4732-AAD0-191BE50189D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"19961880-D38A-4785-A7C5-879A061119BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"831705D2-C4DE-475F-B908-8859064AFB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"A4622585-20E2-46E9-B773-74729FF22EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E86ADCB6-0940-4CB9-85F1-A7694210FB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"042B6289-D2E2-4369-BB40-EA6EE7025D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"F0A48938-30B8-4403-B08A-177FFCB9054B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"67B81EFD-27C1-411C-AFF3-E5340627E3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"680934CF-7F9B-41E4-AA03-ECD96F477AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"DBCCE368-64E6-4CEC-B068-9B8BA2527289"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"CF5374A4-5194-45FD-895D-B04FDC7E853C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000801","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10531","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10568","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10570","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-407","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00012.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:002","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-002.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10202","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A856","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A856","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1013","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Q.931 dissector in Ethereal before 0.10.0, and Tethereal, allows remote attackers to cause a denial of service (crash) via a malformed Q.931, which triggers a null dereference."},{"lang":"es","value":"El diseccionador Q.931 en Ethereal anteriores a 0.10.0 y Tethereal, permite a atacantes remotos causar una denegación de servicio (caída) mediante un Q.931 malformado, lo que dispara una desreferencia nula."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal:ethereal:*:*:*:*:*:*:*:*","versionEndExcluding":"0.10.0","matchCriteriaId":"02FAC872-0676-4E29-A6F5-BA0EBFE826E9"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000801","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/10531","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/10568","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/10570","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2003/dsa-407","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00012.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:002","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-001.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-002.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10097","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A857","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/10531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/10568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/10570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2003/dsa-407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2003-1014","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use multiple MIME fields with the same name, which may be interpreted differently by mail clients."},{"lang":"es","value":"Múltiples pasarelas de seguridad de contenidos y antivirus pueden permitir a atacantes remotos saltarse restricciones de contenido mediante mensajes MIME que usan múltiples campos MIME con el mismo nombre, lo que puede ser interpretado de manera distinta por clientes de correo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CA12B965-672C-444D-9774-0F76FE47EA29"},{"vulnerable":false,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"E6C9B32C-5EC9-46BD-AA77-F414A143576C"},{"vulnerable":false,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"823C27EB-C00F-4A7E-B832-013A50A1EE2D"},{"vulnerable":false,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"BD217379-28E7-465E-843D-E7204EE0E89F"},{"vulnerable":false,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.13:*:*:*:*:*:*:*","matchCriteriaId":"EB96CB8A-59F3-4624-B2BA-687ECF929B79"},{"vulnerable":false,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.14:*:*:*:*:*:*:*","matchCriteriaId":"04A02C12-547E-4086-A409-53AA68F1A4D5"},{"vulnerable":false,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.15:*:*:*:*:*:*:*","matchCriteriaId":"8185FBF2-D678-4D90-A5AC-F9B06DFED95F"},{"vulnerable":false,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.3:*:*:*:*:*:*:*","matchCriteriaId":"4F4EC2BB-A979-4C37-B8BB-086DAEEB4A6A"},{"vulnerable":false,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.4:*:*:*:*:*:*:*","matchCriteriaId":"CD53E1BC-6A92-4D7C-BE1F-FEF88F78DBD4"},{"vulnerable":false,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*","matchCriteriaId":"AC782BFC-6BA0-4823-8A6D-F7D83F55393C"},{"vulnerable":false,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*","matchCriteriaId":"E1B09025-47B9-4F77-9DA6-80885E9A4EC4"},{"vulnerable":false,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E021143-608B-44A2-84FB-8F8AC00A9985"},{"vulnerable":false,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0A9BB1C1-2CB2-426D-A8CE-AF5CB0B98674"},{"vulnerable":false,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7AC4686E-B92F-47ED-90DA-42AF650521D2"},{"vulnerable":false,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"80EF73F0-1FE1-4041-9C07-A89D153DA41F"},{"vulnerable":false,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EF45C4F8-A20C-4D7D-B203-AF36FB046C63"},{"vulnerable":false,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"75222D1B-1384-4C74-A54F-BC028C5CDB69"},{"vulnerable":false,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A5129FD4-C011-4EA9-B8A1-256E95494FE6"},{"vulnerable":false,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8F33D78C-9CD1-49A6-A43E-D0187600C033"},{"vulnerable":false,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6D3CF1D-64E1-47DB-8767-EF8DBF4E17AE"},{"vulnerable":false,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E725208-BA0C-41D9-BC45-84577A94AAA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A43C3DCC-3298-4D4D-9485-4A3BECB615E9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109517732328759&w=2","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2004/380375/mime.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17333","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109517732328759&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2004/380375/mime.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17333","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1015","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use whitespace in an unusual fashion, which may be interpreted differently by mail clients."},{"lang":"es","value":"Múltiples productos de pasarelas de seguridad de contenidos y antivirus pueden permitir a atacantes remotos saltarse restricciones de contenido mediante mensajes MIME que usan espacios en blanco de manera inusual, lo que puede ser interpretado diferentemente por clientes de correo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CA12B965-672C-444D-9774-0F76FE47EA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"E6C9B32C-5EC9-46BD-AA77-F414A143576C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"823C27EB-C00F-4A7E-B832-013A50A1EE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"BD217379-28E7-465E-843D-E7204EE0E89F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.13:*:*:*:*:*:*:*","matchCriteriaId":"EB96CB8A-59F3-4624-B2BA-687ECF929B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.14:*:*:*:*:*:*:*","matchCriteriaId":"04A02C12-547E-4086-A409-53AA68F1A4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.15:*:*:*:*:*:*:*","matchCriteriaId":"8185FBF2-D678-4D90-A5AC-F9B06DFED95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.3:*:*:*:*:*:*:*","matchCriteriaId":"4F4EC2BB-A979-4C37-B8BB-086DAEEB4A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.4:*:*:*:*:*:*:*","matchCriteriaId":"CD53E1BC-6A92-4D7C-BE1F-FEF88F78DBD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*","matchCriteriaId":"AC782BFC-6BA0-4823-8A6D-F7D83F55393C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*","matchCriteriaId":"E1B09025-47B9-4F77-9DA6-80885E9A4EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E021143-608B-44A2-84FB-8F8AC00A9985"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0A9BB1C1-2CB2-426D-A8CE-AF5CB0B98674"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7AC4686E-B92F-47ED-90DA-42AF650521D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"80EF73F0-1FE1-4041-9C07-A89D153DA41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EF45C4F8-A20C-4D7D-B203-AF36FB046C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"75222D1B-1384-4C74-A54F-BC028C5CDB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A5129FD4-C011-4EA9-B8A1-256E95494FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8F33D78C-9CD1-49A6-A43E-D0187600C033"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6D3CF1D-64E1-47DB-8767-EF8DBF4E17AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E725208-BA0C-41D9-BC45-84577A94AAA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A43C3DCC-3298-4D4D-9485-4A3BECB615E9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109525252118936&w=2","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2004/380375/mime.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9273","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109525252118936&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2004/380375/mime.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9273","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1016","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use malformed quoting in MIME headers, parameters, and values, including (1) fields that should not be quoted, (2) duplicate quotes, or (3) missing leading or trailing quote characters, which may be interpreted differently by mail clients."},{"lang":"es","value":"Múltiples productos de pasarelas de seguridad de contenidos y antivirus pueden permitir a atacantes remotos saltarse restricciones de contenido mediante mensajes MIME que usan entrecomillado malformado en cabeceras MIME, parámetros y valores, incluyendo (1) campos que no deberían ser entrecomillados, (2) comillas duplicadas, o (3) falta de caractéres al principio o al final, lo que puede ser interpretado de manera distinta por clientes de correo electrónico."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CA12B965-672C-444D-9774-0F76FE47EA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"E6C9B32C-5EC9-46BD-AA77-F414A143576C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"823C27EB-C00F-4A7E-B832-013A50A1EE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"BD217379-28E7-465E-843D-E7204EE0E89F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.13:*:*:*:*:*:*:*","matchCriteriaId":"EB96CB8A-59F3-4624-B2BA-687ECF929B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.14:*:*:*:*:*:*:*","matchCriteriaId":"04A02C12-547E-4086-A409-53AA68F1A4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.15:*:*:*:*:*:*:*","matchCriteriaId":"8185FBF2-D678-4D90-A5AC-F9B06DFED95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.3:*:*:*:*:*:*:*","matchCriteriaId":"4F4EC2BB-A979-4C37-B8BB-086DAEEB4A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.4:*:*:*:*:*:*:*","matchCriteriaId":"CD53E1BC-6A92-4D7C-BE1F-FEF88F78DBD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*","matchCriteriaId":"AC782BFC-6BA0-4823-8A6D-F7D83F55393C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*","matchCriteriaId":"E1B09025-47B9-4F77-9DA6-80885E9A4EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E021143-608B-44A2-84FB-8F8AC00A9985"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0A9BB1C1-2CB2-426D-A8CE-AF5CB0B98674"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7AC4686E-B92F-47ED-90DA-42AF650521D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"80EF73F0-1FE1-4041-9C07-A89D153DA41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EF45C4F8-A20C-4D7D-B203-AF36FB046C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"75222D1B-1384-4C74-A54F-BC028C5CDB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A5129FD4-C011-4EA9-B8A1-256E95494FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8F33D78C-9CD1-49A6-A43E-D0187600C033"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6D3CF1D-64E1-47DB-8767-EF8DBF4E17AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E725208-BA0C-41D9-BC45-84577A94AAA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A43C3DCC-3298-4D4D-9485-4A3BECB615E9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109521027007616&w=2","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2004/380375/mime.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17336","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109521027007616&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2004/380375/mime.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17336","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1017","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macromedia Flash Player before 7,0,19,0 stores a Flash data file in a predictable location that is accessible to web browsers such as Internet Explorer and Opera, which allows remote attackers to read restricted files via vulnerabilities in web browsers whose exploits rely on predictable names."},{"lang":"es","value":"El Reproductor de Macromedia Flash en versiones anteriores a 7,0,19,0 almacena un fichero de datos de Flash en una localización predecible, accesible a navegadores web como Internet Explorer y Opera, lo que permite a a atacantes remotos leer ficheros restringidos mediante vulnerabilidades en navegadores web cuya explotación se basa en nombres predecibles."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:director:5.0:*:*:*:*:*:*:*","matchCriteriaId":"48F00DBC-26E9-4148-BB18-179310CA5F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:4.0_r12:*:*:*:*:*:*:*","matchCriteriaId":"BAB0102B-7F42-40EA-AD40-B67C6942F860"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EF005FC1-50A0-4233-A500-1E677EACDBE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:5.0_r50:*:*:*:*:*:*:*","matchCriteriaId":"6BB0BE19-EB29-4DEB-883C-89CB2023E54B"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:6.0:*:*:*:*:*:*:*","matchCriteriaId":"4F8A8FD0-F9C9-4125-B682-A7F2B73D9BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:6.0.29.0:*:*:*:*:*:*:*","matchCriteriaId":"4B2A9976-1883-4D49-A512-C66FF12FDDCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:6.0.40.0:*:*:*:*:*:*:*","matchCriteriaId":"C20DFF23-6215-4860-B091-ECC1C1C08DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:6.0.47.0:*:*:*:*:*:*:*","matchCriteriaId":"8E1B943A-38AD-4472-B143-B66567EBC9E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:6.0.65.0:*:*:*:*:*:*:*","matchCriteriaId":"141B7F64-5EDD-450D-A244-124366AD5800"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:flash_player:6.0.79.0:*:*:*:*:*:*:*","matchCriteriaId":"F44A2955-F536-4EA5-8D1E-94D35EE10B88"}]}]}],"references":[{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb03-08.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8900","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14013","source":"cve@mitre.org"},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb03-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1018","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in enq command in AIX 4.3, 5.1, and 5.2 allows local users with rintq group privileges to gain privileges via unknown attack vectors."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la orden enq en AIX 4.3, 5.1 Y 5.2 permite a usuarios locales con privilegios de grupo rint ganar privilegios mediante vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"}]}]}],"references":[{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-20","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9254","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14037","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1020","sourceIdentifier":"cve@mitre.org","published":"2004-01-05T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The format_send_to_gui function in formats.c for irssi before 0.8.9 allows remote IRC users to cause a denial of service (crash)."},{"lang":"es","value":"La función format_send_to_gui en formats.c en irssi anteriores a 0.8.9 permite a usuarios IRC remotos causar una denegación de servicio (caída)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:irssi:irssi:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"CC775325-9EA0-4E13-A03A-BD315E10C056"},{"vulnerable":true,"criteria":"cpe:2.3:a:irssi:irssi:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"33D6B8D2-CAE3-4001-BF92-933417E43F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:irssi:irssi:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"396BCD07-520E-4FE8-8F83-DDE8F4B2D036"},{"vulnerable":true,"criteria":"cpe:2.3:a:irssi:irssi:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"1A1732D0-2E71-4FDE-B528-3A9B6BEAA9DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:irssi:irssi:0.8.8:*:*:*:*:*:*:*","matchCriteriaId":"573668C9-CFBC-4B8E-885F-F2C5533304F8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C4AD30B9-8FBA-48B3-B2B2-014C950B9BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:ppc:*:*:*:*:*","matchCriteriaId":"279317B9-AF2F-43E9-BEE5-518FC6D23A87"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"}]}]}],"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2003:117","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/347218","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13973","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2003:117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/347218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13973","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1022","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory."},{"lang":"es","value":"Vulnerabilidad desconocida en fsp anteriores a 2.81.b18 permite a usuarios remotos \"escapar del directorio raíz de FSP\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:fsp:*:*:*:*:*:*:*:*","versionEndIncluding":"2.81.b18","matchCriteriaId":"D7FBFE96-E328-4AD0-AAAD-517B5C927B8F"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/o-048.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-416","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3346","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9377","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14154","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-048.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14154","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1023","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and possibly later versions, allows remote attackers to execute arbitrary code during symlink conversion."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en vfs_s_resolve_symlink de vfs/direntry.c en Midnight Commander (mc) 4.6.0 y anteriores, y posiblemente otras versiones permite a atacantes remotos ejecutar código arbitrario durante una conversión de enlaces simbólicos (symlink)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.52:*:*:*:*:*:*:*","matchCriteriaId":"0BFFA28E-B2EA-4F1A-8A05-7F2B05572B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.55:*:*:*:*:*:*:*","matchCriteriaId":"E5969E22-C2B8-4440-92D0-EF17ECFECFCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.6:*:*:*:*:*:*:*","matchCriteriaId":"98D27DF4-BCF6-4AB8-9117-80E2D1072C6C"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-014.0.txt","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"cve@mitre.org"},{"url":"http://archive.cert.uni-stuttgart.de/bugtraq/2003/09/msg00309.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000833","source":"cve@mitre.org"},{"url":"http://fedoranews.org/updates/FEDORA-2004-058.shtml","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108118433222764&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-034.html","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-035.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10645","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10716","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10772","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10823","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11219","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11262","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11268","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11296","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/9833","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200403-09.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-424","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:007","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-legacy-announce/2004-May/msg00002.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/8658","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13247","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A822","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-014.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archive.cert.uni-stuttgart.de/bugtraq/2003/09/msg00309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://fedoranews.org/updates/FEDORA-2004-058.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108118433222764&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/9833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200403-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-legacy-announce/2004-May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/8658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A822","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1024","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the ls-F builtin function in tcsh on Solaris 8 allows local users to create or delete files as other users, and gain privileges."},{"lang":"es","value":"Vulnerabilidad desconocida en la función ls-F incluidad en tsch de Solaris 8 permite a usuarios locales crear o borrar ficheros de otros usuarios, y ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://secunia.com/advisories/10486","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57455","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/281356","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9280","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14065","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1528","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/281356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1528","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1025","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.01 through 6 SP1 allows remote attackers to spoof the domain of a URL via a \"%01\" character before an @ sign in the user@domain portion of the URL, which hides the rest of the URL, including the real site, in the address bar, aka the \"Improper URL Canonicalization Vulnerability.\""},{"lang":"es","value":"Internet Explorer 6 y posiblemente otras versiones, permite a atacantes remotos suplantar el dominio de una URL mediante un carácter \"%01\" antes de un carácter \"@\" (arroba) en la porción usario@dominio de la URL, lo que esconde el resto de la URL, incluyendo el sitio real, en la barra de direcciones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/652278","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/346948","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-033A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.zapthedingbat.com/security/ex01/vun1.htm","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13935","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A490","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A491","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A510","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A511","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A512","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A513","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A526","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/652278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/346948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-033A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.zapthedingbat.com/security/ex01/vun1.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13935","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1026","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions via a javascript protocol URL in a sub-frame, which is added to the history list and executed in the top window's zone when the history.back (back) function is called, as demonstrated by BackToFramedJpu, aka the \"Travel Log Cross Domain Vulnerability.\""},{"lang":"es","value":"Internet Explorer SP1 permite a atacantes remotos evitar restricciones de zonas mediante una URL de protocolo JavaScript en un sub-marco, que es añadido al historial de páginas visitadas y es ejecutado en la zona de seguridad de la ventana principal cuando se usa el método JavaScritp \"history.back\" (mostrar página anterior), como se demostró por BackToFramedJpu."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=106979349517578&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107038202225587&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/784102","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.safecenter.net/UMBRELLAWEBV4/BackToFramedJpu","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-033A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13846","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A630","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A643","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A687","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A689","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A745","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A774","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A805","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106979349517578&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107038202225587&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/784102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.safecenter.net/UMBRELLAWEBV4/BackToFramedJpu","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-033A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A805","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1027","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.01 through 6 SP1 allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows by using method caching (SaveRef) to access the window.moveBy method, which is otherwise inaccessible, as demonstrated by HijackClickV2, a different vulnerability than CVE-2003-0823, aka the \"Function Pointer Drag and Drop Vulnerability.\""},{"lang":"es","value":"Internet Explorer 6 SP1 permite a atacantes remotos enviar acciones de arrastrar y soltar y otras acciones con el ratón a otras ventanas usando cacheado de métodos (SaveRef) para acceder al método window.moveBy, que es de otra manera inaccesible, como se demostró por HijackClickV2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=106979479719446&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107038202225587&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/413886","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.safecenter.net/UMBRELLAWEBV4/HijackClickV2","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1006036","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-033A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13844","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A527","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A529","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A530","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A531","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A532","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A534","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A629","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106979479719446&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107038202225587&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/413886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.safecenter.net/UMBRELLAWEBV4/HijackClickV2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1006036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-033A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A531","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A629","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1028","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The download function of Internet Explorer 6 SP1 allows remote attackers to obtain the cache directory name via an HTTP response with an invalid ContentType and a .htm file, which could allow remote attackers to bypass security mechanisms that rely on random names, as demonstrated by threadid10008."},{"lang":"es","value":"La función de descarga de Internet Explorer 6 SP1 permite a atacantes remotos obtener el nombre de directorio de caché mediante una respuesta HTTP con un ContentType inválido y un fichero .html, lo que podría permitir a atacantes remotos saltarse mecanismos de seguridad que se basan en nombres aleatorios, como se demostró por threadid10008."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=106979428718705&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106979624321665&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107038202225587&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7890","source":"cve@mitre.org"},{"url":"http://www.safecenter.net/UMBRELLAWEBV4/threadid10008","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13847","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=106979428718705&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=106979624321665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107038202225587&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.safecenter.net/UMBRELLAWEBV4/threadid10008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1029","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to UDP port 1701, which causes l2tp_avp_print to use a bad length value when calling print_octets."},{"lang":"es","value":"El procesador (parser) del protocolo L2TP en tcpdump 3.8.1 y anteriores permite a atacantes remotos causar una denegación de servicio (bucle infinito y consumición de memoria) mediante un paquete con datos no válidos al puerto UDP 1701, lo que causa que l2tp_avp_print ustilice un valor de longitud malo cuando llama a print_octets()"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B9B50919-7C67-416D-BA2F-50747CDBE08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.5:*:*:*:*:*:*:*","matchCriteriaId":"A6CC000D-857D-4E12-82E6-7F8168B463EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"45BACEA9-8C28-4DB6-96F7-D91B06C8EEF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"C3214AA7-1EB2-4EC8-96AA-2A9985A5EB8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"B3985632-2246-499E-9F9B-5A416D3AB4F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.7:*:*:*:*:*:*:*","matchCriteriaId":"FD63F004-83A9-4CB3-A26D-E82589ED7FE3"}]}]}],"references":[{"url":"http://lwn.net/Alerts/66805/","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107193841728533&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107213553214985&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=tcpdump-workers&m=107228187124962&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10636","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10652","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10668","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10718","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-425","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/350238/30/21640/threaded","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008748","source":"cve@mitre.org"},{"url":"http://lwn.net/Alerts/66805/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107193841728533&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107213553214985&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=tcpdump-workers&m=107228187124962&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/350238/30/21640/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008748","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1030","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in DameWare Mini Remote Control before 3.73 allows remote attackers to execute arbitrary code via a long pre-authentication request to TCP port 6129."},{"lang":"es","value":"Desbordamiento de búfer en DameWare Mini Remote Control anteriores a 3.73 permite a atacantes remotos ejecutar código arbitrario mediante una petición de pre-autenticación muy larga al puerto TCP 6129."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dameware_development:mini_remote_control_server:3.70_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"77FC1534-2AD0-43E8-A706-7158F3BB6832"},{"vulnerable":true,"criteria":"cpe:2.3:a:dameware_development:mini_remote_control_server:3.71_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F574913E-1713-49EC-A996-B259E8FEAC40"},{"vulnerable":true,"criteria":"cpe:2.3:a:dameware_development:mini_remote_control_server:3.72_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"223D4A90-BDAF-4CCD-A59E-253C7D1BE3A5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107152094119279&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107187110617266&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107392603615840&w=2","source":"cve@mitre.org"},{"url":"http://sh0dan.org/files/dwmrcs372.txt","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/909678","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9213","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14001","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107152094119279&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107187110617266&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107392603615840&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sh0dan.org/files/dwmrcs372.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/909678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1031","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in register.php for vBulletin 3.0 Beta 2 allows remote attackers to inject arbitrary HTML or web script via optional fields such as (1) \"Interests-Hobbies\", (2) \"Biography\", or (3) \"Occupation.\""},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en register.php de vBulletin 3.0 Beta 2 permite a atacantes remotos inyectar HTML arbitrario o script web mediante campos opcionales como (1) \"Intereses-Aficiones\", (2) \"Bigrafía\", o (3) \"Ocupación\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"0A4E9C82-64CF-4487-8947-ED745C41945A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0078.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0078.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-1032","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the \"Name\" column and sort using the column title as a hyperlink, allows remote attackers to cause a denial of service (crash) via a malformed URL to the web server, possibly involving a buffer overflow."},{"lang":"es","value":"El servidor web Pi3Web 2.0.2 Beta 1, cuando el índice del directorio se  configura para usar la columna \"Name\" y ordenar usando el título de la columna como un hiperenlace, permite a atacantes remotos causar una denegación de servicio (caída) mediante una URL malformada al servidor web, posiblemente debido a un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pi3:pi3web:2.0.2_beta_1:*:*:*:*:*:*:*","matchCriteriaId":"299DBF62-BC00-4D96-B433-8B049E199114"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=105465813729100&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=105484265218325&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1006913","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/7787","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=105465813729100&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=105484265218325&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1006913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/7787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2003-1033","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) instdbmsrv and (2) instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT environment variable as a path when assigning setuid permissions to the lserver program, which allows local users to gain root privileges via a modified INSTROOT that points to a malicious dbmsrv or lserver program."},{"lang":"es","value":"Los programas instdbmsrv y instlserver en SAP DB Development Tools 7.x utilizan la varible de entorno INSTROOT suministrada por el usuario como ruta cuando se asigna permisos setuid al programa lserver, lo que permite a usuarios locales ganar privilegios de root mediante una variable INSTROOT modificada para que apunte a una programa lserver o dbmsrv malicioso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_db:7.3.00:*:*:*:*:*:*:*","matchCriteriaId":"CB2D865C-9FB8-4209-A0DC-52FED2C34E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_db:7.4:*:*:*:*:*:*:*","matchCriteriaId":"59D5757F-2C93-4544-966F-0AE195A3463C"}]}]}],"references":[{"url":"http://listserv.sap.com/pipermail/sapdb.sources/2003-April/000143.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=105103613727471&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/7407","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/7408","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11842","source":"cve@mitre.org"},{"url":"http://listserv.sap.com/pipermail/sapdb.sources/2003-April/000143.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=105103613727471&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/7407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/7408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1034","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The RPM installation of SAP DB 7.x creates the (1) dbmsrv or (2) lserver programs with world-writable permissions, which allows local users to gain privileges by modifying those programs."},{"lang":"es","value":"La instalación mediante RPM de SAP DB 7.x crea los programas dbmsrv o lserver con permiso de escritura para todos, lo que pemite a usuarios locales ganar privilegios modificando esos programas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sap:sap_db:7.3.00:*:*:*:*:*:*:*","matchCriteriaId":"CB2D865C-9FB8-4209-A0DC-52FED2C34E89"},{"vulnerable":false,"criteria":"cpe:2.3:a:sap:sap_db:7.4:*:*:*:*:*:*:*","matchCriteriaId":"59D5757F-2C93-4544-966F-0AE195A3463C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=104914778303805&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/7242","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11669","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=104914778303805&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/7242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11669","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1035","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default installation of SAP R/3 46C/D allows remote attackers to bypass account locking by using the RFC API instead of the SAPGUI to conduct a brute force password guessing attack, which does not lock out the account like the SAPGUI does."},{"lang":"es","value":"La instalación por defecto de SAP R/3 46C/D permite a atacantes remotos saltarse bloqueos de cuentas usando la API RFC en lugar de SAPGUI para hacer ataques de fuerza bruta para averiguar la contraseña, lo cual no bloquea las cuentas como lo hace SAPGUI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sap_r_3:*:*:*:*:*:*:*:*","matchCriteriaId":"812BDEE8-05CD-40A7-9BF0-263C5AE9024F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6c:*:windows:*:*:*:*:*","matchCriteriaId":"33C7A581-C3CF-468F-8B06-1C9F227D5967"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:sapgui:4.6d:*:windows:*:*:*:*:*","matchCriteriaId":"4FCC8060-E285-43BA-9626-D9CB960A964D"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004039.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/451378/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/7007","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11487","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004039.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/451378/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/7007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1036","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the AGate component for SAP Internet Transaction Server (ITS) allow remote attackers to execute arbitrary code via long (1) ~command, (2) ~runtimemode, or (3) ~session parameters, or (4) a long HTTP Content-Type header."},{"lang":"es","value":"Múltiples desbordamientos de búfer en el componente AGate de SAP Internet Transaction Server (ITS) permite a atacantes remotos ejecutar código arbitrario mediante parámetros (1) ~command, (2) ~runtimemode, o (3) ~session largos, o mediante una cabecera HTTP Content-Type larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_transaction_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6_pl463","matchCriteriaId":"4315FA17-CFBE-4F1D-950B-C967F32DF1BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_transaction_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.10_pl30","matchCriteriaId":"2FFA9A8F-18BF-46EA-BFEE-5668F49B04F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_transaction_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.20_pl7","matchCriteriaId":"3CEE18CC-A79B-4FFD-B044-F32A7522FA3B"}]}]}],"references":[{"url":"http://www.phenoelit.de/stuff/Phenoelit20c3.pd","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14186","source":"cve@mitre.org"},{"url":"http://www.phenoelit.de/stuff/Phenoelit20c3.pd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1037","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the WGate component for SAP Internet Transaction Server (ITS) allows remote attackers to execute arbitrary code via a high \"trace level.\""},{"lang":"es","value":"Vulnerabilidad de cadena de formato en el componente WGate de SAP Internet Transaction Server (ITS) permite a atacantes remotos ejecutar código arbitrario mediante un \"nivel de traza\" alto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_transaction_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6_pl463","matchCriteriaId":"4315FA17-CFBE-4F1D-950B-C967F32DF1BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_transaction_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.10_pl30","matchCriteriaId":"2FFA9A8F-18BF-46EA-BFEE-5668F49B04F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_transaction_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.20_pl7","matchCriteriaId":"3CEE18CC-A79B-4FFD-B044-F32A7522FA3B"}]}]}],"references":[{"url":"http://securitytracker.com/id?1009453","source":"cve@mitre.org"},{"url":"http://www.phenoelit.de/stuff/Phenoelit20c3.pd","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15514","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phenoelit.de/stuff/Phenoelit20c3.pd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15514","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1038","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AGate component for SAP Internet Transaction Server (ITS) allows remote attackers to obtain sensitive information via a ~command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames."},{"lang":"es","value":"El componente AGate de SAP Internet Transaction Server (ITS) permite a atacantes remotos obtener información sensible mediante un parámetro ~command con un valor AgateInstallCheck, lo que proporciona una lista de DLLs instaladas y rutas completas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_transaction_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.6_pl463","matchCriteriaId":"4315FA17-CFBE-4F1D-950B-C967F32DF1BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_transaction_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.10_pl30","matchCriteriaId":"2FFA9A8F-18BF-46EA-BFEE-5668F49B04F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sap:internet_transaction_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.20_pl7","matchCriteriaId":"3CEE18CC-A79B-4FFD-B044-F32A7522FA3B"}]}]}],"references":[{"url":"http://www.phenoelit.de/stuff/Phenoelit20c3.pd","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15516","source":"cve@mitre.org"},{"url":"http://www.phenoelit.de/stuff/Phenoelit20c3.pd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15516","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1039","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the mySAP.com architecture for SAP allow remote attackers to execute arbitrary code via a long HTTP Host header to (1) Message Server, (2) Web Dispatcher, or (3) Application Server."},{"lang":"es","value":"Múltiples desbordamientos de búfer en la arquitectura mySAP.com de SAP permite a atacantes remotos ejecutar código arbitrario mediante un cabecera HTTP Host a (1) Message Server, (2) Web Dispatcher, o (3) Application Server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sap:mysap_business_suite:*:*:*:*:*:*:*:*","matchCriteriaId":"B76CA9D8-ABCF-4776-9E0D-17535251CDB3"}]}]}],"references":[{"url":"http://www.phenoelit.de/stuff/Phenoelit20c3.pd","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15513","source":"cve@mitre.org"},{"url":"http://www.phenoelit.de/stuff/Phenoelit20c3.pd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1040","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"kmod in the Linux kernel does not set its uid, suid, gid, or sgid to 0, which allows local users to cause a denial of service (crash) by sending certain signals to kmod."},{"lang":"es","value":"kmod en el kernel de Linux no establece su uid, gid o sgid a 0, lo que permite a usuarios locales causar una denegación de servicio (caída) enviando ciertas señales a kmod."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040204-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820","source":"cve@mitre.org"},{"url":"http://linux.bkbits.net:8080/linux-2.4/diffs/kernel/kmod.c%401.6?nav=index.html%7Csrc/%7Csrc/kernel%7Chist/kernel/kmod.c","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2003_049_kernel.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-065.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-069.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-106.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-188.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15577","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9423","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040204-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.bkbits.net:8080/linux-2.4/diffs/kernel/kmod.c%401.6?nav=index.html%7Csrc/%7Csrc/kernel%7Chist/kernel/kmod.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2003_049_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-065.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-069.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-106.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-188.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1041","sourceIdentifier":"cve@mitre.org","published":"2004-06-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing \"..\" (dot dot) sequences and a filename that ends in \"::\" which is treated as a .chm file even if it does not have a .chm extension.  NOTE: this bug may overlap CVE-2004-0475."},{"lang":"es","value":"Internet Explorer 5.x y 6.0 permite a atacantes remotos ejecutar programas arbitrarios mediante una URL conteniendo secuencias \"..\" (punto punto) en un nombre de fichero terminado en \"::\" que es tratado como un fichero CHM aunque no tenga extensión .chm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*","matchCriteriaId":"B80088A3-2AA4-44A2-98DF-359E15F8E18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*","matchCriteriaId":"B4071D03-D955-4C1B-ACD8-A864F7D0FA02"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/187196","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/348521","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9320","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-196A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-023","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14105","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1186","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1943","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3514","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A956","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/187196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/348521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-196A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A956","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1042","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in collectstats.pl for Bugzilla 2.16.3 and earlier allows remote authenticated users with editproducts privileges to execute arbitrary SQL via the product name."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en collectstats.pl  de Bugzilla 2.16.3 y anteriores permite a usuarios remotos autenticados con privilegios de editproducts ejecutar código SQL de su elección mediante el nombre del producto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=214290","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/343185","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/8953","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13594","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=214290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/343185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/8953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1043","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote authenticated users with editkeywords privileges to execute arbitrary SQL via the id parameter to editkeywords.cgi."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en Bugzilla 2.16.3 y anteriores, y 2.17.1 a 2.17.4, permite a usuarios remotos autenticados con privilegios editkeywords ejecutar SQL de su elección mediante el parámetro id de editkeywords.cgi"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=219044","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/343185","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/8953","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13596","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=219044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/343185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/8953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13596","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1044","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"editproducts.cgi in Bugzilla 2.16.3 and earlier, when usebuggroups is enabled, does not properly remove group add privileges from a group that is being deleted, which allows users with those privileges to perform unauthorized additions to the next group that is assigned with the original group ID."},{"lang":"es","value":"editproducts.cgi en Bugzilla 2.16.3 y anteriores, cuando usebuggroups está activado, no elimina adecuadamente privilegios de añadir a grupo de un grupo que está siendo borrado, lo que permite a usuarios con esos privilegios realizar adiciones no autorizadas al siguiente grupo que le sea asignado el ID del grupo original."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=219690","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/343185","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/8953","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13597","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=219690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/343185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/8953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13597","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1045","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"votes.cgi in Bugzilla 2.16.3 and earlier, and 2.17.1 through 2.17.4, allows remote attackers to read a user's voting page when that user has voted on a restricted bug, which allows remote attackers to read potentially sensitive voting information by modifying the who parameter."},{"lang":"es","value":"votes.cgi en Bugzilla 2.16.3 y anteriores, y 2.17.1 a 2.17.4 permite a atacantes remotos leer la página de votos de un usuario cuando el usuario ha votado sobre un bug restringido, lo que permite a atacantes remotos leer información sensible de votación modificando el parámetro who."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=209376","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/343185","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/8953","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13600","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=209376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/343185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/8953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1046","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"describecomponents.cgi in Bugzilla 2.17.3 and 2.17.4 does not properly verify group membership when bug entry groups are used, which allows remote attackers to list component descriptions for otherwise restricted products."},{"lang":"es","value":"describecomponents.cgi en Bugzilla 2.17.3 y 2.17.4 no verifica adecuadamente la pertenecia a grupos cuando se usan grupos de entrada de bugs , lo que permite a atacantes remotos listar descripciones de componentes de productos en otro caso restringidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=209742","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/343185","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/8953","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13602","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=209742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/343185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/8953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1047","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2023-11-07T01:56:27.937","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-0540.  Reason: This candidate is a duplicate of CVE-2004-0540.  Notes: All CVE users should reference CVE-2004-0540 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2003-1048","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image."},{"lang":"es","value":"mshtml.dll de ciertas versiones de Internet Explorer 6.x permite a atacantes remotos causar una denegación de servicio (caída de aplicación) y posiblemente ejecutar código arbitrario mediante una imagen GIF malformada que dispara un desbordamiento de búfer."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-415"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*","matchCriteriaId":"BD3A3282-8842-4708-AF7B-0AFBEB5D4F9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*","matchCriteriaId":"F4336F0E-75FE-4592-9D98-4F689804956E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*","matchCriteriaId":"F3F2A51E-2675-4993-B9C2-F2D176A92857"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:-:*:*:*:*:*:*","matchCriteriaId":"5431C6A9-4A97-45F1-B7EF-18A631438C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"587026A7-5480-4B30-8E73-6A9BB31FBCAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"8A343E57-CF86-4500-96D2-7172B93808BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"BBE43EAE-9397-44E4-AE3D-44CEA47699DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:sp4:*:*:*:*:*:*","matchCriteriaId":"1C44BF61-8074-41FB-B8C7-4E66FB3EFDD5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:-:*:*:*:*:*:*:*","matchCriteriaId":"40FC681A-7B85-4495-8DCC-C459FE7E2F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:-:*:*:*:*:*:*:*","matchCriteriaId":"A2354216-8103-49F9-A95C-7DE4F738BBEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:-:*:*:*:*:*:*:*","matchCriteriaId":"5E44D629-D3EB-4F67-BF67-B25910453562"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:*:*:terminal_server:*:*:*","matchCriteriaId":"5CEEF2F5-BE40-435C-865B-2D5DDF7C9F5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:server:*:*:*","matchCriteriaId":"DB28B8C1-9110-4780-A0CB-2188D1E86F56"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:workstation:*:*:*","matchCriteriaId":"F08AE7EC-2EBC-4088-8874-640A63C4A7F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:*:*","matchCriteriaId":"E3527F41-A6ED-437D-9833-458A2C60C2A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*","matchCriteriaId":"B47EBFCC-1828-45AB-BC6D-FB980929A81A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp1:*:*:*:*:*:*","matchCriteriaId":"2572F7E5-75A3-4C11-866B-A4E9ADBD8D08"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009445.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009473.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009506.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/o-191.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/685364","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/8530","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-212A.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16804","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1793","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A206","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2100","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A212","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A236","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A509","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A517","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009445.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009473.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009506.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/o-191.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/685364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/8530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-212A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1793","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2003-1049","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM DB2 Universal Database 7 before FixPak 12 creates certain DMS directories with insecure permissions (777), which allows local users to modify or delete certain DB2 files."},{"lang":"es","value":"IBM DB2 Universal Database 7 antes de FixPak 12 crea ciertos directorios DMS con permisos inseguros (777), lo que permite a usuarios locales modificar o borrar ciertos ficheros DB2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:7.0:*:linux:*:*:*:*:*","matchCriteriaId":"6EA810DB-104E-412A-8B6E-DBB5BEE743A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*","matchCriteriaId":"6F180189-FA62-453A-B6F8-134FE12805EE"}]}]}],"references":[{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY44841&apar=only","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY44842&apar=only","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9243","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14030","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY44841&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY44842&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1050","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via long command line arguments to (1) db2start, (2) db2stop, or (3) db2govd."},{"lang":"es","value":"Múltiples desbordamientos de búfer en IBM DB2 Universal Database 8.1 pueden permitir a usuarios locales ejecutar código de su elección mediante argumentos de línea de comandos largos a (1)db2start, (2) db2stop, o (3) db2govd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:ibm:db2:9.0:*:*:*:*:*:*:*","matchCriteriaId":"EFF280E6-CF00-4B71-B58A-2087D339C665"}]}]}],"references":[{"url":"http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/343804","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8990","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13633","source":"cve@mitre.org"},{"url":"http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/343804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13633","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1051","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in IBM DB2 Universal Database 8.1 may allow local users to execute arbitrary code via certain command line arguments to (1) db2start, (2) db2stop, or (3) db2govd."},{"lang":"es","value":"Múltiples vulnerabilidades de cadena de formato en IBM Universal Database 8.1 puede permitir a usuarios locales ejecutar código arbitrario mediante ciertos argumentos de línea de comando a (1) db2start, (2) db2stop, or (3) db2govd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.0:*:*:*:*:*:*:*","matchCriteriaId":"EFF280E6-CF00-4B71-B58A-2087D339C665"}]}]}],"references":[{"url":"http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/343804","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8989","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13633","source":"cve@mitre.org"},{"url":"http://www.secnetops.com/research/advisories/SRT2003-11-06-0710.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/343804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13633","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1052","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM DB2 7.1 and 8.1 allow the bin user to gain root privileges by modifying the shared libraries that are used in setuid root programs."},{"lang":"es","value":"IBM DB2 7.1 y 8.1 permite al usuario bin ganar privilegios de root modificando las librerías compartidas usadas por programas con setuid de root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2:9.0:*:*:*:*:*:*:*","matchCriteriaId":"EFF280E6-CF00-4B71-B58A-2087D339C665"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:6.0:*:*:*:*:*:*:*","matchCriteriaId":"489B0F5D-2D6B-4599-BE7A-41A491E6318A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:7.0:*:linux:*:*:*:*:*","matchCriteriaId":"6EA810DB-104E-412A-8B6E-DBB5BEE743A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:7.1:*:linux:*:*:*:*:*","matchCriteriaId":"56D0096E-8145-4A36-BC18-A9C5C780D1A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*","matchCriteriaId":"80DE2026-D9F0-4AAA-97E6-F4FB0EBDB265"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.0:*:linux:*:*:*:*:*","matchCriteriaId":"6F180189-FA62-453A-B6F8-134FE12805EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*","matchCriteriaId":"3DC757E1-EC37-48C5-BE72-53184624ACDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.2:*:windows:*:*:*:*:*","matchCriteriaId":"B4EC24E8-4E4F-4D93-88E6-B27FEB663823"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/331904","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8346","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12826","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/331904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1199","sourceIdentifier":"cve@mitre.org","published":"2004-03-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in MyProxy 20030629 allows remote attackers to inject arbitrary web script or HTML via the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myproxy:myproxy:2003-06-29:*:*:*:*:*:*:*","matchCriteriaId":"96B52973-081A-4407-95BC-12EF202BF185"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107902444305344&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11090","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.autistici.org/fdonato/advisory/MyProxy20030629-adv.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4202","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9846","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15438","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107902444305344&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.autistici.org/fdonato/advisory/MyProxy20030629-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15438","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1207","sourceIdentifier":"cve@mitre.org","published":"2004-02-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Crob FTP Server 3.5.1 allows remote authenticated users to cause a denial of service (crash) via a dir command with a large number of \".\" characters followed by a \"/*\" string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crob:crob_ftp_server:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD643E2-6E96-4E5C-8722-3195583169D3"}]}]}],"references":[{"url":"http://secunia.com/advisories/10778","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008908","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/352329","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9549","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15105","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/352329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1208","sourceIdentifier":"cve@mitre.org","published":"2004-12-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This was fixed in Oracle 9i Database Release 2, version 9.2.0.3.","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Oracle 9i 9 before 9.2.0.3 allow local users to execute arbitrary code by (1) setting the TIME_ZONE session parameter to a long value, or providing long parameters to the (2) NUMTOYMINTERVAL, (3) NUMTODSINTERVAL or (4) FROM_TZ functions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2201796B-013B-4440-B366-1F2966AA86FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2FFA2A5C-B289-4505-85F5-7F6F0222B552"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4E876825-D6E5-4958-B737-4CE43A32BEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8E07567-754A-40C0-9428-D151880EE6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"58DB0B6B-EB97-448A-B63E-E5997382DD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2:*:*:*:*:*:*:*","matchCriteriaId":"68286D06-9EBA-4FBD-AB0B-D80993895416"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C059683-E0A1-4E97-B393-CB6B0EACF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675664-7036-48D0-9524-0350F626D4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0:*:*:*:*:*:*:*","matchCriteriaId":"6E46FE2E-CA1A-4970-81FF-0BFFF2CF6849"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3EE7A2B1-A161-4A20-9EEC-B1EF7F2E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D65D66A0-23F7-4110-AF71-05CBFB3F92F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F207CBC6-D186-418D-8F11-3E623530E00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB2708A-58D1-4F17-8504-3748D6667788"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34FC1E19-8F20-4215-8D90-E42EF7126BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2:*:*:*:*:*:*:*","matchCriteriaId":"CB172848-A873-4137-A335-AD034806A5EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B78BD7D2-7B48-438C-8C24-01C4007C1A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0DDCC0D1-32AD-4902-8383-2AA169C3F3BA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0030.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10805","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/o-093.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/240174","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/399806","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/819126","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/846582","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/advisories/ora_from_tz.txt","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.nextgenss.com/advisories/ora_numtodsinterval.txt","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.nextgenss.com/advisories/ora_numtoyminterval.txt","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.nextgenss.com/advisories/ora_time_zone.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/3837","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3838","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3839","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3840","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9587","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15060","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10805","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/o-093.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/240174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/399806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/819126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/846582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/advisories/ora_from_tz.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.nextgenss.com/advisories/ora_numtodsinterval.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.nextgenss.com/advisories/ora_numtoyminterval.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.nextgenss.com/advisories/ora_time_zone.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/3837","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15060","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2003-1214","sourceIdentifier":"cve@mitre.org","published":"2004-02-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the server login for VisualShapers ezContents 2.02 and earlier allows remote attackers to bypass access restrictions and gain access to restricted functions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:1.40:*:*:*:*:*:*:*","matchCriteriaId":"34986CA0-5D4E-44D6-849D-5CBD2820B5B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:1.41:*:*:*:*:*:*:*","matchCriteriaId":"8F7F91E9-7863-44A5-AAAA-94907D0F663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:1.42:*:*:*:*:*:*:*","matchCriteriaId":"BA801A12-208E-46CA-9383-C2DA34A80F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:1.43:*:*:*:*:*:*:*","matchCriteriaId":"FAB18C7A-9D55-4EA4-B99D-7D7186B467C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:1.44:*:*:*:*:*:*:*","matchCriteriaId":"E26C0400-4845-44A3-9148-4B50F8F3D683"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:1.45:*:*:*:*:*:*:*","matchCriteriaId":"262D91DB-DED7-42D4-801A-F51FDB4E01EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:1.45b:*:*:*:*:*:*:*","matchCriteriaId":"41C51865-7F1F-4F8A-9F83-8DF13A9B4BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"28F49C85-8B17-4C92-8E35-E85FCF7D3505"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3FBB7052-B779-4D85-B639-45DB66407F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"E37437DA-042E-4CAD-BA11-108614D8B482"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"2DF24859-8646-41ED-9EF9-A7B4EA5EE9D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"C9407F37-8477-4B05-99C5-4ADD24A33F9F"}]}]}],"references":[{"url":"http://secunia.com/advisories/10839","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.ezcontents.org/forum/viewtopic.php?t=361","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15136","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.ezcontents.org/forum/viewtopic.php?t=361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0001","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges."},{"lang":"es","value":"Vulnerabilidad desconocida en la comprobación de eflags en la emulación de 32 bits del kernel de Linux para sistemas AMD64 permite a usuarios locales ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200402-06.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/337238","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-017.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9429","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14888","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A868","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200402-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/337238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A868","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0002","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large number of small packets to be produced, or (2) via a large number of packets with a small TCP payload, which cause a large number of calls to the resource-intensive sowakeup function."},{"lang":"es","value":"La funcionalidad TCP MSS (maximum segment size) en netinet permite a atacantes remotos causar una denegación de servicio (consumición de recursos) mediante un:\r\nMTU bajo, que causa que se produzcan un gran número de pequeños paquetes, o\r\nmediante un grán número de paquetes con contenido TCP pequeño, lo que hace que se hagan un gran número de llamadas a la función sowakeup, que consumen muchos recursos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:releng:*:*:*:*:*:*","matchCriteriaId":"A0A3F7B6-2878-40C0-B59C-EBA8D171D2F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:stable:*:*:*:*:*:*","matchCriteriaId":"0EB09993-B837-4352-B09D-3656F62638A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:release:*:*:*:*:*:*","matchCriteriaId":"0361EA35-FBD7-4E8F-8625-C8100ED7BB7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:stable:*:*:*:*:*:*","matchCriteriaId":"29EAA113-2404-4ABB-826B-3AA2AA858D02"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"E3F7EB61-55A5-4776-B0E7-3508920A6CEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*","matchCriteriaId":"A442DE97-4485-4D95-B95D-58947585E455"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*","matchCriteriaId":"1E8A6564-129A-4555-A5ED-6F65C56AE7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*","matchCriteriaId":"237174A4-E030-4A0B-AD0B-5C463603EAA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*","matchCriteriaId":"5D7F8F11-1869-40E2-8478-28B4E946D3CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*","matchCriteriaId":"9062BAB5-D437-49BE-A384-39F62434B70B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*","matchCriteriaId":"3BA1504C-14FE-4C21-A801-944041F2946F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*","matchCriteriaId":"21B69535-4FB6-4FAD-AAA6-C790FF82EFAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*","matchCriteriaId":"6E53C673-9D6D-42C8-A502-033E1FC28D97"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*","matchCriteriaId":"6F4AC452-6042-409D-8673-ACAD108EE3B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*","matchCriteriaId":"2FE1009B-371A-48E2-A456-935A1F0B7D0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*","matchCriteriaId":"C844A170-B5A7-4703-AF3B-67366D44EA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*","matchCriteriaId":"3D41CB12-7894-4D25-80EC-23C56171D973"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*","matchCriteriaId":"9BCD9C12-EDAB-473F-9CC5-04F06B413720"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*","matchCriteriaId":"58EBC5C8-5CA8-4881-A036-179FDEBA3CA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*","matchCriteriaId":"09789843-6A1A-4CDB-97E8-89E82B79DDB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*","matchCriteriaId":"118211EF-CED7-4EB5-9669-F54C8169D4AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*","matchCriteriaId":"58288F0F-B4CE-445C-AD93-DA73E3AD6FC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*","matchCriteriaId":"CC96FBA9-6A65-4CC7-BE68-ADAF450ABE21"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*","matchCriteriaId":"9A405AE2-ECC4-4BB0-80DD-4736394FB217"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B86C77AB-B8FF-4376-9B4E-C88417396F3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*","matchCriteriaId":"E5612FB0-8403-4A7E-B89A-D7BDFAC00078"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*","matchCriteriaId":"FA699BB4-94AA-40E6-A6B6-33E3D416CDA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*","matchCriteriaId":"AFDA151E-E614-4A24-A34D-B6D5309110CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*","matchCriteriaId":"A7818E11-1BEB-4DAA-BA7A-A278454BA4B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*","matchCriteriaId":"441BE3A0-20F4-4972-B279-19B3DB5FA14D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*","matchCriteriaId":"09BFA20B-2F31-4246-8F74-63DF1DB884EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*","matchCriteriaId":"5F3B4BA2-8A61-4F9A-8E46-7FA80E7F5514"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*","matchCriteriaId":"2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*","matchCriteriaId":"00EAEA17-033A-4A50-8E39-D61154876D2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*","matchCriteriaId":"4AE93D3D-34B4-47B7-A784-61F4479FF5A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*","matchCriteriaId":"3B13D898-C1B6-44B9-8432-7DDB8A380E9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*","matchCriteriaId":"51A612F6-E4EB-4E34-8F55-79E16C74758E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*","matchCriteriaId":"5C19B266-8FE7-49ED-8678-2D522257491D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*","matchCriteriaId":"FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*","matchCriteriaId":"9A5309ED-D84F-4F52-9864-5B0FEEEE5022"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"}]}]}],"references":[{"url":"http://lists.freebsd.org/pipermail/cvs-src/2004-January/016271.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.freebsd.org/pipermail/cvs-src/2004-January/016271.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-0003","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Linux kernel before 2.4.22 allows local users to gain privileges, related to \"R128 DRI limits checking.\""},{"lang":"es","value":"Vulnerabilidad desconocida en el kernel de Linux anterior a 2.4.22 permite a usuarios locales ganar privilegios, relacionada con \"comprobación de límites R128 DRI\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.22","matchCriteriaId":"1B0B9D8B-49EF-41C1-8644-9A0994A55D44"}]}]}],"references":[{"url":"http://secunia.com/advisories/10782","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10911","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10912","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11202","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11361","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11362","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11369","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11370","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11376","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11464","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11891","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12075","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-082.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-121.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-126.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-127.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-145.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-479","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-480","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-481","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-482","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-489","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-491","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-495","source":"cve@mitre.org"},{"url":"http://www.linuxcompatible.org/print25630.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:029","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-044.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-065.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-106.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-166.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9570","source":"cve@mitre.org"},{"url":"http://www.turbolinux.com/security/2004/TLSA-2004-14.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15029","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1017","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A834","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9204","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-082.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-121.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-126.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-127.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-145.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxcompatible.org/print25630.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-065.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-106.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-166.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.turbolinux.com/security/2004/TLSA-2004-14.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0004","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares the serial of the signer's certificate and the one in the database, which can cause OpenCA to incorrectly accept a signature if the certificate's chain is trusted by OpenCA's chain directory, allowing remote attackers to spoof requests from other users."},{"lang":"es","value":"La función libCheckSignature en crypto-utils.lib de OpenCA 0.9.1.6 y anteriores sólo compara el número de serie del certificado del firmante y el de la base de datos, lo que puede causar que OpenCA acepte una firma de manera incorrecta si la cadena del certificado es de confianza para el directorio de cadenas de OpenCA, permitiendo a atacantes remotos suplantar peticiones de otros usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.1.6","matchCriteriaId":"683731EC-7E2E-42F8-B6A7-4EAD0E0D9AD1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107427313700554&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/336446","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.openca.org/news/CAN-2004-0004.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3615","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9435","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14847","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107427313700554&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/336446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.openca.org/news/CAN-2004-0004.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3615","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0005","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) octal encoding in yahoo_decode that causes a null byte to be written beyond the buffer, (2) octal encoding in yahoo_decode that causes a pointer to reference memory beyond the terminating null byte, (3) a quoted printable string to the gaim_quotedp_decode MIME decoder that causes a null byte to be written beyond the buffer, and (4) quoted printable encoding in gaim_quotedp_decode that causes a pointer to reference memory beyond the terminating null byte."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Gaim 0.75 pemite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante \r\ncodificación octal en yahoo_decode que causa que un byte nulo sea escrito más allá del búfer,\r\ncodificación octal en yahoo_decode que causa que un puntero referencie memoria más allá del byte nulo de terminación, \r\nuna cadena imprimible entrecomillada pasada al decodificador MIME gaim_quotedp_decode que hace que un byte nulo sea escrito más allá del búfer, y \r\ncodificación imprimible entrecomillada en gaim_quotedp_decode que causa que un puntero referencie memora más allá del byte nulo de terminación."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gaim_project:gaim:0.75:*:*:*:*:*:*:*","matchCriteriaId":"D76DBB3D-8A92-4CB2-AEEA-13A9F834A36E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=107513690306318&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://security.e-matters.de/advisories/012004.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-434","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/190366","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/226974","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/404470","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/655974","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.novell.com/linux/security/advisories/2004_04_gaim.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/3736","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1008850","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14935","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14938","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14942","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14944","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/200401-04","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=107513690306318&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://security.e-matters.de/advisories/012004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/190366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/226974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/404470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/655974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.novell.com/linux/security/advisories/2004_04_gaim.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/3736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securitytracker.com/id?1008850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://security.gentoo.org/glsa/200401-04","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-0006","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Gaim 0.75 y anteriores, y Ultramagnetic anteriores a de 0.81, permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:*:*:*:*:*:*:*:*","versionEndIncluding":"0.75","matchCriteriaId":"0207F046-59D5-4F9B-89FC-E789D83D939C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ultramagnetic:ultramagnetic:*:*:*:*:*:*:*:*","versionEndIncluding":"0.81","matchCriteriaId":"6A512FDD-F4A5-455F-B0B0-9F35EE432586"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107513690306318&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107522432613022&w=2","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/012004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200401-04.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://ultramagnetic.sourceforge.net/advisories/001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-434","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/297198","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/371382","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/444158","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/503030","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/527142","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/871838","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:006","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_04_gaim.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3731","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3732","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-032.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-033.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-045.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9489","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008850","source":"cve@mitre.org"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14939","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14940","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14941","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14943","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14945","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14947","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10222","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A818","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107513690306318&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107522432613022&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/012004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200401-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://ultramagnetic.sourceforge.net/advisories/001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/297198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/371382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/444158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/503030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/527142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/871838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_04_gaim.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14939","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A818","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0007","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code."},{"lang":"es","value":"Desbordamiento de búfer en la Función Extract Info Field en los manejadores de protocolos de MSN e YMSG en Gaim 0.74 y anteriores, y Ultramagnetic anteriores a 0.81 permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:*:*:*:*:*:*:*:*","versionEndIncluding":"0.74","matchCriteriaId":"BD0D1E45-C32E-45C0-9AA2-130186618993"},{"vulnerable":true,"criteria":"cpe:2.3:a:ultramagnetic:ultramagnetic:*:*:*:*:*:*:*:*","versionEndIncluding":"0.81","matchCriteriaId":"6A512FDD-F4A5-455F-B0B0-9F35EE432586"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107513690306318&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107522432613022&w=2","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/012004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200401-04.xml","source":"cve@mitre.org"},{"url":"http://ultramagnetic.sourceforge.net/advisories/001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-434","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/197142","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:006","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3733","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-032.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-033.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/6281","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9489","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008850","source":"cve@mitre.org"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14946","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A819","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9906","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107513690306318&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107522432613022&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/012004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200401-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ultramagnetic.sourceforge.net/advisories/001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/197142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-033.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/6281","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.361158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0008","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de enteros en Gaim 0.74 y anteriores, y Ultramagnetic anteriores a 0.81 permite a atacantes remotos causar una denegación de servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:*:*:*:*:*:*:*:*","versionEndIncluding":"0.74","matchCriteriaId":"BD0D1E45-C32E-45C0-9AA2-130186618993"},{"vulnerable":true,"criteria":"cpe:2.3:a:ultramagnetic:ultramagnetic:*:*:*:*:*:*:*:*","versionEndIncluding":"0.81","matchCriteriaId":"6A512FDD-F4A5-455F-B0B0-9F35EE432586"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107513690306318&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107522338611564&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107522432613022&w=2","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/012004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200401-04.xml","source":"cve@mitre.org"},{"url":"http://ultramagnetic.sourceforge.net/advisories/001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-434","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/779614","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:006","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3734","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-032.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-033.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-045.html","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008850","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14937","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A820","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9469","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107513690306318&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107522338611564&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107522432613022&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/012004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200401-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ultramagnetic.sourceforge.net/advisories/001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/779614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-032.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-045.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9469","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0009","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache-SSL 1.3.28+1.52 and earlier, with SSLVerifyClient set to 1 or 3 and SSLFakeBasicAuth enabled, allows remote attackers to forge a client certificate by using basic authentication with the \"one-line DN\" of the target user."},{"lang":"es","value":"Apache-SSL 1.3.28+1.52 y anteriores, con SSLVerifyClient establecido a 1 ó 3 y SSLFakeBasicAuth activado, pemite a atantes remotos falsificar un certificado de cliente usando autenticación básica con el \"DN de una línea\" del usuario objetivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache-ssl:apache-ssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.28_1.52","matchCriteriaId":"4640173C-EA49-4FF8-95C6-6B771542626C"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016870.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107619127531765&w=2","source":"cve@mitre.org"},{"url":"http://www.apache-ssl.org/advisory-20040206.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3877","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9590","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15065","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016870.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107619127531765&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apache-ssl.org/advisory-20040206.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15065","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0010","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges."},{"lang":"es","value":"Vulnerabilidad desconocida en la función ncp_lookup de ncpfs en Red Hat Enterprese Linux 2.1 permite a usuarios locales ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820","source":"cve@mitre.org"},{"url":"http://fedoranews.org/updates/FEDORA-2004-079.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-082.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-479","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-480","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-481","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-482","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-489","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-491","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-495","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:015","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-065.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-069.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-188.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/6759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9691","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15250","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1035","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11388","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A835","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://fedoranews.org/updates/FEDORA-2004-079.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-082.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-065.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-069.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-188.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/6759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9691","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11388","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A835","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0011","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code."},{"lang":"es","value":"Desbordamiento de búfer en fsp anteriores 2.81b18 permite a usuarios remotos ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:fsp:*:*:*:*:*:*:*:*","versionEndIncluding":"2.81.b18","matchCriteriaId":"D7FBFE96-E328-4AD0-AAAD-517B5C927B8F"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/o-048.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-416","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9377","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14155","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-048.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0013","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"jabber 1.4.2, 1.4.2a, and possibly earlier versions, does not properly handle SSL connections, which allows remote attackers to cause a denial of service (crash)."},{"lang":"es","value":"jabber 1.4.3, 1.4.2a,  y posiblemente otras versiones no maneja apropiadamente conexiones SSL, lo que permite que atacantes remotos provoquen una denegación de servicio (caída)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jabber_software_foundation:jabber_server:1.4.2a:*:*:*:*:*:*:*","matchCriteriaId":"313BF2C7-4D5F-4F64-8C26-8F8EF1932F78"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabber_software_foundation:jabber_server:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"03E2969B-ECB1-4538-A783-FAB613172506"}]}]}],"references":[{"url":"http://secunia.com/advisories/10559","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-414","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:005","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3345","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9376","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14158","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14158","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0014","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings."},{"lang":"es","value":"Múltiples desbordamientos de búfer en el interfaz WebDAV 0.8.2 y anteriores permite a servidores web remotos ejecutar código arbitrario mediante ciertas cadenas largas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nd:nd:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.2","matchCriteriaId":"087C7B96-B456-4BF8-8CCB-460B4E372EEA"}]}]}],"references":[{"url":"http://secunia.com/advisories/10549","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10550","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-412","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9365","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008616","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14141","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14141","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0015","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vbox3 0.1.8 and earlier does not properly drop privileges before executing a user-provided TCL script, which allows local users to gain privileges."},{"lang":"es","value":"vbox3 0.1.8 y anteriores no libera privilegios antes de ejecutar un script TCL de usuario, lo que permite que usuarios locales ganen privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vbox3:vbox3:*:*:*:*:*:*:*:*","versionEndIncluding":"0.1.8","matchCriteriaId":"68780494-FC76-472A-8B40-259364AF4583"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-418","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9381","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14170","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0016","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The calendar module for phpgroupware 0.9.14 does not enforce the \"save extension\" feature for holiday files, which allows remote attackers to create and execute PHP files."},{"lang":"es","value":"El módulo de calendario para phpgroupware 0.9.14 no fuerza la extensión segura para ficheros holiday, lo que permite que atacantes remotos creen y ejecuten ficheros PHP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"C7CBAEFF-C857-40A4-B3E9-2837DD2D30B5"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-419","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6860","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9387","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13489","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0017","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the (1) calendar and (2) infolog modules for phpgroupware 0.9.14 allow remote attackers to perform unauthorized database operations."},{"lang":"es","value":"En phpgroupware 0.9.14, múltiples vulnerabilidades de inyección de código SQL tanto en los módulos calendar como infolog, permiten que atacantes remotos ejecuten operaciones no autorizadas sobre la base de datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"C7CBAEFF-C857-40A4-B3E9-2837DD2D30B5"}]}]}],"references":[{"url":"http://secunia.com/advisories/10591","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-419","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008662","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0028","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"jitterbug 1.6.2 does not properly sanitize inputs, which allows remote authenticated users to execute arbitrary commands."},{"lang":"es","value":"jitterbug 1.6.2  no trata los inputs adecuadamente, lo que permite que usuarios remotos no autentificados ejecuten código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:jitterbug:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"278AC527-D4C0-47BD-B2AD-423A4CFC0FAC"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-420","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9397","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14207","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14207","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0029","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges."},{"lang":"es","value":"Lotus Notes Domino 6.0.2 para Linux instala el fichero de configuración notes.ini con permisos de escritura para todo el mundo, lo que permite a usuarios locales modificar la configuración de Notes y ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C1320064-F0E9-42C8-8E1C-9037684FA693"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107340897710308&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10566","source":"cve@mitre.org"},{"url":"http://www.excluded.org/advisories/advisory05.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/3424","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9366","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008623","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14153","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107340897710308&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.excluded.org/advisories/advisory05.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/3424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14153","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0030","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains the code."},{"lang":"es","value":"Vulnerabilidad de inclusión de código PHP remoto en functions.php,  authentication_index.php, y config_gedcom.php de PHPGEDVIEW 2.61  permite a atacantes remotos ejecutar código PHP arbitrario modificando el parámetro PGV_BASE_DIRECTORY para hacer referencia a una URL en un servidor web remoto que contiene el código."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-829"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*","matchCriteriaId":"CE53F2DA-37A7-482C-81BE-8D2D12489462"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107340840209453&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://secunia.com/advisories/10565","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.osvdb.org/3343","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9368","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1008632","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14159","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=107340840209453&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://secunia.com/advisories/10565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.osvdb.org/3343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1008632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0031","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php."},{"lang":"es","value":"PHPGEDVIEW 2.61 permite a atacantes remotos reinstalar el software y cambiar la contraseña de adminstrador mediante una petición HTTP directa a editconfig.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*","matchCriteriaId":"CE53F2DA-37A7-482C-81BE-8D2D12489462"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107340840209453&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10565","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3403","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14161","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107340840209453&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14161","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0032","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in PHPGEDVIEW 2.61 allows remote attackers to inject arbitrary HTML and web script via the firstname parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en search.php en PHPGEDVIEW 2.61 permite a atacantes remotos inyectar HTML arbitrar y script web arbitrario mediante el parámetro firstname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*","matchCriteriaId":"CE53F2DA-37A7-482C-81BE-8D2D12489462"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107340840209453&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10565","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3402","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9369","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14160","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107340840209453&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14160","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0033","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a phpinfo command."},{"lang":"es","value":"admin.php en PHPGEDVIEW 2.61 permite a atacantes remotos obtener información sensible mediante un un parámetro action con un comando phpinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*","matchCriteriaId":"CE53F2DA-37A7-482C-81BE-8D2D12489462"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107340840209453&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10565","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3404","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9371","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14162","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107340840209453&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0034","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.4.5 and earlier allow remote attackers to inject arbitrary HTML or web script via (1) the phorum_check_xss function in common.php, (2) the EditError variable in profile.php, and (3) the Error variable in login.php."},{"lang":"es","value":"Múltiples vulneravilidades de secuencias de comandos en sitios cruzados (XSS) en Phorum 3.4.5 y anteriores pemite a atacantes inyectar código HTML o script web arbitrario mediante la función phorum_check_xss en common.php, la variable EditError en profile.php, y la variable Error en login.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4.5","matchCriteriaId":"1628D391-59B4-4D58-8409-5D099D45E8B4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107340481804110&w=2","source":"cve@mitre.org"},{"url":"http://phorum.org/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/10567","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3434","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3506","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3510","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9361","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008633","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14145","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107340481804110&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://phorum.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/10567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3434","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008633","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0035","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hide_email parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en register.php de Phorum 3.4.5 y anteriores permite a atacantes remotos ejecutar comandos SLQ arbitrarios mediante el parámetro hide_email."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4.5","matchCriteriaId":"1628D391-59B4-4D58-8409-5D099D45E8B4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107340481804110&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10567","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3508","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9363","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14146","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107340481804110&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14146","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0036","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en calendar.php de vBulletin Forum 2.3.x permite a atacantes remotos robar información sensible mediante el parámetro eventid"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"04E0702A-9235-45BE-82A8-BFD57A0DCC9E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107340358202123&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3344","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9360","source":"cve@mitre.org"},{"url":"http://www.vbulletin.com/forum/showthread.php?postid=588825","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14144","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107340358202123&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vbulletin.com/forum/showthread.php?postid=588825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14144","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0037","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF messages."},{"lang":"es","value":"FirstClass Desktop Client 7.1 permite a atacantes remotos ejecutar instrucciones arbitrarias mediante hiperenlaces en mensajes FirstClass RTF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opentext:opentext_firstclass_desktop_client:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6969E626-6CF6-4ADE-96C7-4371841747BC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107340950611167&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10556","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3442","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9370","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008609","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14151","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107340950611167&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0038","sourceIdentifier":"cve@mitre.org","published":"2004-06-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81."},{"lang":"es","value":"mcAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 y 3.0 SP2a Patch 3 permite a atacantes remotos ejecutar órdenes arbitrarias mediante ciertas peticiones HTTP POST al manejador \"spipe/file\" de ePO en el puerto TCP 81."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:2.5:*:*:*:*:*:*:*","matchCriteriaId":"45FDC5E3-73CE-4316-B24B-FA459CE91206"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:2.5:sp1:*:*:*:*:*:*","matchCriteriaId":"FD117AAD-FEDB-4D56-A42A-88680C0AA744"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"DAE37B45-85CC-4AD9-B78E-1AECEF96B190"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:3.0:*:*:*:*:*:*:*","matchCriteriaId":"5FC513A6-0498-4215-A9AD-8F81DEE21B71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:3.0:sp2a:*:*:*:*:*:*","matchCriteriaId":"C57BFF74-7A66-4CAD-9D29-104BC63330C5"}]}]}],"references":[{"url":"http://download.nai.com/products/patches/ePO/v2.x/Patch14.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5626","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10200","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/xforce/alerts/id/173","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14166","source":"cve@mitre.org"},{"url":"http://download.nai.com/products/patches/ePO/v2.x/Patch14.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/xforce/alerts/id/173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0039","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI."},{"lang":"es","value":"Múltiples vulnerabilidades de cadena de formato en el componente HTTP Application Intelligence (IA) de Checkpoint Firewall-1 NG-AI R55 y R54, y  Checkpoint Firewall-1 HTTP Security Server incluido con NG FP1, FP2, y FP3  permite a atacantes remotos ejecutar código arbitrario mediante peticiones HTTP que hacen que se utilicen especificadores de cadena de formato en un mensaje de error, como se ha demastrado usando el esquema de una URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:*:*:*:*:*:*:*:*","matchCriteriaId":"85711114-A402-4B53-AA91-DC66937606F1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107604682227031&w=2","source":"cve@mitre.org"},{"url":"http://www.checkpoint.com/techsupport/alerts/security_server.html","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-072.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/790771","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9581","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-036A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://xforce.iss.net/xforce/alerts/id/162","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14149","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107604682227031&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.checkpoint.com/techsupport/alerts/security_server.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-072.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/790771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-036A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://xforce.iss.net/xforce/alerts/id/162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0040","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute arbitrary code via an ISAKMP packet with a large Certificate Request packet."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en Checkpoint VPN-1 Server 4.1 a 4.1 SP6 y Checkpoint SecuRemote/SecureClient 4.1 a 4.1 compilación 4200 pemite a atacantes remotos ejecutar código arbitrario mediante un paquete ISAKMP con un paquete de Petición de Certificado muy grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"AFCB5D3D-E8C6-43CE-A1D4-7F46519E9893"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"0A7ED9A2-3996-4ABE-B0EF-92ACF6C8A38B"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"997ABD78-6DF8-440C-B90A-E5CD7C6ACA75"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"60536AAF-76BC-4773-98FA-5F01E2D231FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp5:*:*:*:*:*:*","matchCriteriaId":"1E4206C4-05A7-46D1-90C7-6BA7744C7AD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp5a:*:*:*:*:*:*","matchCriteriaId":"B78091F6-C3A7-4842-B555-D7ECC080E565"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp0:*:*:*:*:*:*:*","matchCriteriaId":"A4D9A576-2878-4AC4-AC95-E69CB8A84A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp1:*:*:*:*:*:*:*","matchCriteriaId":"0A1A0B02-CF33-401F-9AB2-D595E586C795"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:4.1:sp5a:*:*:*:*:*:*","matchCriteriaId":"610F8305-9CD7-48F2-9F2E-2CDECD623DBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp0:*:*:*:*:*:*:*","matchCriteriaId":"4AE4A7EE-1BA3-46F1-BF4A-A72997EE0992"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp1:*:*:*:*:*:*:*","matchCriteriaId":"02029D75-FAF2-4842-9246-079C7DE36417"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107604682227031&w=2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-073.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/873334","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3821","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4432","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9582","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/xforce/alerts/id/163","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14150","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107604682227031&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-073.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/873334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/xforce/alerts/id/163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14150","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0041","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mod_auth_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remote authenticated users to bypass intended access restrictions."},{"lang":"es","value":"El módulo mod-auth-shadow 1.4 y anteriores no fuerza la expiración de una cuenta de usuario, lo que podría permitir que usuarios autentificados remotos se salten restricciones de acceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mod_auth_shadow:mod_auth_shadow:1.0:*:*:*:*:*:*:*","matchCriteriaId":"749F9325-2253-420A-941C-BD56491E127B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_auth_shadow:mod_auth_shadow:1.1:*:*:*:*:*:*:*","matchCriteriaId":"84593AE8-E873-4C4F-99F0-81037B5BEC79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_auth_shadow:mod_auth_shadow:1.2:*:*:*:*:*:*:*","matchCriteriaId":"43025F27-302F-41E4-9DD3-99AFAF94B758"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_auth_shadow:mod_auth_shadow:1.3:*:*:*:*:*:*:*","matchCriteriaId":"0D5BE018-681C-47A9-B911-2A9DAD07096B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_auth_shadow:mod_auth_shadow:1.4:*:*:*:*:*:*:*","matchCriteriaId":"BBEBF877-4EB6-4E4F-BF8B-A172D2BA3981"}]}]}],"references":[{"url":"http://secunia.com/advisories/10612","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-421","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3454","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9404","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008675","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10612","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008675","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0042","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to identify valid usernames."},{"lang":"es","value":"vsftpd 1.1.3 genera diferentes mensajes de error dependiendo de si existe o no un nombre de usuario válido, lo que permite que atacantes remotos identifiquen nombres de usuarios válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beasts:vsftpd:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"45E43D1B-E967-4280-ACB2-8E945F2F30AB"}]}]}],"references":[{"url":"http://securitytracker.com/id?1008628","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0043","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename in the download feature."},{"lang":"es","value":"Desbordamiento de búfer en  Yahoo Instant Messenger 5.6.0.1351 y anteriores permite que atacantes remotos provoquen una denegación de servicio (caída) y posiblemente ejecuten código arbitrario mediante un nombre de fichero largo en la opción de descarga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yahoo:messenger:*:*:*:*:*:*:*:*","versionEndIncluding":"5.6.0.1351","matchCriteriaId":"491F3341-39C6-46FE-A5A4-DEE5839FCFD2"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-January/015334.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107357996802255&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10573","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3437","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9383","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008651","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14171","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-January/015334.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107357996802255&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0044","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when \"Allow Only Cisco CallManager Users\" is enabled and the Corporate Directory settings refer to the directory service being used by Cisco CallManager, which allows remote attackers to gain access with a valid username."},{"lang":"es","value":"Cisco Personal Assistant 1.4(1) and 1.4(2) deshabilita autentificación del password cuando \"\"Allow Only Cisco CallManager Users\"\" está habilitado y las opciones del directorio corporativo se refieren al directorio de servicio que está usando Cisco CallManager, lo que permite que atacantes remotos tengan acceso con un nombre de usuario válido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:personal_assistant:1.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"131ABD48-89ED-45B9-865B-20AF3631BA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:personal_assistant:1.4\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"0BC18EEF-1DA5-402A-9C22-BCF287F2D501"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040108-pa.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3430","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9384","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14172","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040108-pa.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14172","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0045","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code."},{"lang":"es","value":"Desbordamiento de búfer en el código de control del mensaje en INN 2.4.0 puede permitir que atacantes remotos ejecuten código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:inn:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"3F861584-D429-4E41-9003-97753BA64228"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-01/0063.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-01/0064.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10578","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/759020","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9382","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.365791","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14190","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-01/0063.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-01/0064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/759020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.365791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0046","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script or HTML via a GET request containing a terminating '\"' (double quote) character."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en SnapStream PVS LITE permite que atacantes remotos inyecten script web arbitrario o HTML mediante una petición GET que contiene un caracter comillas (\"\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:snapstream:snapstream_pvs:lite:*:*:*:*:*:*:*","matchCriteriaId":"5C325113-D6CB-45E5-9962-E38AF0A801F6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107350313917867&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10575","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008646","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3440","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9375","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14164","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107350313917867&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0047","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple programs in trr19 1.0 do not properly drop privileges before executing a system command, which could allow local users to gain privileges."},{"lang":"es","value":"Múltiples programas en trr19 1.0 no rebajan sus privilegios antes de ejecutar un comando de sistema, lo que podría permitir a usuarios locales ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yamamoto_hirotaka:trr19:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E7274EA1-CD01-42F8-A0FC-8136DF8EC198"}]}]}],"references":[{"url":"http://secunia.com/advisories/10744/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10745","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-430","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3747","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9520","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008875","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14975","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10744/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14975","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0049","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port."},{"lang":"es","value":"Helix Universal Server/Proxy 9 y Mobile Server 10 permite a atacantes remotos causar una denegación de servicio mediante ciertos mensajes HTTP POST al puerto de Administración del Sistema."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_universal_mobile_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.1.1.120","matchCriteriaId":"36C907A2-7760-4ADF-AA39-F4651BE2FEFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_universal_server:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.2.881","matchCriteriaId":"C49FFA7E-3C96-4141-86FC-5223DE569666"}]}]}],"references":[{"url":"http://seclists.org/lists/vulnwatch/2004/Jan-Mar/0057.html","source":"cve@mitre.org"},{"url":"http://service.real.com/help/faq/security/040112_dos/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://service.real.com/help/faq/security/security022604.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/357834","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9421","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://seclists.org/lists/vulnwatch/2004/Jan-Mar/0057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://service.real.com/help/faq/security/040112_dos/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://service.real.com/help/faq/security/security022604.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/357834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-0050","sourceIdentifier":"cve@mitre.org","published":"2004-06-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2) CON, (3) AUX, (4) COM1, (5) COM2, and others."},{"lang":"es","value":"Verity Ultraseek anteriores a 5.2.2 permite a atacantes remotos obtener la ruta completa de la raíz de documentos mediante un nombre de dispositivo de MS-DOS en la opción de búsqueda web, como  (1) NUL, (2) CON, (3) AUX, (4) COM1, (5) COM2, y otros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:verity:ultraseek:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2.1","matchCriteriaId":"13B27904-C5FB-46FA-9566-3B4B5EB662CC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0024.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020952.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108377388114888&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16066","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0024.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020952.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108377388114888&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16066","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0051","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported Content-Transfer-Encoding values such as (1) uuencode, (2) mac-binhex40, and (3) yenc, which may be interpreted differently by mail clients."},{"lang":"es","value":"Múltiples productos de pasarelas de seguridad de contenidos y antivirus pueden permitir a atacantes remotos saltarse restricciones de contenido mediante mensajes MIME que usan valores Content-Transfer-Encoding no estándar pero ampliamente soportados, como (1) uuencode, (2) mac-binhex40, y (3) yenc, lo que puede ser interpretado de manera distinta por clientes de correo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CA12B965-672C-444D-9774-0F76FE47EA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"E6C9B32C-5EC9-46BD-AA77-F414A143576C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"823C27EB-C00F-4A7E-B832-013A50A1EE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"BD217379-28E7-465E-843D-E7204EE0E89F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.13:*:*:*:*:*:*:*","matchCriteriaId":"EB96CB8A-59F3-4624-B2BA-687ECF929B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.14:*:*:*:*:*:*:*","matchCriteriaId":"04A02C12-547E-4086-A409-53AA68F1A4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.15:*:*:*:*:*:*:*","matchCriteriaId":"8185FBF2-D678-4D90-A5AC-F9B06DFED95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.3:*:*:*:*:*:*:*","matchCriteriaId":"4F4EC2BB-A979-4C37-B8BB-086DAEEB4A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.4:*:*:*:*:*:*:*","matchCriteriaId":"CD53E1BC-6A92-4D7C-BE1F-FEF88F78DBD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*","matchCriteriaId":"AC782BFC-6BA0-4823-8A6D-F7D83F55393C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*","matchCriteriaId":"E1B09025-47B9-4F77-9DA6-80885E9A4EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E021143-608B-44A2-84FB-8F8AC00A9985"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0A9BB1C1-2CB2-426D-A8CE-AF5CB0B98674"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7AC4686E-B92F-47ED-90DA-42AF650521D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"80EF73F0-1FE1-4041-9C07-A89D153DA41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EF45C4F8-A20C-4D7D-B203-AF36FB046C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"75222D1B-1384-4C74-A54F-BC028C5CDB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A5129FD4-C011-4EA9-B8A1-256E95494FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8F33D78C-9CD1-49A6-A43E-D0187600C033"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6D3CF1D-64E1-47DB-8767-EF8DBF4E17AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E725208-BA0C-41D9-BC45-84577A94AAA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A43C3DCC-3298-4D4D-9485-4A3BECB615E9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109517788100063&w=2","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2004/380375/mime.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17337","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109517788100063&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2004/380375/mime.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17337","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0052","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use standard separators incorrectly, within MIME headers, fields, parameters, or values, which may be interpreted differently by mail clients."},{"lang":"es","value":"Múltiples productos de pasarelas de seguridad de contenidos y antivirus pueden permitir a atacantes remotos saltarse restricciones de contenido mediante mensajes MIME que usan caractéres de separación no estándar, o usan separadores estándar de manera incorrecta, dentro de cabeceras, campos, parámetros o valores MIME, lo que puede ser interpretado de manera diferente por clientes de correo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CA12B965-672C-444D-9774-0F76FE47EA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"E6C9B32C-5EC9-46BD-AA77-F414A143576C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"823C27EB-C00F-4A7E-B832-013A50A1EE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"BD217379-28E7-465E-843D-E7204EE0E89F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.13:*:*:*:*:*:*:*","matchCriteriaId":"EB96CB8A-59F3-4624-B2BA-687ECF929B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.14:*:*:*:*:*:*:*","matchCriteriaId":"04A02C12-547E-4086-A409-53AA68F1A4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.15:*:*:*:*:*:*:*","matchCriteriaId":"8185FBF2-D678-4D90-A5AC-F9B06DFED95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.3:*:*:*:*:*:*:*","matchCriteriaId":"4F4EC2BB-A979-4C37-B8BB-086DAEEB4A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.4:*:*:*:*:*:*:*","matchCriteriaId":"CD53E1BC-6A92-4D7C-BE1F-FEF88F78DBD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*","matchCriteriaId":"AC782BFC-6BA0-4823-8A6D-F7D83F55393C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*","matchCriteriaId":"E1B09025-47B9-4F77-9DA6-80885E9A4EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E021143-608B-44A2-84FB-8F8AC00A9985"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0A9BB1C1-2CB2-426D-A8CE-AF5CB0B98674"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7AC4686E-B92F-47ED-90DA-42AF650521D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"80EF73F0-1FE1-4041-9C07-A89D153DA41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EF45C4F8-A20C-4D7D-B203-AF36FB046C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"75222D1B-1384-4C74-A54F-BC028C5CDB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A5129FD4-C011-4EA9-B8A1-256E95494FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8F33D78C-9CD1-49A6-A43E-D0187600C033"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6D3CF1D-64E1-47DB-8767-EF8DBF4E17AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E725208-BA0C-41D9-BC45-84577A94AAA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A43C3DCC-3298-4D4D-9485-4A3BECB615E9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109517669115891&w=2","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2004/380375/mime.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17334","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109517669115891&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2004/380375/mime.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0053","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC2047 encoding, which may be interpreted differently by mail clients."},{"lang":"es","value":"Múltiples productos de pasarelas de seguridad de contenidos y antivirus pueden permitir a atacantes remotos saltarse restricciones de contenido mediante mensajes MIME que usan campos con codificación RFC2047, lo que puede ser interpretado de manera diferente por clientes de correo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CA12B965-672C-444D-9774-0F76FE47EA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"E6C9B32C-5EC9-46BD-AA77-F414A143576C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"823C27EB-C00F-4A7E-B832-013A50A1EE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"BD217379-28E7-465E-843D-E7204EE0E89F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.13:*:*:*:*:*:*:*","matchCriteriaId":"EB96CB8A-59F3-4624-B2BA-687ECF929B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.14:*:*:*:*:*:*:*","matchCriteriaId":"04A02C12-547E-4086-A409-53AA68F1A4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.15:*:*:*:*:*:*:*","matchCriteriaId":"8185FBF2-D678-4D90-A5AC-F9B06DFED95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.3:*:*:*:*:*:*:*","matchCriteriaId":"4F4EC2BB-A979-4C37-B8BB-086DAEEB4A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.4:*:*:*:*:*:*:*","matchCriteriaId":"CD53E1BC-6A92-4D7C-BE1F-FEF88F78DBD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*","matchCriteriaId":"AC782BFC-6BA0-4823-8A6D-F7D83F55393C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*","matchCriteriaId":"E1B09025-47B9-4F77-9DA6-80885E9A4EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E021143-608B-44A2-84FB-8F8AC00A9985"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0A9BB1C1-2CB2-426D-A8CE-AF5CB0B98674"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7AC4686E-B92F-47ED-90DA-42AF650521D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"80EF73F0-1FE1-4041-9C07-A89D153DA41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EF45C4F8-A20C-4D7D-B203-AF36FB046C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"75222D1B-1384-4C74-A54F-BC028C5CDB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A5129FD4-C011-4EA9-B8A1-256E95494FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8F33D78C-9CD1-49A6-A43E-D0187600C033"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6D3CF1D-64E1-47DB-8767-EF8DBF4E17AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E725208-BA0C-41D9-BC45-84577A94AAA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A43C3DCC-3298-4D4D-9485-4A3BECB615E9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109520704408739&w=2","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2004/380375/mime.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17331","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109520704408739&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2004/380375/mime.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17331","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0054","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol."},{"lang":"es","value":"Múltiples vulnerabilidades en la implementación del protocolo H.323 de Cisco IOS 11.3T a 12.2T permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario, como se ha demostrado por el bloque  de pruebas NISCC/OUSPG PROTOS para el protocolo H.225."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:11.3t:*:*:*:*:*:*:*","matchCriteriaId":"655BB9C1-BA90-452E-A9C8-9B1E15B99650"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*","matchCriteriaId":"8F86F790-6247-42F2-9487-3D60A2842F52"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*","matchCriteriaId":"84900BB3-B49F-448A-9E04-FE423FBCCC4F"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2004-01.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040113-h323.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/749342","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9406","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008685","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2004/006489/h323.htm","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4884","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2004-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040113-h323.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/749342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2004/006489/h323.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0055","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value."},{"lang":"es","value":"La función print_attr_string en print-radius.c de tcpdump 3.8.1 y anteriores permite a atacantes remotos causar una denegación de servicio (fallo de segmentación) mediante un atributo RADIUS con un valor de longitud demasiado grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"45BACEA9-8C28-4DB6-96F7-D91B06C8EEF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"C3214AA7-1EB2-4EC8-96AA-2A9985A5EB8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.7:*:*:*:*:*:*:*","matchCriteriaId":"FD63F004-83A9-4CB3-A26D-E82589ED7FE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"5DF65E89-04B7-49F2-ADCE-0BD0A313949E"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000832","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://lwn.net/Alerts/66445/","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107577418225627&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=tcpdump-workers&m=107325073018070&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10636","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10639","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10644","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10652","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10718","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11022","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11032/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12179/","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-425","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/955526","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:008","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00006.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00009.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00015.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-legacy-list/2004-January/msg00726.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-008.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/7090","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008735","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A850","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A853","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9989","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lwn.net/Alerts/66445/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107577418225627&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=tcpdump-workers&m=107325073018070&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11032/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12179/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/955526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-legacy-list/2004-January/msg00726.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-008.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/7090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0056","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol."},{"lang":"es","value":"Múltiples vulnerabilidades en la implementación del protocolo H.323 en Nortel Networks Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, y 802.11 Wireless IP Gateway permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario, como se demostró mediante el grupo de pruebas NISCC/OUSPG PROTOS para el protocolo H.225."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:business_communications_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"FF566B8B-8B96-4D21-A351-A384D4158449"},{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:802.11_wireless_ip_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"5052ED35-0CE3-461F-8766-CB459EA3FFA0"},{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:succession_communication_server_1000:*:*:*:*:*:*:*:*","matchCriteriaId":"2A0CB855-CDD4-42B7-9328-64B10F5A3A4D"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2004-01.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/749342","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9406","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008687","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2004/006489/h323.htm","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2004-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/749342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2004/006489/h323.htm","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0057","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid \"len\" or \"loc\" values to be used in a loop, a different vulnerability than CVE-2003-0989."},{"lang":"es","value":"La función rawprint en las rutinas de decodificación ISAKMP (print-isakmp.c) de tcpdump 3.8.1 y anteriores permite a atacantes remotos causar una denegación de servicio (fallo de segmentación) mediante paquetes ISAKMP malformados que causan que unos valores \"len\" o \"loc\" sean usados en un bucle, una vulnerabilidad diferente de CAN-2003-0989."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lbl:tcpdump:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8.1","matchCriteriaId":"F64FF8C5-C68F-4AD2-A370-1ACE4997AB3B"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://lwn.net/Alerts/66445/","source":"cve@mitre.org"},{"url":"http://lwn.net/Alerts/66805/","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107577418225627&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=tcpdump-workers&m=107325073018070&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10636","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10639","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10644","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10652","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10668","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10718","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11022","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11032/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12179/","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-425","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/174086","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:008","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00006.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00009.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00015.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-legacy-list/2004-January/msg00726.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-007.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-008.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/350238/30/21640/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9423","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008716","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14837","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11197","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A851","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A854","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lwn.net/Alerts/66445/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lwn.net/Alerts/66805/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107577418225627&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=tcpdump-workers&m=107325073018070&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11032/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12179/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/174086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-March/msg00015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-legacy-list/2004-January/msg00726.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/350238/30/21640/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11197","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A854","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0058","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink attack on the .pid_antivir_$$ temporary file."},{"lang":"es","value":"Antivir / Linux 2.0.9-9, y posiblemente versiones anteriores, permite a usuarios locales sobreescribir ficheros arbitrarios mediante un ataque de enlaces simbólicos en el fichero temporal .pid_antivir_$$"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.9.9","matchCriteriaId":"92E9B7F5-3EBE-4A6A-9CA5-8EE20D77D24B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107402026023763&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10620","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3496","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008702","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14214","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107402026023763&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14214","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0059","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in the filename parameter of a Content-Disposition: header."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en la capacidad de subida de ficheros de WWW File Share Pro 2.42 y anteriores pemite a atacantes remotos sobreescribir ficheros arbitrarios mediante secuencias .. (punto punto) en el parámetro de nombre de fichero de una cabecera Content-Disposition:."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lionmax_software:www_file_share_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"2.42","matchCriteriaId":"93DF123F-2856-4DB2-96A3-FAF56A6856B7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107411794303201&w=2","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008779","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107411794303201&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008779","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0060","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service (crash) via a large POST request."},{"lang":"es","value":"WWW File Share Pro 2.42 y anteriores permite a atacantes remotos causar una denegación de servicio (caída) mediante una petición POST muy grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lionmax_software:www_file_share_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"2.42","matchCriteriaId":"93DF123F-2856-4DB2-96A3-FAF56A6856B7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107411794303201&w=2","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008779","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107411794303201&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008779","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0061","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via (1) a URL with a trailing . (dot), or (2) a URI with a leading slash or backslash character."},{"lang":"es","value":"WWW File Share Pro 2.42 y anteriores permite a atacantes remotos saltarse restricciones de acceso a directorios mediante una URL con un . (punto) al final, o una URI con un carácter barra o barra invertida al principio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lionmax_software:www_file_share_pro:*:*:*:*:*:*:*:*","versionEndIncluding":"2.42","matchCriteriaId":"93DF123F-2856-4DB2-96A3-FAF56A6856B7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107411794303201&w=2","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008779","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107411794303201&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008779","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0062","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to \"cause negative totals\" via an order with a large quantity."},{"lang":"es","value":"Desbordamiento de enteros en la función de redondeo aritmético de PHP 2 (PHP2) puede causuar errores críticos de seguridad, como se ha demostrado en el función rnd en varias versiones de FishCart anteriores a 3.1 usando una cantidad grande en un pedido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fishnet:fishcart:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"3C96BDFE-F610-4E59-809B-B9DB13E42A4E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107411850203994&w=2","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008731","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107411850203994&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008731","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0063","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a Status_OK value even if the HSM returns a different status code, which could cause applications to make incorrect security-critical decisions, e.g. by accepting an invalid PIN number."},{"lang":"es","value":"La función SPP_VerifyPW en la librería nCipher payShield 1.3.12, 1.5.18 y 1.6.18 devuelve un valor Status_OK incluso si el HSM devuelve un código de estado diferente, lo que podría causar que aplicaciones hiciesen decisiónes críticas de seguridad de mandera incorrecta, por ejemplo aceptando un número PIN no válido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncipher:payshield_spp_library:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"B09FF87A-E7A1-43D4-AAAB-1CEE32B55EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncipher:payshield_spp_library:1.5.18:*:*:*:*:*:*:*","matchCriteriaId":"092628C5-FFC4-4C9F-9267-FB6FF68B6491"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncipher:payshield_spp_library:1.6.18:*:*:*:*:*:*:*","matchCriteriaId":"6A12E833-A4AF-4417-87D5-6F3F44CE96A6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107411819503569&w=2","source":"cve@mitre.org"},{"url":"http://www.ncipher.com/support/advisories/advisory8_payshield.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3537","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9422","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14832","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107411819503569&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ncipher.com/support/advisories/advisory8_payshield.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9422","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14832","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0064","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symlink attack on files within the tmp.SuSEconfig.gnome-filesystem.$RANDOM temporary directory."},{"lang":"es","value":"El script SuSEconfig.gnome-filesystem de Yast de SuSE 9.0 permite a usuarios locales sobreescribir ficheros arbitrarios mediante un ataque de enlaces simbólicos en ficheros el el directorio temporal tmp.SuSEconfig.gnome-filesystem.$RANDOM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107402658600437&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10623","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3460","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9411","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008703","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107402658600437&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0065","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in phpGedView before 2.65 allow remote attackers to execute arbitrary SQL via (1) timeline.php and (2) placelist.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en phpGedView anteriores a 2.65 permiten a atacantes remotos ejecutar código SQL arbitrario mediante timeline.php y placelist.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:*:*:*:*:*:*:*:*","versionEndIncluding":"2.65","matchCriteriaId":"C05501C0-BAF9-483E-A9CF-5F46D14E88FA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107394912715478&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11910","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11925","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107394912715478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0066","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to (1) indilist.php, (2) famlist.php, (3) placelist.php, (4) imageview.php, (5) timeline.php, (6) clippings.php, (7) login.php, and (8) gdbi.php."},{"lang":"es","value":"phpGedView anteriores a 2.65 permiten a atacantes remotos obtener la ruta absoluta del servidor web mediante parámetros malformados para (1) indilist.php, (2) famlist.php, (3) placelist.php, (4) imageview.php, (5) timeline.php, (6) clippings.php, (7) login.php, y (8) gdbi.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:*:*:*:*:*:*:*:*","versionEndIncluding":"2.65","matchCriteriaId":"C05501C0-BAF9-483E-A9CF-5F46D14E88FA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107394912715478&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3464","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14215","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107394912715478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0067","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary HTML or web script via (1) descendancy.php, (2) index.php, (3) individual.php, (4) login.php, (5) relationship.php, (6) source.php, (7) imageview.php, (8) calendar.php, (9) gedrecord.php, (10) login.php, and (11) gdbi_interface.php.  NOTE: some aspects of vector 10 were later reported to affect 4.1."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en phpGedView anteriores a 2.65 permite a atacantes remotos inyectar HTML o script web arbitrario mediante (1) descendancy.php, (2) index.php, (3) individual.php, (4) login.php, (5) relationship.php, (6) source.php, (7) imageview.php, (8) calendar.php, (9) gedrecord.php, (10) login.php, y (11) gdbi_interface.php. NOTA: se ha informado posteriormente que algunos aspectos relativos al vector 10 también afectan a la v4.1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:*:*:*:*:*:*:*:*","versionEndIncluding":"2.65","matchCriteriaId":"C05501C0-BAF9-483E-A9CF-5F46D14E88FA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107394912715478&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/26628","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1018613","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3473","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3474","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3475","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3476","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3477","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3478","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3479","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/477881/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11868","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11880","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11882","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11888","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11890","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11891","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11894","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11903","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11904","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11905","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11906","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11907","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/2995","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14212","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36285","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107394912715478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1018613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/477881/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11890","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36285","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0068","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in config.php for PhpDig 1.6.5 and earlier allows remote attackers to execute arbitrary PHP code by modifying the $relative_script_path parameter to reference a URL on a remote web server that contains the code."},{"lang":"es","value":"Vulnerabilidad de inclusión de código PHP remoto en config.php de PhpDig 1.6.5 y anteriores permite a atacantes remotos ejecutar código PHP arbitrario modificando el parámetro $relative_script_path para referenciar a una URL en servidor web remoto que contiene el código."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpdig.net:phpdig:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.5","matchCriteriaId":"F225ED66-BF10-4D71-B2F0-52B1DE1ED03D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107412194008671&w=2","source":"cve@mitre.org"},{"url":"http://www.phpdig.net/showthread.php?s=58bcc71c822830ec3bbdaae6d56846e0&threadid=393","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9424","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14826","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107412194008671&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpdig.net/showthread.php?s=58bcc71c822830ec3bbdaae6d56846e0&threadid=393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0069","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en HD Soft Windows FTP Server 1.6 y anteriores permite a atacantes remotos ejecutar código arbitrario mediante especificadores de cadena de formato en el nombre de usuario, que es procesado por la función wscanf."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hd_soft:windows_ftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6","matchCriteriaId":"80729840-DAB9-4C89-B920-2A2F0D73EDDD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107367110805273&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107401398014761&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9385","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008658","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107367110805273&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107401398014761&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008658","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0070","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to execute arbitrary PHP code by modifying the link parameter to reference a URL on a remote web server that contains the code."},{"lang":"es","value":"Vulnerabilidad de inclusión de código PHP remoto en module.php de ezContents permite a atacantes remotos ejecutar código PHP arbitrario modificando el parámetro de enlace para referenciar a una URL en servidor web remoto que contiene este código."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:*:*:*:*:*:*:*:*","matchCriteriaId":"ED395748-1AE1-4C12-9C0B-30FE15CA8369"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107392588915627&w=2","source":"cve@mitre.org"},{"url":"http://www.ezcontents.org/forum/viewtopic.php?t=361","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6878","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9396","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14199","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107392588915627&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ezcontents.org/forum/viewtopic.php?t=361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0071","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remote attackers to read arbitrary files via the command parameter ($cmd variable) to index.php."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en buildManPage en class.manpagelookup.php de PHP Man Page Lookup permite a atacantes remotos leer ficheros arbitrarios mediante el parámetro de comando (variable $cmd) en index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107392764118403&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9395","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008689","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14203","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107392764118403&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14203","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0072","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via encoded \\.. (backslash .., \"%5c%2e%2e\") sequences in an HTTP request."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en Accipiter Direct Server 6.0 permite a atacantes remotos leer ficherso arbitrarios mediante secuencias barra invertida punto punto, codificadas como \"%5c%2e%2e\" en una petición HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:accipiter:accipiter_direct_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"60F0A1AE-85B9-471D-8EC6-16D5F899A2E3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0274.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107392576215418&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10600","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3433","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9389","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14198","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0274.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107392576215418&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14198","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0073","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in (1) config.php and (2) config_page.php for EasyDynamicPages 2.0 allows remote attackers to execute arbitrary PHP code by modifying the edp_relative_path parameter to reference a URL on a remote web server that contains a malicious serverdata.php script."},{"lang":"es","value":"Vulnerabilidad de inyección de código PHP remoto en config.php de EasyDinamicPages 2.0 permite a atacantes remotos ejecutar código PHP arbitrario modificando el parámetro edp_relative_path para referenciar una URL en un servidor web remoto que contiene un script serverdata.php malicioso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stoitsov:easydynamicpages:2.0:*:*:*:*:*:*:*","matchCriteriaId":"20B1E753-5667-4837-9068-1FBD0019CB9E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107307457327707&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10535","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008584","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3318","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3408","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9338","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14136","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107307457327707&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0074","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable, or (2) a long -xsokdir command line argument, a different vulnerability than CVE-2003-0949."},{"lang":"es","value":"Múltiples desbordamientos de búfer en xsok 1.02 permite a usuarios locales ganar privilegios mediante (1) una variable de entorno LANG larga, o (2) un argumento de línea de comandos -xsokdir largo, una vulnerabilidad diferente de CAN-2003-0949"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_bischoff:xsok:1.02:*:*:*:*:*:*:*","matchCriteriaId":"E9310CC3-A1A8-43B9-A5D0-CA2090BB8BAF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107307407027259&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107332542918529&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9341","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9352","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14906","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14910","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107307407027259&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107332542918529&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14910","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0075","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Vicam USB driver in Linux before 2.4.25 does not use the copy_from_user function when copying data from userspace to kernel space, which crosses security boundaries and allows local users to cause a denial of service."},{"lang":"es","value":"El controlador USB Vicam de Linux 2.5.25 no utiliza la función copy_from_user cuando copia datos de espacio de usuario a espacio de kernel, lo que traspasa límites de seguridad y permite a usuarios locales causar una denegación de servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:015","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-082.shtml","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-065.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-293.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9690","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15246","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A836","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-082.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-293.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A836","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0076","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2023-11-07T01:56:35.170","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was removed from consideration by its Candidate Numbering Authority.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-0077","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985."},{"lang":"es","value":"La función do_remap en mremap de Linux 2.2 a 2.2.25, 2.4 a 2.4.24, y 2.6 a 2.6.2 no comprueba adecuadamente el valor devuelto por la función do_munmap cuando se excede el número máximo de descriptores VMA, lo que permite a usuarios locales ganar privilegios de root, una vulnerabilidad distinta de CAN-2004-0985."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:bigmem_kernel:2.4.20-8:*:i686:*:*:*:*:*","matchCriteriaId":"B1C6D92E-A002-4B06-B867-1E1D27E6F998"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel:2.4.20-8:*:athlon_smp:*:*:*:*:*","matchCriteriaId":"C2618F2F-042B-4938-A7C8-2C2D1C387D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel:2.4.20-8:*:i386:*:*:*:*:*","matchCriteriaId":"862D6BE3-0712-4745-A0A6-EE6B3F1542AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel:2.4.20-8:*:i686_smp:*:*:*:*:*","matchCriteriaId":"DA772F5D-5C17-4FEA-AD80-8FCC82627817"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel_doc:2.4.20-8:*:i386:*:*:*:*:*","matchCriteriaId":"4B421C2D-A6BF-4367-AD46-13E9275135A9"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel_source:2.4.20-8:*:i386_src:*:*:*:*:*","matchCriteriaId":"01698927-30AA-4A8B-9312-3DA097CDAEAD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD7A6B55-2F3B-422E-B1F2-80B482FE89AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"70DCE8FF-40C3-44F7-8185-0422ADDA051B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7DAC3A7C-2092-46D4-908B-CF03F4217112"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"956B7F2F-DE46-492F-ACA3-BD5EE7EA14F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"DE77B8D6-EF2A-4EC2-AF75-B6FA48747781"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5A6F3945-21ED-44C6-86D2-B7755A87014E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"C4919EB3-625C-4D83-8DCB-72BCF05DF2C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"A5DDB008-E88E-473C-B030-AF9B6F5E4E48"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"0E48C9A9-B7E6-4314-BCEF-8013BBB4276E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0EEF4480-D50B-464C-AE39-A12455DBC99F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"15928E10-7D41-45B2-87D6-8AA10190A8EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*","matchCriteriaId":"C18E13C4-F42D-4168-B25E-544E1549C46B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:*:*:*:*:*:*","matchCriteriaId":"1C4B2ABB-0283-4532-9E29-B37BFF5FDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:*:*:*:*:*:*:*","matchCriteriaId":"C4DADA29-DCD3-44C4-9BDB-B881D6FCE3A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*","matchCriteriaId":"F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:pre6:*:*:*:*:*:*","matchCriteriaId":"4BD794C6-11F5-4A2B-9A3C-E03069A1526B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*","matchCriteriaId":"C4947CDE-CB89-456B-8B5F-0E17B46BC893"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*","matchCriteriaId":"6ECB42B3-70C6-4019-8B8B-8EB7A84B39AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*","matchCriteriaId":"BF701E58-35E8-4DDE-B832-C5A23E61A3CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*","matchCriteriaId":"3C122CC4-B8CB-4AB9-8571-6F3D302F56A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*","matchCriteriaId":"2498D898-D243-4D0C-9AEF-0138D19A68B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.22:*:*:*:*:*:*:*","matchCriteriaId":"3924060B-1EC1-4003-B306-E327634E7797"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.23:*:*:*:*:*:*:*","matchCriteriaId":"D45B43DF-FD4C-4C37-9569-1CCE450B8987"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.24:*:*:*:*:*:*:*","matchCriteriaId":"99879B2B-7FFB-4181-8928-13B7E17F36C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"},{"vulnerable":true,"criteria":"cpe:2.3:o:netwosix:netwosix_linux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"72DD6275-2830-41F0-B396-29C9580F5AA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*","matchCriteriaId":"39605B96-BAD6-45C9-BB9A-43D6E2C51ADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel:2.4.20-8:*:athlon:*:*:*:*:*","matchCriteriaId":"36393930-7292-4AEC-8E1E-3D0019934AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel:2.4.20-8:*:i386:*:*:*:*:*","matchCriteriaId":"862D6BE3-0712-4745-A0A6-EE6B3F1542AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel:2.4.20-8:*:i686:*:*:*:*:*","matchCriteriaId":"B965D3F0-6FF5-405D-BF47-B59D3B264E50"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0040.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820","source":"cve@mitre.org"},{"url":"http://fedoranews.org/updates/FEDORA-2004-079.shtml","source":"cve@mitre.org"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:015","source":"cve@mitre.org"},{"url":"http://isec.pl/vulnerabilities/isec-0014-mremap-unmap.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107711762014175&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107712137732553&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107755871932680&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200403-02.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-082.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-438","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-439","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-440","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-441","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-442","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-444","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-450","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-453","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-454","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-456","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-466","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-470","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-475","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-514","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/981222","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3986","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-065.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-066.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-069.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-106.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9686","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404734","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15244","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A825","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A837","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://fedoranews.org/updates/FEDORA-2004-079.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://isec.pl/vulnerabilities/isec-0014-mremap-unmap.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107711762014175&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107712137732553&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107755871932680&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200403-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-082.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-453","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/981222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.novell.com/linux/security/advisories/2004_05_linux_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-065.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-066.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-069.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-106.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0078","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages."},{"lang":"es","value":"Desbordamiento de búfer en el código del menú de índice (menu_pad_string de menu.c) de Mutt 1.4.1 y anteriores permite a atacantes remotos causar una denegación de servició (caída) y posiblemente ejecutar código arbitrario mediante ciertos mensajes de correo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"780FC5AD-A7D9-436B-BF73-FDCDDDA9E744"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"996BC5D6-427B-43D6-B4C3-4AD814C20445"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D5A1DB8F-6BD5-4E1F-993A-FF5D0F807D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"0B975F74-4B61-416B-B6B5-A36EF8123C94"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"C891640E-91CC-495D-A7FF-454DCBF7F120"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.2.5.12:*:*:*:*:*:*:*","matchCriteriaId":"C4247B37-30C6-4F19-A709-9A1D073B7AA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.2.5.12_ol:*:*:*:*:*:*:*","matchCriteriaId":"B5D5465E-6782-4AC0-9ECD-AB01EB448991"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"5FF9A116-D09D-4ADE-AA32-CAF51CE1625A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.3.12.1:*:*:*:*:*:*:*","matchCriteriaId":"DDB7D3BF-06F6-4A0A-9AE4-0EEF5D8E6AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.3.16:*:*:*:*:*:*:*","matchCriteriaId":"BC8CB6D9-30F9-4C56-9CFD-F8E526E84526"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"D1C760A5-D243-45C9-AE60-01F2703DDC01"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.3.22:*:*:*:*:*:*:*","matchCriteriaId":"198C2017-6101-482D-9AEF-DB052411C5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.3.24:*:*:*:*:*:*:*","matchCriteriaId":"C0610C44-6CD3-4448-87AF-6CDFAA1909DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.3.25:*:*:*:*:*:*:*","matchCriteriaId":"04186A67-E4A1-4A2A-B84F-585F9DD0E409"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.3.27:*:*:*:*:*:*:*","matchCriteriaId":"305135F0-E414-430B-AC1A-02A311E66899"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.3.28:*:*:*:*:*:*:*","matchCriteriaId":"1A416609-0BE7-4528-85B0-17F53DFE0D0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"4C86071C-E508-4EFB-A98E-62CA2BEBB50A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mutt:mutt:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"65DB0D49-CD49-4EF6-9013-1B03E0D644D3"}]}]}],"references":[{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/126336","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107651677817933&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107696262905039&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107884956930903&w=2","source":"cve@mitre.org"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3918","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-050.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-051.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9641","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15134","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838","source":"cve@mitre.org"},{"url":"ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/126336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107651677817933&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107696262905039&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107884956930903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-050.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-051.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0079","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference."},{"lang":"es","value":"La función  do_change_cipher_spec en OpenSSL  0.9.6c hasta 0.9.6.k y 0.9.7a hasta 0.9.7c permite que atacantes remotos provoquen una denegación de servicio (caída) mediante una hábil unión SSL/TLS que provoca un puntero nulo."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:*:*:*:*:*:*:*:*","matchCriteriaId":"2A9CB22A-21E0-46F6-B6CD-BB38A80FA7A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B9CAFC15-178C-4176-9668-D4A04B63E77B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3C8D6949-89F4-40EF-98F4-8D15628DC345"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1_\\(3.005\\):*:*:*:*:*:*:*","matchCriteriaId":"F3DB2AEE-FB5C-42B7-845B-EDA3E58D5D68"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:2.1_\\(0.208\\):*:*:*:*:*:*:*","matchCriteriaId":"6479D85C-1A12-486D-818C-6679F415CA26"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:aaa_server:*:*:*:*:*:*:*:*","matchCriteriaId":"287CF5FA-D0EC-4FD7-9718-973587EF34DF"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:apache-based_web_server:2.0.43.00:*:*:*:*:*:*:*","matchCriteriaId":"C88168D4-7DB5-4720-8640-400BB680D0FD"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:apache-based_web_server:2.0.43.04:*:*:*:*:*:*:*","matchCriteriaId":"968915A1-375B-4C69-BE11-9A393F7F1B0F"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:clientless_vpn_gateway_4400:5.0:*:*:*:*:*:*:*","matchCriteriaId":"11465DCA-72E5-40E9-9D8E-B3CD470C47E9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3954D0D1-9FDF-47D0-9710-D0FB06955B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:2.2:*:*:*:*:*:*:*","matchCriteriaId":"3D6712BD-DE8F-40F5-AC74-B9EFE9A50CFA"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:converged_communications_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E586558A-ABC3-42EB-8B4D-DC92A0D695E6"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg200:4.4:*:*:*:*:*:*:*","matchCriteriaId":"2A4C5F60-B32D-4D85-BA28-AE11972ED614"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg200:4.31.29:*:*:*:*:*:*:*","matchCriteriaId":"6A5935C3-3D83-461F-BC26-E03362115C42"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg203:4.4:*:*:*:*:*:*:*","matchCriteriaId":"80AC523B-3106-46F2-B760-803DCF8061F4"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg203:4.31.29:*:*:*:*:*:*:*","matchCriteriaId":"F8B8D6F3-D15D-489F-A807-17E63F4831F2"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg208:*:*:*:*:*:*:*:*","matchCriteriaId":"808189BA-197F-49CE-933E-A728F395749C"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg208:4.4:*:*:*:*:*:*:*","matchCriteriaId":"32DCFA7B-7BBB-465A-A4AD-7E18EE3C02DC"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.2:*:*:*:*:*:*:*","matchCriteriaId":"CC7EF0CD-EA39-457B-8E2E-9120B65A5835"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7BC2983F-5212-464B-AC21-8A897DEC1F58"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.4:*:*:*:*:*:*:*","matchCriteriaId":"EBF17989-D1F2-4B04-80BD-CFABDD482ABA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*","matchCriteriaId":"441BE3A0-20F4-4972-B279-19B3DB5FA14D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*","matchCriteriaId":"2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*","matchCriteriaId":"00EAEA17-033A-4A50-8E39-D61154876D2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*","matchCriteriaId":"0D9F2B04-A1F2-4788-A53D-C8274A758DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*","matchCriteriaId":"9A5309ED-D84F-4F52-9864-5B0FEEEE5022"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*","matchCriteriaId":"C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.05:*:*:*:*:*:*:*","matchCriteriaId":"31B1ADC1-9B6D-4B5E-A05A-D69599A3A0D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*","matchCriteriaId":"32310AFE-38CC-4C6C-AE13-54C18720F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"138985E6-5107-4E8B-A801-C3D5FE075227"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"038FEDE7-986F-4CA5-9003-BA68352B87D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D9D76A8D-832B-411E-A458-186733C66010"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11\\)e:*:*:*:*:*:*:*","matchCriteriaId":"580BA1FE-0826-47A7-8BD3-9225E0841EDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e:*:*:*:*:*:*:*","matchCriteriaId":"040B04CD-B891-4F19-A7CC-5C2D462FBD6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e12:*:*:*:*:*:*:*","matchCriteriaId":"5BF29685-7FFC-4093-A1D4-21E4871AF5C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e14:*:*:*:*:*:*:*","matchCriteriaId":"E72872C9-63AF-417F-BFAE-92B4D350C006"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)e9:*:*:*:*:*:*:*","matchCriteriaId":"80BCF196-5E5A-4F31-BCE7-AA0C748CA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(19\\)e1:*:*:*:*:*:*:*","matchCriteriaId":"970939C5-1E6F-47B6-97E6-7B2C1E019985"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sy:*:*:*:*:*:*:*","matchCriteriaId":"CD1F4148-E772-4708-8C1F-D67F969C11DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sy1:*:*:*:*:*:*:*","matchCriteriaId":"3CEBCEF0-5982-4B30-8377-9CAC978A1CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F8B87C95-4B34-4628-AD03-67D1DE13E097"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2:*:*:*:*:*:*:*","matchCriteriaId":"758F95DB-E619-4B08-86FA-6CF2C1B0CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4F04471C-732F-44EE-AD1B-6305C1DD7DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3499913B-5DCD-4115-8C7B-9E8AFF79DE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E237919A-416B-4039-AAD2-7FAE1F4E100D"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"39149924-188C-40C1-B598-A9CD407C90DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3:*:*:*:*:*:*:*","matchCriteriaId":"15D5780C-4E29-4BCA-A47E-29FF6EAF33FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E6501108-5455-48FE-AA82-37AFA5D7EC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:*:*:lx:*:*:*:*:*","matchCriteriaId":"C1A3B951-A1F8-4291-82FA-AB7922D13ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:5.1.46:*:*:*:*:*:*:*","matchCriteriaId":"3F2E7C81-C0F5-4D36-9A23-03BE69295ED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:s3210:*:*:*:*:*:*:*","matchCriteriaId":"9D0EF4A3-2FE5-41E4-A764-30B379ECF081"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:s3400:*:*:*:*:*:*:*","matchCriteriaId":"CCF6D59E-8AEA-4380-B86B-0803B2202F16"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5:*:*:*:*:*:*:*","matchCriteriaId":"140ABF28-FA39-4D77-AEB2-304962ED48C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5x:*:*:*:*:*:*:*","matchCriteriaId":"09473DD9-5114-44C5-B56C-6630FBEBCACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:100_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A7ECD3A4-5A39-4222-8350-524F11D8FFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:500:*:*:*:*:*:*:*","matchCriteriaId":"D36C140D-E80C-479A-ADA7-18E901549059"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:2000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"940712E9-B041-4B7F-BD02-7DD0AE596D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"03B887A2-9025-4C5B-8901-71BC63BF5293"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:7500_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"33264586-7160-4550-9FF9-4101D72F5C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:10000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE5E6521-0611-4473-82AC-21655F10FEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:*:*:vsx-ng-ai:*:*:*:*:*","matchCriteriaId":"AA9A50A1-CA8C-4EE5-B68F-4958F6B4B028"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:2.0:*:gx:*:*:*:*:*","matchCriteriaId":"8C83ABA2-87CD-429B-9800-590F8256B064"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp0:*:*:*:*:*:*:*","matchCriteriaId":"A4D9A576-2878-4AC4-AC95-E69CB8A84A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp1:*:*:*:*:*:*:*","matchCriteriaId":"0A1A0B02-CF33-401F-9AB2-D595E586C795"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp2:*:*:*:*:*:*:*","matchCriteriaId":"8C0EF3F0-B82E-45B7-8D05-05E76009F7A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"90FB3825-21A6-4DBE-8188-67672DBE01CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"80623E58-8B46-4559-89A4-C329AACF3CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"AEE6C228-CD93-4636-868B-C19BC1674BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"A645148C-AD0D-46C1-BEE3-10F5C9066279"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"0D69187C-7F46-4FF0-A8A0-0E1989EA79BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp0:*:*:*:*:*:*:*","matchCriteriaId":"4AE4A7EE-1BA3-46F1-BF4A-A72997EE0992"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp1:*:*:*:*:*:*:*","matchCriteriaId":"02029D75-FAF2-4842-9246-079C7DE36417"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp2:*:*:*:*:*:*:*","matchCriteriaId":"E0146341-364C-4085-A2E1-BC8C260FBA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:vsx_ng_with_application_intelligence:*:*:*:*:*:*:*","matchCriteriaId":"B5EF01C8-1C8A-4BD1-A13B-CE31F09F9523"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:access_registrar:*:*:*:*:*:*:*:*","matchCriteriaId":"B8496E0D-2507-4C25-A122-0B846CBCA72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_and_content_networking_software:*:*:*:*:*:*:*:*","matchCriteriaId":"8E383F2A-DFCF-47F8-94EE-3563D41EA597"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css_secure_content_accelerator:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D2D87EF0-056E-4128-89EB-2803ED83DEE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css_secure_content_accelerator:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB3163C1-2044-44DA-9C88-076D75FDF1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css11000_content_services_switch:*:*:*:*:*:*:*:*","matchCriteriaId":"07E1B690-C58B-4C08-A757-F3DF451FDAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:okena_stormwatch:3.2:*:*:*:*:*:*:*","matchCriteriaId":"31F0E14C-7681-4D1A-B982-A51E450B93A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:pix_firewall:6.2.2_.111:*:*:*:*:*:*:*","matchCriteriaId":"ECBC761F-A8F5-4CD8-B19C-5CE8FFC58FDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:threat_response:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF39E8B-C201-4940-81C9-14AF4C3DD4B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:6.10:*:*:*:*:*:*:*","matchCriteriaId":"AC604680-2E9E-4DC4-ACDD-74D552A45BA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:6.10_b4:*:*:*:*:*:*:*","matchCriteriaId":"37A94436-D092-4C7E-B87B-63BC621EE82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.1_0.1.02:*:*:*:*:*:*:*","matchCriteriaId":"862165CF-3CFB-4C6E-8238-86FA85F243C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.1_0.2.06:*:*:*:*:*:*:*","matchCriteriaId":"056F3336-BAA8-4A03-90B4-7B31710FC1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.2_0.0.03:*:*:*:*:*:*:*","matchCriteriaId":"9FDC2510-FBB9-429A-B6D4-10AB11F93960"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.10:*:*:*:*:*:*:*","matchCriteriaId":"5D45127E-A544-40A0-9D34-BD70D95C9772"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.10_.0.06s:*:*:*:*:*:*:*","matchCriteriaId":"56C69C3E-C895-45C8-8182-7BB412A0C828"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A1FDD507-C38B-4C38-A54F-3DA6F07AD0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6F2B7AC2-CF08-4AC9-9A71-3A8130F9F9AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D4D9564B-B92E-4C97-87FF-B56D62DCA775"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.01.05.08:*:*:*:*:*:*:*","matchCriteriaId":"B931D4F8-23F5-4ABA-A457-959995D30C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.02.00.00:*:*:*:*:*:*:*","matchCriteriaId":"BE6A023E-9C2A-487F-B5CE-674C766BFE75"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.02.00.01:*:*:*:*:*:*:*","matchCriteriaId":"6A15ACA2-D500-4260-B51A-6FE6AB5A45A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2A045971-8756-47E8-9044-C39D08B36F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CAA95881-7231-4FDA-AF73-04DF9FF0B64C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"62B7F6AD-EDBD-4B09-BDB2-795ED114F2AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F045AB7B-1551-46E5-A5CC-BF13C1BB49F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"44E85930-3AAD-420B-8E3E-AEC57344F6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"52FD4485-BCA2-485A-A0CF-F8152C9DBFA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7CF53BE4-FE2D-4D63-BD0F-A423D0FE3BE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.2_rc1:*:*:*:*:*:*:*","matchCriteriaId":"00993464-BE09-4691-B3F0-51BBA9FB80C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.2_rc2:*:*:*:*:*:*:*","matchCriteriaId":"896AB39E-2078-4BA2-9522-477BD5F98FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EB9279EC-47CF-45F1-B4CC-B2B332E82E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E7300C3E-8105-4C23-89B9-7D29CED18C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"90C59DB2-48DA-4172-A1F5-25CF3B5097AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"715F4E0B-7E4B-4520-A987-9B3ED3136B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9CA1F606-C558-40FD-9300-6E2796F47BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A037FAA6-6D26-4496-BC67-03475B4D1155"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D3831DD3-E783-4200-8986-FDBF7DD9BA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.2:*:*:*:*:*:*:*","matchCriteriaId":"2909C9D5-3D8F-4C41-B0E7-A0C0B432C19A"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.3:*:*:*:*:*:*:*","matchCriteriaId":"E09436DF-E3C1-4C03-A3BE-73C4BC84BB7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"699764B6-0F86-4AB0-86A3-4F2E69AD820C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.0:*:*:*:*:*:*:*","matchCriteriaId":"7562ADC4-0D01-4FC2-98F0-1F4041BDA52E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5:*:*:*:*:*:*:*","matchCriteriaId":"E6FAB588-BDBE-4A04-AB9E-4F700A3951F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.12a:*:*:*:*:*:*:*","matchCriteriaId":"E1B83F84-D1EF-43B4-8620-3C1BCCE44553"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.27:*:*:*:*:*:*:*","matchCriteriaId":"41169D2F-4F16-466A-82E9-AD0735472B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.6.2:*:*:*:*:*:*:*","matchCriteriaId":"947699C3-D9DE-411A-99C0-44ADD1D2223A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*","matchCriteriaId":"15F668C0-8420-4401-AB0F-479575596CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CDDCC7B6-34CA-4551-9833-306B93E517BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6D69C160-39F7-48B8-B9A3-CC86690453C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:1.5:*:*:*:*:*:*:*","matchCriteriaId":"166BF638-ABDC-4BB9-BD4E-2B22681AD9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8FA6420B-9F6A-48F4-A445-12B60A320347"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6-15:*:i386:*:*:*:*:*","matchCriteriaId":"09F3FB7B-0F68-49F3-A3B7-977A687A42E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6b-3:*:i386:*:*:*:*:*","matchCriteriaId":"088F2FF7-96E5-455E-A35B-D99F9854EC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386:*:*:*:*:*","matchCriteriaId":"FFA721BF-1B2E-479F-BF25-02D441BF175B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386_dev:*:*:*:*:*","matchCriteriaId":"AFEDCE49-21CC-4168-818F-4C638EE3B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386_perl:*:*:*:*:*","matchCriteriaId":"B7D18F9B-C0BE-4DE8-81F4-5BF56C00BF41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:servercluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8F0F78F4-E81E-4C6B-AB73-D6AAE191060E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:servercluster:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DF1A5808-6D5D-48AD-9470-5A6510D17913"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:1_2.0:*:*:*:*:*:*:*","matchCriteriaId":"C1E8990D-D9A0-4A71-9D87-EC047E01B0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:1_3.0:*:*:*:*:*:*:*","matchCriteriaId":"6DBCC172-6867-4DFD-AAEF-9BDB4DA21F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C2F2BEEA-46BB-4718-B0F3-B4EC62B678A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8D09E11C-C5BB-409E-BB0D-7F351250419B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6B06A05D-AA31-441D-9FC2-3558648C3B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_securitycluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C0886901-6F93-44C1-B774-84D7E5D9554C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_securitycluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"3F203A80-7C1E-4A04-8E99-63525E176753"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_webcluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CA0A204C-158B-4014-A53C-75E0CD63E0DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_webcluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"085BA581-7DA5-4FA4-A888-351281FD0A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.5.17:*:*:*:*:*:*:*","matchCriteriaId":"EA1C4B3C-5701-4233-BA94-28915713F9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.5.18:*:*:*:*:*:*:*","matchCriteriaId":"28D9F8D7-698A-486A-918A-7DB5CAFBB3CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"D125C2A0-A4B5-48D6-A38A-54755C3FDF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"0F85F672-0F21-4AD7-8620-13D82F2ECC22"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.7:*:*:*:*:*:*:*","matchCriteriaId":"89070041-613A-4F7B-BD6A-C6091D21FC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D9A71933-4BD5-4B11-8B14-D997E75F29CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"5B6BE11D-FC02-4950-A554-08CC9D8B1853"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A53FD0E1-9BAA-43F0-BCC9-0BE8D4356F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B80ADAE8-94D4-46A4-A5ED-FF134D808B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"69FA0221-5073-4D45-950F-119497B53FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C4AE5B43-7C90-4C2A-A215-30F5EC5841C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2CC1A110-B203-4962-8E1A-74BD98121AF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B5A92C4D-B024-4D39-9479-409C39586F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E7E0C4F5-CF02-4FF6-AE9B-5B6B70D5C067"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5E8998CC-E372-46D0-8339-47DC8D92D253"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.2:*:*:*:*:*:*:*","matchCriteriaId":"AF131FDC-BF8D-4A17-99F0-444EB900E83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"880811B3-E78E-456E-972E-DE733F368576"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"22411F18-2B93-405A-A3B5-2CF0A04977C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:1.7:*:*:*:*:*:*:*","matchCriteriaId":"C71188B7-E6DC-41E5-B619-367341113501"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"07491444-0196-4504-A971-A5E388B86BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:2.0:*:*:*:*:*:*:*","matchCriteriaId":"72BC6CD2-3291-4E69-8DC6-F3AB853F8931"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"CD43EDDF-58A7-4705-B8C7-FD76C35A437D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A7C2E603-568F-40F6-9A7C-439E2A51B37F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"703421A7-E8C5-450B-97EF-FD9D99D4B834"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.20:*:*:*:*:*:*:*","matchCriteriaId":"9519BCB2-B401-44CE-97F6-847BB36AE45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.30:*:*:*:*:*:*:*","matchCriteriaId":"BBE573E8-DD94-4293-99AE-27B9067B3ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.40:*:*:*:*:*:*:*","matchCriteriaId":"D14413DA-5199-4282-9E22-D347E9D8E469"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"05CC5F49-0E9E-45D8-827D-A5940566DB25"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.0.1_build_2129:*:*:*:*:*:*:*","matchCriteriaId":"5D94EE19-6CE9-4E02-8174-D9954CDBF02B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E4BEE3-AE7B-4481-B724-2E644E18ACC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.5.1_build_5336:*:*:*:*:*:*:*","matchCriteriaId":"EAAB7052-E0B6-472E-920B-A0F0AEA25D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:3.0_build_7592:*:*:*:*:*:*:*","matchCriteriaId":"8CE38F15-BD42-4171-8670-86AA8169A60C"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"20C0BD87-CE4B-49D2-89BE-EF282C43AD72"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C3E6C4A8-59F4-43EE-8413-E95289037598"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FE76357A-27E6-4D85-9AA0-1BB658C41568"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C56C5FDB-24E2-479D-87CA-164CD28567D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AEF6C16F-8EDF-4A24-BFEF-6A304D654EEB"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D982AE39-BB57-49E7-B5FE-5EF1ADE2F019"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg:*:*:*:*:*:*:*:*","matchCriteriaId":"1B6CFEC9-0F8F-4CD4-ABD1-E6533F910F7F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"12DE5E22-DF93-46BE-85A3-D4E04379E901"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11500:*:*:*:*:*:*:*:*","matchCriteriaId":"BF28C435-C036-4507-8E3F-44E722F9974A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gss_4480_global_site_selector:*:*:*:*:*:*:*:*","matchCriteriaId":"CDA957E2-ABF9-49B2-874F-3FC3060CE0B0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gss_4490_global_site_selector:*:*:*:*:*:*:*:*","matchCriteriaId":"5F2CDFE7-6853-4A31-85C0-50C57A8D606A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:mds_9000:*:*:*:*:*:*:*:*","matchCriteriaId":"0F2ED90B-DDBA-49DE-AC78-20E7D77C8858"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:secure_content_accelerator:10000:*:*:*:*:*:*:*","matchCriteriaId":"408A9DB0-81EF-4186-B338-44954E67289B"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0C5F92-7E93-4C3F-B22B-E6612A4D3E10"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.01:*:*:*:*:*:*:*","matchCriteriaId":"2D0DC4B4-9AD9-4AC8-BFA7-A3D209B5D089"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.02:*:*:*:*:*:*:*","matchCriteriaId":"303362A5-9C3C-4C85-8C97-2AB12CE01BF6"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.03:*:*:*:*:*:*:*","matchCriteriaId":"FED22DC1-E06B-4511-B920-6DAB792262D8"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.04:*:*:*:*:*:*:*","matchCriteriaId":"4CE44CA7-4BC7-4C2B-948F-2ACABB91528B"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F757B2A7-869F-4702-81EB-466317A79D61"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.1.02:*:*:*:*:*:*:*","matchCriteriaId":"01F6E9A9-6C85-48DA-BC61-55F8EACCB59F"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:crypto_accelerator_4000:1.0:*:*:*:*:*:*:*","matchCriteriaId":"64AF1E33-4086-43E2-8F54-DA75A99D4B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos_ca_sa:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"53D16F03-A4C7-4497-AB74-499F208FF059"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos_ca_sa:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"13A33EC1-836B-4C8C-AC18-B5BD4F90E612"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0:*:*:*:*:*:*:*","matchCriteriaId":"58BE9C02-2A01-4F6F-A6BD-BC0173561E9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C558CED8-8342-46CB-9F52-580B626D320E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"0F85D19E-6C26-429D-B876-F34238B9DAAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"FEC7CCF7-CBC6-4EDC-8EDD-884DFFFBCC7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"E5011A33-CD6D-4EFC-ACFD-E51C9AE726A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4.101\\):*:*:*:*:*:*:*","matchCriteriaId":"09063867-0E64-4630-B35B-4CCA348E4DAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1:*:*:*:*:*:*:*","matchCriteriaId":"78F98CD7-A352-483C-9968-8FB2627A7CBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F97FE485-705F-4707-B6C6-0EF9E8A85D5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"E2B925E8-D2C2-4E8C-AC21-0C422245C482"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"B9170562-872E-4C32-869C-B10FF35A925E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"D0927A68-8BB2-4F03-8396-E9CACC158FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"559DDBA3-2AF4-4A0C-B219-6779BA931F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2:*:*:*:*:*:*:*","matchCriteriaId":"ED9D142A-DDC8-4BD6-8C22-F242C9C0B1ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5226C9CC-6933-4F10-B426-B47782C606FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"757DAE9A-B25D-4B8A-A41B-66C2897B537E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"5E3DC170-E279-4725-B9EE-6840B5685CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3.100\\):*:*:*:*:*:*:*","matchCriteriaId":"8091EDA9-BD18-47F7-8CEC-E086238647C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6F867890-74A4-4892-B99A-27DB4603B873"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"CE05B514-F094-4632-B25B-973F976F6409"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"3392428D-1A85-4472-A276-C482A78E2CE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.102\\):*:*:*:*:*:*:*","matchCriteriaId":"40954985-16E6-4F37-B014-6A55166AE093"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.109\\):*:*:*:*:*:*:*","matchCriteriaId":"0C097809-1FEF-4417-A201-42291CC29122"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:05.openssl.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://fedoranews.org/updates/FEDORA-2004-095.shtml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00045.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=107953412903636&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=108403806509920&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11139","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17381","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17398","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17401","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18247","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200403-03.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-239.htm","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://support.lexmark.com/index?page=content&id=TE88&locale=EN&userlocale=EN_US","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/o-101.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-465","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/288574","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4135.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:023","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_07_openssl.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openssl.org/news/secadv_20040317.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00087.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-120.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-121.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-139.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-829.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-830.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9899","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.trustix.org/errata/2004/0012","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.uniras.gov.uk/vuls/2004/224012/index.htm","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-078A.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15505","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2621","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5770","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A870","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A975","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9779","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:05.openssl.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://fedoranews.org/updates/FEDORA-2004-095.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=107953412903636&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=108403806509920&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/17401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/18247","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200403-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-239.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://support.lexmark.com/index?page=content&id=TE88&locale=EN&userlocale=EN_US","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/o-101.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/288574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4135.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_07_openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openssl.org/news/secadv_20040317.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2005-October/msg00087.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-120.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-121.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-139.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-829.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-830.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.trustix.org/errata/2004/0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.uniras.gov.uk/vuls/2004/224012/index.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-078A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0080","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The login program in util-linux 2.11 and earlier uses a pointer after it has been freed and reallocated, which could cause login to leak sensitive data."},{"lang":"es","value":"El programa login en util-linux 2.11 y anteriores usa un puntero después de haber sido liberado y reasignado, lo que podría hacer que login filtrara datos sensibles."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andries_brouwer:util-linux:*:*:*:*:*:*:*:*","versionEndIncluding":"2.11","matchCriteriaId":"00B08758-E846-4658-9CA0-0F9A3D18CEB0"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040406-01-U","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108077689801698&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108144719532385&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10773","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200404-06.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/801526","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3796","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-056.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9558","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15016","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040406-01-U","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108077689801698&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108144719532385&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200404-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/801526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/3796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0081","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool."},{"lang":"es","value":"OpenSSL 0.9.6 anteriores a la 0.9.6d no manejan adecuadamente los tipos de mensajes desconocidos, lo que permite a atacantes remotos causar una denegación de servicios (por bucle infinito), como se demuestra utilizando la herramienta de testeo Codenomicon TLS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:*:*:*:*:*:*:*:*","matchCriteriaId":"2A9CB22A-21E0-46F6-B6CD-BB38A80FA7A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B9CAFC15-178C-4176-9668-D4A04B63E77B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3C8D6949-89F4-40EF-98F4-8D15628DC345"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1_\\(3.005\\):*:*:*:*:*:*:*","matchCriteriaId":"F3DB2AEE-FB5C-42B7-845B-EDA3E58D5D68"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:2.1_\\(0.208\\):*:*:*:*:*:*:*","matchCriteriaId":"6479D85C-1A12-486D-818C-6679F415CA26"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:aaa_server:*:*:*:*:*:*:*:*","matchCriteriaId":"287CF5FA-D0EC-4FD7-9718-973587EF34DF"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:apache-based_web_server:2.0.43.00:*:*:*:*:*:*:*","matchCriteriaId":"C88168D4-7DB5-4720-8640-400BB680D0FD"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:apache-based_web_server:2.0.43.04:*:*:*:*:*:*:*","matchCriteriaId":"968915A1-375B-4C69-BE11-9A393F7F1B0F"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:clientless_vpn_gateway_4400:5.0:*:*:*:*:*:*:*","matchCriteriaId":"11465DCA-72E5-40E9-9D8E-B3CD470C47E9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3954D0D1-9FDF-47D0-9710-D0FB06955B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:2.2:*:*:*:*:*:*:*","matchCriteriaId":"3D6712BD-DE8F-40F5-AC74-B9EFE9A50CFA"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:converged_communications_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E586558A-ABC3-42EB-8B4D-DC92A0D695E6"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg200:4.4:*:*:*:*:*:*:*","matchCriteriaId":"2A4C5F60-B32D-4D85-BA28-AE11972ED614"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg200:4.31.29:*:*:*:*:*:*:*","matchCriteriaId":"6A5935C3-3D83-461F-BC26-E03362115C42"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg203:4.4:*:*:*:*:*:*:*","matchCriteriaId":"80AC523B-3106-46F2-B760-803DCF8061F4"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg203:4.31.29:*:*:*:*:*:*:*","matchCriteriaId":"F8B8D6F3-D15D-489F-A807-17E63F4831F2"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg208:*:*:*:*:*:*:*:*","matchCriteriaId":"808189BA-197F-49CE-933E-A728F395749C"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg208:4.4:*:*:*:*:*:*:*","matchCriteriaId":"32DCFA7B-7BBB-465A-A4AD-7E18EE3C02DC"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.2:*:*:*:*:*:*:*","matchCriteriaId":"CC7EF0CD-EA39-457B-8E2E-9120B65A5835"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7BC2983F-5212-464B-AC21-8A897DEC1F58"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.4:*:*:*:*:*:*:*","matchCriteriaId":"EBF17989-D1F2-4B04-80BD-CFABDD482ABA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*","matchCriteriaId":"441BE3A0-20F4-4972-B279-19B3DB5FA14D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*","matchCriteriaId":"2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*","matchCriteriaId":"00EAEA17-033A-4A50-8E39-D61154876D2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*","matchCriteriaId":"0D9F2B04-A1F2-4788-A53D-C8274A758DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*","matchCriteriaId":"9A5309ED-D84F-4F52-9864-5B0FEEEE5022"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*","matchCriteriaId":"C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.05:*:*:*:*:*:*:*","matchCriteriaId":"31B1ADC1-9B6D-4B5E-A05A-D69599A3A0D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*","matchCriteriaId":"32310AFE-38CC-4C6C-AE13-54C18720F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"138985E6-5107-4E8B-A801-C3D5FE075227"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"038FEDE7-986F-4CA5-9003-BA68352B87D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D9D76A8D-832B-411E-A458-186733C66010"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11\\)e:*:*:*:*:*:*:*","matchCriteriaId":"580BA1FE-0826-47A7-8BD3-9225E0841EDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e:*:*:*:*:*:*:*","matchCriteriaId":"040B04CD-B891-4F19-A7CC-5C2D462FBD6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e12:*:*:*:*:*:*:*","matchCriteriaId":"5BF29685-7FFC-4093-A1D4-21E4871AF5C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e14:*:*:*:*:*:*:*","matchCriteriaId":"E72872C9-63AF-417F-BFAE-92B4D350C006"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)e9:*:*:*:*:*:*:*","matchCriteriaId":"80BCF196-5E5A-4F31-BCE7-AA0C748CA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(19\\)e1:*:*:*:*:*:*:*","matchCriteriaId":"970939C5-1E6F-47B6-97E6-7B2C1E019985"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sy:*:*:*:*:*:*:*","matchCriteriaId":"CD1F4148-E772-4708-8C1F-D67F969C11DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sy1:*:*:*:*:*:*:*","matchCriteriaId":"3CEBCEF0-5982-4B30-8377-9CAC978A1CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F8B87C95-4B34-4628-AD03-67D1DE13E097"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2:*:*:*:*:*:*:*","matchCriteriaId":"758F95DB-E619-4B08-86FA-6CF2C1B0CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4F04471C-732F-44EE-AD1B-6305C1DD7DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3499913B-5DCD-4115-8C7B-9E8AFF79DE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E237919A-416B-4039-AAD2-7FAE1F4E100D"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"39149924-188C-40C1-B598-A9CD407C90DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3:*:*:*:*:*:*:*","matchCriteriaId":"15D5780C-4E29-4BCA-A47E-29FF6EAF33FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E6501108-5455-48FE-AA82-37AFA5D7EC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:*:*:lx:*:*:*:*:*","matchCriteriaId":"C1A3B951-A1F8-4291-82FA-AB7922D13ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:5.1.46:*:*:*:*:*:*:*","matchCriteriaId":"3F2E7C81-C0F5-4D36-9A23-03BE69295ED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:s3210:*:*:*:*:*:*:*","matchCriteriaId":"9D0EF4A3-2FE5-41E4-A764-30B379ECF081"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:s3400:*:*:*:*:*:*:*","matchCriteriaId":"CCF6D59E-8AEA-4380-B86B-0803B2202F16"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5:*:*:*:*:*:*:*","matchCriteriaId":"140ABF28-FA39-4D77-AEB2-304962ED48C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5x:*:*:*:*:*:*:*","matchCriteriaId":"09473DD9-5114-44C5-B56C-6630FBEBCACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:100_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A7ECD3A4-5A39-4222-8350-524F11D8FFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:500:*:*:*:*:*:*:*","matchCriteriaId":"D36C140D-E80C-479A-ADA7-18E901549059"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:2000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"940712E9-B041-4B7F-BD02-7DD0AE596D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"03B887A2-9025-4C5B-8901-71BC63BF5293"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:7500_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"33264586-7160-4550-9FF9-4101D72F5C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:10000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE5E6521-0611-4473-82AC-21655F10FEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:*:*:vsx-ng-ai:*:*:*:*:*","matchCriteriaId":"AA9A50A1-CA8C-4EE5-B68F-4958F6B4B028"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:2.0:*:gx:*:*:*:*:*","matchCriteriaId":"8C83ABA2-87CD-429B-9800-590F8256B064"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp0:*:*:*:*:*:*:*","matchCriteriaId":"A4D9A576-2878-4AC4-AC95-E69CB8A84A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp1:*:*:*:*:*:*:*","matchCriteriaId":"0A1A0B02-CF33-401F-9AB2-D595E586C795"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp2:*:*:*:*:*:*:*","matchCriteriaId":"8C0EF3F0-B82E-45B7-8D05-05E76009F7A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"90FB3825-21A6-4DBE-8188-67672DBE01CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"80623E58-8B46-4559-89A4-C329AACF3CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"AEE6C228-CD93-4636-868B-C19BC1674BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"A645148C-AD0D-46C1-BEE3-10F5C9066279"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"0D69187C-7F46-4FF0-A8A0-0E1989EA79BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation:*:*:*:*:*:*:*","matchCriteriaId":"C48F4DF4-8091-45D0-9F80-F760500B1202"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp0:*:*:*:*:*:*:*","matchCriteriaId":"4AE4A7EE-1BA3-46F1-BF4A-A72997EE0992"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp1:*:*:*:*:*:*:*","matchCriteriaId":"02029D75-FAF2-4842-9246-079C7DE36417"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:vsx_ng_with_application_intelligence:*:*:*:*:*:*:*","matchCriteriaId":"B5EF01C8-1C8A-4BD1-A13B-CE31F09F9523"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:access_registrar:*:*:*:*:*:*:*:*","matchCriteriaId":"B8496E0D-2507-4C25-A122-0B846CBCA72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_and_content_networking_software:*:*:*:*:*:*:*:*","matchCriteriaId":"8E383F2A-DFCF-47F8-94EE-3563D41EA597"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css_secure_content_accelerator:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D2D87EF0-056E-4128-89EB-2803ED83DEE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css_secure_content_accelerator:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB3163C1-2044-44DA-9C88-076D75FDF1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css11000_content_services_switch:*:*:*:*:*:*:*:*","matchCriteriaId":"07E1B690-C58B-4C08-A757-F3DF451FDAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:okena_stormwatch:3.2:*:*:*:*:*:*:*","matchCriteriaId":"31F0E14C-7681-4D1A-B982-A51E450B93A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:pix_firewall:6.2.2_.111:*:*:*:*:*:*:*","matchCriteriaId":"ECBC761F-A8F5-4CD8-B19C-5CE8FFC58FDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:threat_response:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF39E8B-C201-4940-81C9-14AF4C3DD4B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:6.10:*:*:*:*:*:*:*","matchCriteriaId":"AC604680-2E9E-4DC4-ACDD-74D552A45BA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:6.10_b4:*:*:*:*:*:*:*","matchCriteriaId":"37A94436-D092-4C7E-B87B-63BC621EE82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.1_0.1.02:*:*:*:*:*:*:*","matchCriteriaId":"862165CF-3CFB-4C6E-8238-86FA85F243C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.1_0.2.06:*:*:*:*:*:*:*","matchCriteriaId":"056F3336-BAA8-4A03-90B4-7B31710FC1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.2_0.0.03:*:*:*:*:*:*:*","matchCriteriaId":"9FDC2510-FBB9-429A-B6D4-10AB11F93960"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.10:*:*:*:*:*:*:*","matchCriteriaId":"5D45127E-A544-40A0-9D34-BD70D95C9772"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.10_.0.06s:*:*:*:*:*:*:*","matchCriteriaId":"56C69C3E-C895-45C8-8182-7BB412A0C828"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A1FDD507-C38B-4C38-A54F-3DA6F07AD0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6F2B7AC2-CF08-4AC9-9A71-3A8130F9F9AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D4D9564B-B92E-4C97-87FF-B56D62DCA775"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.01.05.08:*:*:*:*:*:*:*","matchCriteriaId":"B931D4F8-23F5-4ABA-A457-959995D30C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.02.00.00:*:*:*:*:*:*:*","matchCriteriaId":"BE6A023E-9C2A-487F-B5CE-674C766BFE75"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.02.00.01:*:*:*:*:*:*:*","matchCriteriaId":"6A15ACA2-D500-4260-B51A-6FE6AB5A45A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2A045971-8756-47E8-9044-C39D08B36F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CAA95881-7231-4FDA-AF73-04DF9FF0B64C"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"62B7F6AD-EDBD-4B09-BDB2-795ED114F2AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"F045AB7B-1551-46E5-A5CC-BF13C1BB49F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"44E85930-3AAD-420B-8E3E-AEC57344F6C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"52FD4485-BCA2-485A-A0CF-F8152C9DBFA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7CF53BE4-FE2D-4D63-BD0F-A423D0FE3BE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.2_rc1:*:*:*:*:*:*:*","matchCriteriaId":"00993464-BE09-4691-B3F0-51BBA9FB80C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.2_rc2:*:*:*:*:*:*:*","matchCriteriaId":"896AB39E-2078-4BA2-9522-477BD5F98FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EB9279EC-47CF-45F1-B4CC-B2B332E82E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E7300C3E-8105-4C23-89B9-7D29CED18C15"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"90C59DB2-48DA-4172-A1F5-25CF3B5097AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"715F4E0B-7E4B-4520-A987-9B3ED3136B75"},{"vulnerable":true,"criteria":"cpe:2.3:a:lite:speed_technologies_litespeed_web_server:1.3_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9CA1F606-C558-40FD-9300-6E2796F47BA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A037FAA6-6D26-4496-BC67-03475B4D1155"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D3831DD3-E783-4200-8986-FDBF7DD9BA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.2:*:*:*:*:*:*:*","matchCriteriaId":"2909C9D5-3D8F-4C41-B0E7-A0C0B432C19A"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.3:*:*:*:*:*:*:*","matchCriteriaId":"E09436DF-E3C1-4C03-A3BE-73C4BC84BB7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"699764B6-0F86-4AB0-86A3-4F2E69AD820C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.0:*:*:*:*:*:*:*","matchCriteriaId":"7562ADC4-0D01-4FC2-98F0-1F4041BDA52E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5:*:*:*:*:*:*:*","matchCriteriaId":"E6FAB588-BDBE-4A04-AB9E-4F700A3951F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.12a:*:*:*:*:*:*:*","matchCriteriaId":"E1B83F84-D1EF-43B4-8620-3C1BCCE44553"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.27:*:*:*:*:*:*:*","matchCriteriaId":"41169D2F-4F16-466A-82E9-AD0735472B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.6.2:*:*:*:*:*:*:*","matchCriteriaId":"947699C3-D9DE-411A-99C0-44ADD1D2223A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*","matchCriteriaId":"15F668C0-8420-4401-AB0F-479575596CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CDDCC7B6-34CA-4551-9833-306B93E517BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6D69C160-39F7-48B8-B9A3-CC86690453C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:1.5:*:*:*:*:*:*:*","matchCriteriaId":"166BF638-ABDC-4BB9-BD4E-2B22681AD9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8FA6420B-9F6A-48F4-A445-12B60A320347"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6-15:*:i386:*:*:*:*:*","matchCriteriaId":"09F3FB7B-0F68-49F3-A3B7-977A687A42E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6b-3:*:i386:*:*:*:*:*","matchCriteriaId":"088F2FF7-96E5-455E-A35B-D99F9854EC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386:*:*:*:*:*","matchCriteriaId":"FFA721BF-1B2E-479F-BF25-02D441BF175B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386_dev:*:*:*:*:*","matchCriteriaId":"AFEDCE49-21CC-4168-818F-4C638EE3B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386_perl:*:*:*:*:*","matchCriteriaId":"B7D18F9B-C0BE-4DE8-81F4-5BF56C00BF41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:servercluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8F0F78F4-E81E-4C6B-AB73-D6AAE191060E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:servercluster:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DF1A5808-6D5D-48AD-9470-5A6510D17913"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:1_2.0:*:*:*:*:*:*:*","matchCriteriaId":"C1E8990D-D9A0-4A71-9D87-EC047E01B0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:1_3.0:*:*:*:*:*:*:*","matchCriteriaId":"6DBCC172-6867-4DFD-AAEF-9BDB4DA21F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C2F2BEEA-46BB-4718-B0F3-B4EC62B678A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8D09E11C-C5BB-409E-BB0D-7F351250419B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6B06A05D-AA31-441D-9FC2-3558648C3B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_securitycluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C0886901-6F93-44C1-B774-84D7E5D9554C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_securitycluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"3F203A80-7C1E-4A04-8E99-63525E176753"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_webcluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CA0A204C-158B-4014-A53C-75E0CD63E0DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_webcluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"085BA581-7DA5-4FA4-A888-351281FD0A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.5.17:*:*:*:*:*:*:*","matchCriteriaId":"EA1C4B3C-5701-4233-BA94-28915713F9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.5.18:*:*:*:*:*:*:*","matchCriteriaId":"28D9F8D7-698A-486A-918A-7DB5CAFBB3CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"D125C2A0-A4B5-48D6-A38A-54755C3FDF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"0F85F672-0F21-4AD7-8620-13D82F2ECC22"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.7:*:*:*:*:*:*:*","matchCriteriaId":"89070041-613A-4F7B-BD6A-C6091D21FC52"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D9A71933-4BD5-4B11-8B14-D997E75F29CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"5B6BE11D-FC02-4950-A554-08CC9D8B1853"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A53FD0E1-9BAA-43F0-BCC9-0BE8D4356F55"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B80ADAE8-94D4-46A4-A5ED-FF134D808B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"69FA0221-5073-4D45-950F-119497B53FED"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C4AE5B43-7C90-4C2A-A215-30F5EC5841C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2CC1A110-B203-4962-8E1A-74BD98121AF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B5A92C4D-B024-4D39-9479-409C39586F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E7E0C4F5-CF02-4FF6-AE9B-5B6B70D5C067"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5E8998CC-E372-46D0-8339-47DC8D92D253"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.2:*:*:*:*:*:*:*","matchCriteriaId":"AF131FDC-BF8D-4A17-99F0-444EB900E83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"880811B3-E78E-456E-972E-DE733F368576"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"22411F18-2B93-405A-A3B5-2CF0A04977C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:1.7:*:*:*:*:*:*:*","matchCriteriaId":"C71188B7-E6DC-41E5-B619-367341113501"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"07491444-0196-4504-A971-A5E388B86BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:2.0:*:*:*:*:*:*:*","matchCriteriaId":"72BC6CD2-3291-4E69-8DC6-F3AB853F8931"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"CD43EDDF-58A7-4705-B8C7-FD76C35A437D"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"A7C2E603-568F-40F6-9A7C-439E2A51B37F"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonegate_vpn_client:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"703421A7-E8C5-450B-97EF-FD9D99D4B834"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.20:*:*:*:*:*:*:*","matchCriteriaId":"9519BCB2-B401-44CE-97F6-847BB36AE45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.30:*:*:*:*:*:*:*","matchCriteriaId":"BBE573E8-DD94-4293-99AE-27B9067B3ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.40:*:*:*:*:*:*:*","matchCriteriaId":"D14413DA-5199-4282-9E22-D347E9D8E469"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"05CC5F49-0E9E-45D8-827D-A5940566DB25"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.0.1_build_2129:*:*:*:*:*:*:*","matchCriteriaId":"5D94EE19-6CE9-4E02-8174-D9954CDBF02B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E4BEE3-AE7B-4481-B724-2E644E18ACC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.5.1_build_5336:*:*:*:*:*:*:*","matchCriteriaId":"EAAB7052-E0B6-472E-920B-A0F0AEA25D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:3.0_build_7592:*:*:*:*:*:*:*","matchCriteriaId":"8CE38F15-BD42-4171-8670-86AA8169A60C"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"20C0BD87-CE4B-49D2-89BE-EF282C43AD72"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C3E6C4A8-59F4-43EE-8413-E95289037598"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FE76357A-27E6-4D85-9AA0-1BB658C41568"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C56C5FDB-24E2-479D-87CA-164CD28567D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AEF6C16F-8EDF-4A24-BFEF-6A304D654EEB"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D982AE39-BB57-49E7-B5FE-5EF1ADE2F019"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg:*:*:*:*:*:*:*:*","matchCriteriaId":"1B6CFEC9-0F8F-4CD4-ABD1-E6533F910F7F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"12DE5E22-DF93-46BE-85A3-D4E04379E901"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11500:*:*:*:*:*:*:*:*","matchCriteriaId":"BF28C435-C036-4507-8E3F-44E722F9974A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gss_4480_global_site_selector:*:*:*:*:*:*:*:*","matchCriteriaId":"CDA957E2-ABF9-49B2-874F-3FC3060CE0B0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gss_4490_global_site_selector:*:*:*:*:*:*:*:*","matchCriteriaId":"5F2CDFE7-6853-4A31-85C0-50C57A8D606A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:mds_9000:*:*:*:*:*:*:*:*","matchCriteriaId":"0F2ED90B-DDBA-49DE-AC78-20E7D77C8858"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:secure_content_accelerator:10000:*:*:*:*:*:*:*","matchCriteriaId":"408A9DB0-81EF-4186-B338-44954E67289B"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0C5F92-7E93-4C3F-B22B-E6612A4D3E10"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.01:*:*:*:*:*:*:*","matchCriteriaId":"2D0DC4B4-9AD9-4AC8-BFA7-A3D209B5D089"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.02:*:*:*:*:*:*:*","matchCriteriaId":"303362A5-9C3C-4C85-8C97-2AB12CE01BF6"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.03:*:*:*:*:*:*:*","matchCriteriaId":"FED22DC1-E06B-4511-B920-6DAB792262D8"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.04:*:*:*:*:*:*:*","matchCriteriaId":"4CE44CA7-4BC7-4C2B-948F-2ACABB91528B"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F757B2A7-869F-4702-81EB-466317A79D61"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.1.02:*:*:*:*:*:*:*","matchCriteriaId":"01F6E9A9-6C85-48DA-BC61-55F8EACCB59F"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:crypto_accelerator_4000:1.0:*:*:*:*:*:*:*","matchCriteriaId":"64AF1E33-4086-43E2-8F54-DA75A99D4B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos_ca_sa:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"53D16F03-A4C7-4497-AB74-499F208FF059"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos_ca_sa:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"13A33EC1-836B-4C8C-AC18-B5BD4F90E612"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0:*:*:*:*:*:*:*","matchCriteriaId":"58BE9C02-2A01-4F6F-A6BD-BC0173561E9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C558CED8-8342-46CB-9F52-580B626D320E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"0F85D19E-6C26-429D-B876-F34238B9DAAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"FEC7CCF7-CBC6-4EDC-8EDD-884DFFFBCC7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"E5011A33-CD6D-4EFC-ACFD-E51C9AE726A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4.101\\):*:*:*:*:*:*:*","matchCriteriaId":"09063867-0E64-4630-B35B-4CCA348E4DAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1:*:*:*:*:*:*:*","matchCriteriaId":"78F98CD7-A352-483C-9968-8FB2627A7CBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F97FE485-705F-4707-B6C6-0EF9E8A85D5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"E2B925E8-D2C2-4E8C-AC21-0C422245C482"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"B9170562-872E-4C32-869C-B10FF35A925E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"D0927A68-8BB2-4F03-8396-E9CACC158FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"559DDBA3-2AF4-4A0C-B219-6779BA931F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2:*:*:*:*:*:*:*","matchCriteriaId":"ED9D142A-DDC8-4BD6-8C22-F242C9C0B1ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5226C9CC-6933-4F10-B426-B47782C606FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"757DAE9A-B25D-4B8A-A41B-66C2897B537E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"5E3DC170-E279-4725-B9EE-6840B5685CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3.100\\):*:*:*:*:*:*:*","matchCriteriaId":"8091EDA9-BD18-47F7-8CEC-E086238647C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6F867890-74A4-4892-B99A-27DB4603B873"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"CE05B514-F094-4632-B25B-973F976F6409"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"3392428D-1A85-4472-A276-C482A78E2CE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.102\\):*:*:*:*:*:*:*","matchCriteriaId":"40954985-16E6-4F37-B014-6A55166AE093"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.109\\):*:*:*:*:*:*:*","matchCriteriaId":"0C097809-1FEF-4417-A201-42291CC29122"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040304-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834","source":"cve@mitre.org"},{"url":"http://fedoranews.org/updates/FEDORA-2004-095.shtml","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107955049331965&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108403850228012&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-119.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11139","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200403-03.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-465","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/465542","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4135.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-120.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-121.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-139.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9899","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0012","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2004/224012/index.htm","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-078A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15509","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11755","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A871","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A902","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040304-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://fedoranews.org/updates/FEDORA-2004-095.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107955049331965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108403850228012&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-119.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200403-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/465542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4135.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-120.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-121.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-139.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2004/224012/index.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-078A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A902","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0082","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password."},{"lang":"es","value":"mksmbpasswd en Samba 3.0.0 y 3.0.1, cuando se crea una cuenta pero se marca como desactivada, puede sobreescribir la contraseña de usaurio con un búfer sin inicializar, lo que podría activar la cuenta con una contraseña más facil de adivinar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F84FB25B-5EA5-48DC-B528-E8CCF714C919"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"216145B7-4716-42F7-90DC-03884ECB2271"}]}]}],"references":[{"url":"http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-078.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3919","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-064.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9637","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15132","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A827","source":"cve@mitre.org"},{"url":"http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-078.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A827","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0083","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106."},{"lang":"es","value":"Desbordamiento de búfer en ReadFontAlias de XFree86 4.1.0 a 4.3.0 permite a usuarios locales y atacantes remotos ejecutar código arbitrario mediante un fichero de aliases de fuentes (font.alias) con un token largo, una vulnerabilidad distinta de CAN-2004-0084 y CAN-2004-0106."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"90FA67D9-8296-4534-8354-51B830DE3499"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"8A000C67-7EA3-47A7-9068-1C8744C182D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"25EDDB93-DD20-4DBE-962B-6334D5A7CB45"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4AC4F566-5D54-4364-B5AA-F846A0C8FCEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7F9D1BD9-4300-43B5-A87B-E2BF74E55C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:errata:*:*:*:*:*","matchCriteriaId":"F4B7E143-E24B-40D2-897B-6D516566B7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"837EBF15-6C7D-46B8-8A90-9DFBF2C09FF3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107644835523678&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107653324115914&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110979666528890&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200402-02.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57768-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-443","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=72","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/820006","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:012","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_06_xf86.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-059.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-060.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-061.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9636","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053","source":"cve@mitre.org"},{"url":"http://www.xfree86.org/cvs/changes","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15130","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A806","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A830","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9612","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107644835523678&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107653324115914&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110979666528890&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200402-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57768-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=72","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/820006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_06_xf86.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-060.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-061.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xfree86.org/cvs/changes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15130","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9612","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0084","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106."},{"lang":"es","value":"Desbordamiento de búfer en la función ReadFontAlias en XFree86 4.1.0 a 4.3.0, cuando se usa la función CopyISOLatin1Lowered, permite a usuarios locales o remotos autenticados ejecutar código arbitrario mediante una entrada malformada en el fichero de aliases de fuentes (font.alias), una vulnerabilidad distinta de CAN-2004-0083 y CAN-2004-0106."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"90FA67D9-8296-4534-8354-51B830DE3499"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"8A000C67-7EA3-47A7-9068-1C8744C182D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"25EDDB93-DD20-4DBE-962B-6334D5A7CB45"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4AC4F566-5D54-4364-B5AA-F846A0C8FCEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7F9D1BD9-4300-43B5-A87B-E2BF74E55C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:errata:*:*:*:*:*","matchCriteriaId":"F4B7E143-E24B-40D2-897B-6D516566B7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"837EBF15-6C7D-46B8-8A90-9DFBF2C09FF3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107662833512775&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110979666528890&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57768-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-443","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=73","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/667502","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:012","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_06_xf86.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-059.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-060.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-061.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9652","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15200","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10405","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A807","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A831","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107662833512775&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110979666528890&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57768-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=73","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/667502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_06_xf86.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-060.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A831","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0085","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the Mail application for Mac OS X 10.1.5 and 10.2.8 with unknown impact, a different vulnerability than CVE-2004-0086."},{"lang":"es","value":"Vulnerabilidad desconocida en la aplicación de correo de Mac OS X 10.1.5 y 10.2.8 con impacto desconocido, una vulnerabilidad distinta de CAN-2004-0086"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9504","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14992","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14992","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0086","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the Mail application for Mac OS X 10.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2004-0085."},{"lang":"es","value":"Vulnerabilidad desconocida en el programa de correo de Mac OS X 10.3.2 con consecuencias desconocidas, una vulnerabilidad distinta de CAN-2004-0085."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9504","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9504","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0087","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The System Configuration subsystem in Mac OS 10.2.8 and 10.3.2 allows local users to modify network settings, a different vulnerability than CVE-2004-0088."},{"lang":"es","value":"El subsistema de Configuración del Sistema en Mac OS 10.2.8 y 10.3.2 permite a usuarios locales modificar configuraciones de red, una vulnerabilidad distinta de CAN-2004-0088."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6819","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9504","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14997","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6819","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14997","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0088","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The System Configuration subsystem in Mac OS 10.2.8 allows local users to modify network settings, a different vulnerability than CVE-2004-0087."},{"lang":"es","value":"El subsitema de Configuración del Sistema de Mac OS 10.2.8 permite a usuarios modificar configuraciones de red, una vulnerabilidad distinta de CAN-2004-0087."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6820","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9504","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9504","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0089","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in TruBlueEnvironment in Mac OS X 10.3.x and 10.2.x allows local users to gain privileges via a long environment variable."},{"lang":"es","value":"Desbordamiento de búfer en TruBlueEnvironmet de Mac OS X 10.3.x y 10.2.x permite a usuarios locales ganar privilegios mediante una variable de entorno largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2004/a012704-1.txt","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/902374","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/6821","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9509","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14968","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/2004/a012704-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/902374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/6821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0090","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Windows File Sharing for Mac OS X 10.1.5 through 10.3.2 does not \"shutdown properly,\" which has unknown impact and attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/10723/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=3791&cid=1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9504","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/10723/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=3791&cid=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-0091","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"NOTE: this issue has been disputed by the vendor.  Cross-site scripting (XSS) vulnerability in register.php for unknown versions of vBulletin allows remote attackers to inject arbitrary HTML or web script via the reg_site (or possibly regsite) parameter.  NOTE: the vendor has disputed this issue, saying \"There is no hidden field called 'reg_site', nor any $reg_site variable anywhere in the vBulletin 2 or vBulletin 3 source code or templates, nor has it ever existed.  We can only assume that this vulnerability was found in a site running code modified from that supplied by Jelsoft."},{"lang":"es","value":"** DISPUTADA ** NOTA: Este caso ha sido disputado por el fabricante. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en register.php de versiones desconocidas de vBulletin permite a atacantes remotos inyectar HTML arbitrario o script web mediante el parámetro reg_site.\r\nNOTA: El fabricante dice \"No hay ningún campo oculto llamado \"reg_site\", ni ninguna variable \"reg_site\" en el código fuente de vBulletin 2 o vBulletin 3 o sus plantillas, ni nunca lo existido. Sólo podemos asumir que esta vulnerabilidad ha sido encontra en un sitio corriendo código modificado del suministrador por Jelsoft.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"0A4E9C82-64CF-4487-8947-ED745C41945A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107462349324945&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=107462499927040&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=107478592401619&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=107488880317647&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008780","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107462349324945&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=107462499927040&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=107478592401619&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=107488880317647&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008780","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0092","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Safari web browser in Mac OS X 10.2.8 and 10.3.2, with unknown impact."},{"lang":"es","value":"Vulnerabilidad desconocida en el navegador web Safari para Mac OS X 10.2.8 y 10.3.2, con impacto desconocido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9504","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9504","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0093","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using the GLX extension and Direct Rendering Infrastructure (DRI)."},{"lang":"es","value":"XFree86 4.1.0 permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante un índice de un array fuera de límites cuando usa la extenesión GLX y la infraestructura Direct Rendering"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"90FA67D9-8296-4534-8354-51B830DE3499"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"8A000C67-7EA3-47A7-9068-1C8744C182D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"25EDDB93-DD20-4DBE-962B-6334D5A7CB45"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4AC4F566-5D54-4364-B5AA-F846A0C8FCEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7F9D1BD9-4300-43B5-A87B-E2BF74E55C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:errata:*:*:*:*:*","matchCriteriaId":"F4B7E143-E24B-40D2-897B-6D516566B7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"837EBF15-6C7D-46B8-8A90-9DFBF2C09FF3"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040406-01-U","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000824","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-443","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-152.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9701","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15272","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040406-01-U","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-152.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9701","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15272","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0094","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct Rendering Infrastructure (DRI)."},{"lang":"es","value":"Errores de falta de signo en enteros en XFree86 4.1.0 permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario cuando se usa la extensión GLX y la infraestructura Direct Rendering"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"90FA67D9-8296-4534-8354-51B830DE3499"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"8A000C67-7EA3-47A7-9068-1C8744C182D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"25EDDB93-DD20-4DBE-962B-6334D5A7CB45"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4AC4F566-5D54-4364-B5AA-F846A0C8FCEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7F9D1BD9-4300-43B5-A87B-E2BF74E55C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:errata:*:*:*:*:*","matchCriteriaId":"F4B7E143-E24B-40D2-897B-6D516566B7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"837EBF15-6C7D-46B8-8A90-9DFBF2C09FF3"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040406-01-U","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000824","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-443","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-152.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9701","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15273","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040406-01-U","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-152.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15273","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0095","sourceIdentifier":"cve@mitre.org","published":"2004-02-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow."},{"lang":"es","value":"El agente de McAfee ePolicy Orchestrator permite a atacantes remotos causar una denegación de servicio (consumición de memoria y caída) y posiblemente ejecutar código arbitrario mediane una petícón HTTP POST con un valor Content-Length no válido, posiblemente disparando un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:epolicy_orchestrator:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"5D19AB5C-7104-4C27-9249-F7F0A9BA251A"}]}]}],"references":[{"url":"http://download.nai.com/products/patches/ePO/v3.1.0/EPO3013.zip","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3744","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9476","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14989","source":"cve@mitre.org"},{"url":"http://download.nai.com/products/patches/ePO/v3.1.0/EPO3013.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14989","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0096","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in mod_python 2.7.9 allows remote attackers to cause a denial of service (httpd crash) via a certain query string, a variant of CAN-2003-0973."},{"lang":"es","value":"Vulnerabilidad desconocida en mod_python 2.7.9 permite a atacantes remotos causar una denegación de servicio (caídad de httpd) mediante cierta cadena de consulta, una variante de CAN-2003-0973."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_python:2.7.9:*:*:*:*:*:*:*","matchCriteriaId":"E4CF3437-A1AF-485F-88A7-974BA9994396"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200401-03.xml","source":"cve@mitre.org"},{"url":"http://www.modpython.org/pipermail/mod_python/2004-January/014879.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-058.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-063.html","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200401-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.modpython.org/pipermail/mod_python/2004-January/014879.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-063.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0097","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol."},{"lang":"es","value":"Múltiples vulnerabilidades en PWLib anteriores a 1.6.0 permiten a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario, como se demostrón mediante la suite de pruebas del protocolo H.225 NISCC/OUSPG PROTOS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openh323_project:pwlib:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.0","matchCriteriaId":"FBDBF339-B4B4-4DBC-9B25-DC26EE343BFF"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-2004-01.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2004/dsa-448","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/749342","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-047.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9406","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15202","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10056","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A803","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A826","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2004-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.debian.org/security/2004/dsa-448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/749342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-047.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A803","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0099","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mksnap_ffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when creating a snapshot for a file system, which causes default values for other flags to be used, possibly disabling security-critical settings and allowing a local user to bypass intended access restrictions."},{"lang":"es","value":"mksnap_ffs en FeeBSD 5.1 y 5.2 sólo establece el marcador (flag) de instantánea (snapshot) cuando crea una instantánea de un sistema de ficheros , lo que hace que se usen valores por defecto para otros marcadores, lo que posiblemente desabilite configuraciones de seguridad críticas y permita a un usuario local saltarse restricciones de acceso pretendidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*","matchCriteriaId":"0D9F2B04-A1F2-4788-A53D-C8274A758DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*","matchCriteriaId":"C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:01.mksnap_ffs.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3790","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9533","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15005","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:01.mksnap_ffs.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0103","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"crawl before 4.0.0 beta23 does not properly \"apply a size check\" when copying a certain environment variable, which may allow local users to gain privileges, possibly as a result of a buffer overflow."},{"lang":"es","value":"crawl anteriores a 4.0.0 beta23 no \"aplica una comprobación de tamaño\" adecuadamente cuando copia una cierta variable de entorno, lo que podría permitir a usuarios locales ganar privilegios, posiblemente disparando un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linley_henzell:crawl:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.0_b23","matchCriteriaId":"6E5DCCD6-FE76-4DF8-9D07-4EBE0DE729D4"}]}]}],"references":[{"url":"http://secunia.com/advisories/10788/","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-432","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9566","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15032","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10788/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9566","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0104","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code."},{"lang":"es","value":"Múltiples vulnerabilidades de cadena de formato en Metamail 2.7 y anteriores permiten a atacantes remotos ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:metamail_corporation:metamail:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7","matchCriteriaId":"62602141-B1CA-484C-97CC-4E85F34EC8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*","matchCriteriaId":"777F9EC0-2919-45CA-BFF8-78A02537C513"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0041.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107713476911429&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10908","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-083.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-449","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/518518","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:014","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-073.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9692","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404734","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15245","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15259","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107713476911429&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-083.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/518518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-073.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15259","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0105","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code."},{"lang":"es","value":"Múltiples desbordamientos de búfe en Metamail 2.7 y anteriores permiten a atacantes remtos ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:metamail_corporation:metamail:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7","matchCriteriaId":"62602141-B1CA-484C-97CC-4E85F34EC8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*","matchCriteriaId":"777F9EC0-2919-45CA-BFF8-78A02537C513"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0041.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107713476911429&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10908","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-083.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-449","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/513062","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:014","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-073.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9692","source":"cve@mitre.org"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404734","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15247","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15258","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0041.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107713476911429&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-083.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/513062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-073.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0106","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084."},{"lang":"es","value":"Múltiples vulnerabilidades desconocidas en XFree86 4.1.0 to 4.3.0 relacionadas con el manejo inapropiado de ficheros de fuentes, un grupo de vulnerabilidades diferente de CAN-2004-0083."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"90FA67D9-8296-4534-8354-51B830DE3499"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"8A000C67-7EA3-47A7-9068-1C8744C182D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"25EDDB93-DD20-4DBE-962B-6334D5A7CB45"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4AC4F566-5D54-4364-B5AA-F846A0C8FCEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7F9D1BD9-4300-43B5-A87B-E2BF74E55C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:errata:*:*:*:*:*","matchCriteriaId":"F4B7E143-E24B-40D2-897B-6D516566B7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"837EBF15-6C7D-46B8-8A90-9DFBF2C09FF3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110979666528890&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-443","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:012","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_06_xf86.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-059.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-060.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-061.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15206","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11111","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A809","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A832","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110979666528890&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-443","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_06_xf86.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-060.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.405053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A832","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0107","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108."},{"lang":"es","value":"Los scrpits (1) post y (2) trigger en sysstat 4.0.7 y anteriores permiten a usuarios locales sobreescribir ficheros arbitrarios mediante ataques de enlaces simbólicos en ficheros temporales, una vulnerabilidad distinta de CAN-2004-0108."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:sysstat:4.0.7-3:*:i386:*:*:*:*:*","matchCriteriaId":"AD0995DA-F1DF-433D-A97B-1D02570ED787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"128E5519-B592-4A74-A0AE-70FF6C758E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BF8EA77A-0502-4CE1-8AF6-B9FCE3A3B61A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"44DF02DE-E9E2-48FB-ADEB-86CD6BFD6AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F593D32F-D836-4CC6-B597-6847889CDB59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"816C2A5C-06BE-4DFB-8982-1A9FCE5FA6D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"2A2198E1-5725-410B-B7E7-35749CA32A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"EBE7138C-0258-4306-88EE-852CF9EF6605"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"496B269B-8B6D-44DF-BCC1-CF48C85B3B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA6DACA-FC70-475F-8585-1799D5F74386"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040302-01-U.asc","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/o-097.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6884","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-053.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-093.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9838","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15428","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10737","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A849","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A862","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040302-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/o-097.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-093.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15428","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A862","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0108","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107."},{"lang":"es","value":"El útil isag, que procesa datos de sysstat, permite a usuarios locales sobreescribir ficheros arbitrarios mediante un ataque de enlaces simbólicos en ficheros temporales, una vulnverabilidad distinta de CAN-2004-0107."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:sysstat:4.0.7-3:*:i386:*:*:*:*:*","matchCriteriaId":"AD0995DA-F1DF-433D-A97B-1D02570ED787"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"128E5519-B592-4A74-A0AE-70FF6C758E92"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BF8EA77A-0502-4CE1-8AF6-B9FCE3A3B61A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"44DF02DE-E9E2-48FB-ADEB-86CD6BFD6AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F593D32F-D836-4CC6-B597-6847889CDB59"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"816C2A5C-06BE-4DFB-8982-1A9FCE5FA6D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"2A2198E1-5725-410B-B7E7-35749CA32A4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"EBE7138C-0258-4306-88EE-852CF9EF6605"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"496B269B-8B6D-44DF-BCC1-CF48C85B3B18"},{"vulnerable":true,"criteria":"cpe:2.3:a:sysstat:sysstat:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA6DACA-FC70-475F-8585-1799D5F74386"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040302-01-U.asc","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2004/dsa-460","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-053.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9844","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15437","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040302-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2004/dsa-460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-053.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0109","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry."},{"lang":"es","value":"Desbordamiento de búfer en el componente de sistema de ficheros ISO9660 del kernel de Linux 2.4.x y 2.6.x  permite a usuarios locales con acceso físico desbordar memoria del kernel y ejecutar código arbitrario mediante un CD malformado con un una entrada de enlace simbólico larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D6F04081-D672-488E-A91D-5088DD04AA5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108213675028441&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-166.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11361","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11362","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11373","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11429","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11464","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11469","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11470","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11486","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11494","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11518","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11626","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11861","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11891","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11986","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12003","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-121.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-127.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-479","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-480","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-481","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-482","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-489","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-491","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-495","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=101&type=vulnerabilities","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:029","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_09_kernel.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-105.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-106.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-183.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10141","source":"cve@mitre.org"},{"url":"http://www.turbolinux.com/security/2004/TLSA-2004-14.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15866","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10733","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A940","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108213675028441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-166.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11373","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11469","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11518","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-121.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-127.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=101&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_09_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-106.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-183.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.turbolinux.com/security/2004/TLSA-2004-14.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A940","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0110","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL."},{"lang":"es","value":"Desbordamiento de búfer en los módulos (1) nanohttp o (2) nanoftp en XMLSoft Libxml2 2.6.0 a 2.6.5 permite a atacantes remotos ejecutar código arbitrario mediante una URL larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml:1.8.17:*:*:*:*:*:*:*","matchCriteriaId":"E7C0B552-67E9-48E5-ABFB-AF0CD6DA46FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"9087E4FE-661F-4803-BB3B-09D2699265E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"81EDD077-5183-4588-8DB1-93A0597AAA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"FFC48A66-7D1F-4446-BC50-6C1A1DF819E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.5.10:*:*:*:*:*:*:*","matchCriteriaId":"D463EC3C-88F1-46D9-ADB6-6283DC23B0B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.5.11:*:*:*:*:*:*:*","matchCriteriaId":"43F8E361-E6D3-4666-B18D-928D550FD5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"B6948CD9-8489-46BA-9159-24C842490702"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"35C43087-760E-482A-B34E-141A29AC57A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"669211F7-90EA-47AB-A787-34DD79DF8E25"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"025B16D8-1023-4D47-BADD-C1E838B47D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"320E691F-D417-4D81-A223-C46FEFFD908A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmlsoft:libxml2:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"F3B06B40-327D-4EFA-AD19-DA1CA7D50B4F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107851606605420&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107860178228804&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-090.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10958/","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200403-01.xml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-086.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-455","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/493966","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.novell.com/linux/security/advisories/2005_01_sr.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-091.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-650.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9718","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.xmlsoft.org/news.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15301","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15302","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11626","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A833","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A875","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107851606605420&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107860178228804&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-090.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10958/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200403-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-086.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/493966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.novell.com/linux/security/advisories/2005_01_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-091.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-650.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.xmlsoft.org/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A875","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0111","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file."},{"lang":"es","value":"gdk-pixbuf anteiores a 0.20 permite a atacantes causar una denegación de servicio (caída) mediante un fichero de mapa de bits (BMP) malformado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.18:*:*:*:*:*:*:*","matchCriteriaId":"8A45519F-F073-4722-B40D-C29C0862ED2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.20:*:*:*:*:*:*:*","matchCriteriaId":"202DC858-A31A-4790-80CA-16F033E1B7FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:gdk_pixbuf:0.18.0-7:*:i386:*:*:*:*:*","matchCriteriaId":"EDE27CA5-B42B-4995-AEFF-490627A65DCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:gdk_pixbuf:0.18.0-7:*:i386_dev:*:*:*:*:*","matchCriteriaId":"29A9C121-ECB3-4EC2-8EAD-654E10F88359"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:gdk_pixbuf:0.18.0-7:*:i386_gnome:*:*:*:*:*","matchCriteriaId":"3426C3E8-DDD3-4CCE-8AE9-819D414A757D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*","matchCriteriaId":"81B543F9-C209-46C2-B0AE-E14818A6992E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*","matchCriteriaId":"DB89C970-DE94-4E09-A90A-077DB83AD156"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*","matchCriteriaId":"777F9EC0-2919-45CA-BFF8-78A02537C513"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-464","source":"cve@mitre.org"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:020","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-102.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-103.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9842","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2005","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15426","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A845","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A846","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15426","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0112","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read."},{"lang":"es","value":"El código que une SSL/TLS en OpenSSL 0.9.7a, 0.9.7b y 0.9.7c, usando Kerberos, no comprueba adecuadamente la longitud de los tickets de Kerberos, lo que permite que atacantes remotos provoquen una denegación de servicio."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:*:*:*:*:*:*:*:*","matchCriteriaId":"2A9CB22A-21E0-46F6-B6CD-BB38A80FA7A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B9CAFC15-178C-4176-9668-D4A04B63E77B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3C8D6949-89F4-40EF-98F4-8D15628DC345"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:1.1_\\(3.005\\):*:*:*:*:*:*:*","matchCriteriaId":"F3DB2AEE-FB5C-42B7-845B-EDA3E58D5D68"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:firewall_services_module:2.1_\\(0.208\\):*:*:*:*:*:*:*","matchCriteriaId":"6479D85C-1A12-486D-818C-6679F415CA26"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:aaa_server:*:*:*:*:*:*:*:*","matchCriteriaId":"287CF5FA-D0EC-4FD7-9718-973587EF34DF"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:apache-based_web_server:2.0.43.00:*:*:*:*:*:*:*","matchCriteriaId":"C88168D4-7DB5-4720-8640-400BB680D0FD"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:apache-based_web_server:2.0.43.04:*:*:*:*:*:*:*","matchCriteriaId":"968915A1-375B-4C69-BE11-9A393F7F1B0F"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:clientless_vpn_gateway_4400:5.0:*:*:*:*:*:*:*","matchCriteriaId":"11465DCA-72E5-40E9-9D8E-B3CD470C47E9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_management_foundation:2.1:*:*:*:*:*:*:*","matchCriteriaId":"3954D0D1-9FDF-47D0-9710-D0FB06955B8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ciscoworks_common_services:2.2:*:*:*:*:*:*:*","matchCriteriaId":"3D6712BD-DE8F-40F5-AC74-B9EFE9A50CFA"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:converged_communications_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E586558A-ABC3-42EB-8B4D-DC92A0D695E6"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg200:4.4:*:*:*:*:*:*:*","matchCriteriaId":"2A4C5F60-B32D-4D85-BA28-AE11972ED614"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg200:4.31.29:*:*:*:*:*:*:*","matchCriteriaId":"6A5935C3-3D83-461F-BC26-E03362115C42"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg203:4.4:*:*:*:*:*:*:*","matchCriteriaId":"80AC523B-3106-46F2-B760-803DCF8061F4"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg203:4.31.29:*:*:*:*:*:*:*","matchCriteriaId":"F8B8D6F3-D15D-489F-A807-17E63F4831F2"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg208:*:*:*:*:*:*:*:*","matchCriteriaId":"808189BA-197F-49CE-933E-A728F395749C"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg208:4.4:*:*:*:*:*:*:*","matchCriteriaId":"32DCFA7B-7BBB-465A-A4AD-7E18EE3C02DC"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.2:*:*:*:*:*:*:*","matchCriteriaId":"CC7EF0CD-EA39-457B-8E2E-9120B65A5835"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7BC2983F-5212-464B-AC21-8A897DEC1F58"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:sg5:4.4:*:*:*:*:*:*:*","matchCriteriaId":"EBF17989-D1F2-4B04-80BD-CFABDD482ABA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*","matchCriteriaId":"441BE3A0-20F4-4972-B279-19B3DB5FA14D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*","matchCriteriaId":"2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*","matchCriteriaId":"00EAEA17-033A-4A50-8E39-D61154876D2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*","matchCriteriaId":"0D9F2B04-A1F2-4788-A53D-C8274A758DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*","matchCriteriaId":"9A5309ED-D84F-4F52-9864-5B0FEEEE5022"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*","matchCriteriaId":"C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:8.05:*:*:*:*:*:*:*","matchCriteriaId":"31B1ADC1-9B6D-4B5E-A05A-D69599A3A0D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*","matchCriteriaId":"32310AFE-38CC-4C6C-AE13-54C18720F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"E562907F-D915-4030-847A-3C6834A80D4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"138985E6-5107-4E8B-A801-C3D5FE075227"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"038FEDE7-986F-4CA5-9003-BA68352B87D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D9D76A8D-832B-411E-A458-186733C66010"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11\\)e:*:*:*:*:*:*:*","matchCriteriaId":"580BA1FE-0826-47A7-8BD3-9225E0841EDD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e:*:*:*:*:*:*:*","matchCriteriaId":"040B04CD-B891-4F19-A7CC-5C2D462FBD6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e12:*:*:*:*:*:*:*","matchCriteriaId":"5BF29685-7FFC-4093-A1D4-21E4871AF5C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(11b\\)e14:*:*:*:*:*:*:*","matchCriteriaId":"E72872C9-63AF-417F-BFAE-92B4D350C006"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(13\\)e9:*:*:*:*:*:*:*","matchCriteriaId":"80BCF196-5E5A-4F31-BCE7-AA0C748CA922"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(19\\)e1:*:*:*:*:*:*:*","matchCriteriaId":"970939C5-1E6F-47B6-97E6-7B2C1E019985"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sy:*:*:*:*:*:*:*","matchCriteriaId":"CD1F4148-E772-4708-8C1F-D67F969C11DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sy1:*:*:*:*:*:*:*","matchCriteriaId":"3CEBCEF0-5982-4B30-8377-9CAC978A1CB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F8B87C95-4B34-4628-AD03-67D1DE13E097"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2:*:*:*:*:*:*:*","matchCriteriaId":"758F95DB-E619-4B08-86FA-6CF2C1B0CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4F04471C-732F-44EE-AD1B-6305C1DD7DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3499913B-5DCD-4115-8C7B-9E8AFF79DE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E237919A-416B-4039-AAD2-7FAE1F4E100D"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"39149924-188C-40C1-B598-A9CD407C90DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3:*:*:*:*:*:*:*","matchCriteriaId":"15D5780C-4E29-4BCA-A47E-29FF6EAF33FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E6501108-5455-48FE-AA82-37AFA5D7EC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:*:*:lx:*:*:*:*:*","matchCriteriaId":"C1A3B951-A1F8-4291-82FA-AB7922D13ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:5.1.46:*:*:*:*:*:*:*","matchCriteriaId":"3F2E7C81-C0F5-4D36-9A23-03BE69295ED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:s3210:*:*:*:*:*:*:*","matchCriteriaId":"9D0EF4A3-2FE5-41E4-A764-30B379ECF081"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:s3400:*:*:*:*:*:*:*","matchCriteriaId":"CCF6D59E-8AEA-4380-B86B-0803B2202F16"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5:*:*:*:*:*:*:*","matchCriteriaId":"140ABF28-FA39-4D77-AEB2-304962ED48C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5x:*:*:*:*:*:*:*","matchCriteriaId":"09473DD9-5114-44C5-B56C-6630FBEBCACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:100_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A7ECD3A4-5A39-4222-8350-524F11D8FFB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:500:*:*:*:*:*:*:*","matchCriteriaId":"D36C140D-E80C-479A-ADA7-18E901549059"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:2000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"940712E9-B041-4B7F-BD02-7DD0AE596D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:5000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"03B887A2-9025-4C5B-8901-71BC63BF5293"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:7500_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"33264586-7160-4550-9FF9-4101D72F5C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:vsu:10000_r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE5E6521-0611-4473-82AC-21655F10FEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:*:*:vsx-ng-ai:*:*:*:*:*","matchCriteriaId":"AA9A50A1-CA8C-4EE5-B68F-4958F6B4B028"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:2.0:*:gx:*:*:*:*:*","matchCriteriaId":"8C83ABA2-87CD-429B-9800-590F8256B064"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp0:*:*:*:*:*:*:*","matchCriteriaId":"A4D9A576-2878-4AC4-AC95-E69CB8A84A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp1:*:*:*:*:*:*:*","matchCriteriaId":"0A1A0B02-CF33-401F-9AB2-D595E586C795"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:next_generation_fp2:*:*:*:*:*:*:*","matchCriteriaId":"8C0EF3F0-B82E-45B7-8D05-05E76009F7A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"90FB3825-21A6-4DBE-8188-67672DBE01CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"80623E58-8B46-4559-89A4-C329AACF3CB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"AEE6C228-CD93-4636-868B-C19BC1674BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"A645148C-AD0D-46C1-BEE3-10F5C9066279"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:provider-1:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"0D69187C-7F46-4FF0-A8A0-0E1989EA79BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp0:*:*:*:*:*:*:*","matchCriteriaId":"4AE4A7EE-1BA3-46F1-BF4A-A72997EE0992"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp1:*:*:*:*:*:*:*","matchCriteriaId":"02029D75-FAF2-4842-9246-079C7DE36417"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:next_generation_fp2:*:*:*:*:*:*:*","matchCriteriaId":"E0146341-364C-4085-A2E1-BC8C260FBA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:vsx_ng_with_application_intelligence:*:*:*:*:*:*:*","matchCriteriaId":"B5EF01C8-1C8A-4BD1-A13B-CE31F09F9523"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:access_registrar:*:*:*:*:*:*:*:*","matchCriteriaId":"B8496E0D-2507-4C25-A122-0B846CBCA72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:application_and_content_networking_software:*:*:*:*:*:*:*:*","matchCriteriaId":"8E383F2A-DFCF-47F8-94EE-3563D41EA597"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css_secure_content_accelerator:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D2D87EF0-056E-4128-89EB-2803ED83DEE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css_secure_content_accelerator:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BB3163C1-2044-44DA-9C88-076D75FDF1EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:css11000_content_services_switch:*:*:*:*:*:*:*:*","matchCriteriaId":"07E1B690-C58B-4C08-A757-F3DF451FDAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:okena_stormwatch:3.2:*:*:*:*:*:*:*","matchCriteriaId":"31F0E14C-7681-4D1A-B982-A51E450B93A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:pix_firewall:6.2.2_.111:*:*:*:*:*:*:*","matchCriteriaId":"ECBC761F-A8F5-4CD8-B19C-5CE8FFC58FDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:threat_response:*:*:*:*:*:*:*:*","matchCriteriaId":"2CF39E8B-C201-4940-81C9-14AF4C3DD4B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:6.10:*:*:*:*:*:*:*","matchCriteriaId":"AC604680-2E9E-4DC4-ACDD-74D552A45BA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:6.10_b4:*:*:*:*:*:*:*","matchCriteriaId":"37A94436-D092-4C7E-B87B-63BC621EE82E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.1_0.1.02:*:*:*:*:*:*:*","matchCriteriaId":"862165CF-3CFB-4C6E-8238-86FA85F243C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.1_0.2.06:*:*:*:*:*:*:*","matchCriteriaId":"056F3336-BAA8-4A03-90B4-7B31710FC1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.2_0.0.03:*:*:*:*:*:*:*","matchCriteriaId":"9FDC2510-FBB9-429A-B6D4-10AB11F93960"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.10:*:*:*:*:*:*:*","matchCriteriaId":"5D45127E-A544-40A0-9D34-BD70D95C9772"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webns:7.10_.0.06s:*:*:*:*:*:*:*","matchCriteriaId":"56C69C3E-C895-45C8-8182-7BB412A0C828"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A1FDD507-C38B-4C38-A54F-3DA6F07AD0B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6F2B7AC2-CF08-4AC9-9A71-3A8130F9F9AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:bsafe_ssl-j:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D4D9564B-B92E-4C97-87FF-B56D62DCA775"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:1.5.17:*:*:*:*:*:*:*","matchCriteriaId":"FF2AD44D-3BE8-4541-B62D-9F01D46F8E6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:1.5.18:*:*:*:*:*:*:*","matchCriteriaId":"8BF2E08B-9046-41A1-BEDE-EB0B6436315C"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"811E1BE8-3868-49F8-B6E8-D5705559B02E"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"D67C9DB4-E46C-4E84-82D9-AF48EFDAEFBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:1.7:*:*:*:*:*:*:*","matchCriteriaId":"CF0E1BF0-6629-40DC-AB23-0256BABD0CB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"1AC4E7E5-FCC1-46B0-B69F-F1F6B36838ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"2C4AED89-F862-4071-8E94-481A59EDAE8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7A3CB6FF-3840-4E80-A0A4-614D6686D2B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"67010B0B-ECE7-4EE5-B103-05DC637E150F"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"1355EF99-35FC-44A7-BC56-F7C0EA49BF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"6DDA8F10-B059-4403-A790-EFC8822588B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A06BCD31-3FB6-468B-9BC9-EA573717B19F"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"360238CC-3BF5-4750-B16D-8A2E0257022E"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"0C55C754-E213-4E79-AA7B-2CAF8A464388"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.1:*:*:*:*:*:*:*","matchCriteriaId":"647BA524-5A79-408C-BBF2-5780BC522B64"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D599C49D-4D7D-4C44-9D8D-A3F76746BBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7B4DC717-0785-4C19-8A33-ACA5F378DF3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:forcepoint:stonegate:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"858843D3-84BB-48B6-80D1-1271AE60150D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.01.05.08:*:*:*:*:*:*:*","matchCriteriaId":"B931D4F8-23F5-4ABA-A457-959995D30C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.02.00.00:*:*:*:*:*:*:*","matchCriteriaId":"BE6A023E-9C2A-487F-B5CE-674C766BFE75"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:wbem:a.02.00.01:*:*:*:*:*:*:*","matchCriteriaId":"6A15ACA2-D500-4260-B51A-6FE6AB5A45A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0A7B80E0-40BB-4B4E-9711-AF293A038DD4"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"9EFCFFE8-9CAD-4A7F-9751-8627E6297C9F"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D3653856-207E-46A7-92DD-D7F377F1829A"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7E4627BB-0D75-44BC-989F-0E85C9FA0E2B"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"19053434-F9E7-4839-AB5A-B226CC4616A5"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.2:rc1:*:*:*:*:*:*","matchCriteriaId":"D04CABBA-7BEB-44EC-A6E4-A31E41A62BD7"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.2:rc2:*:*:*:*:*:*","matchCriteriaId":"8D15C938-4DAB-4011-80EE-A2663E20BFC1"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C9C056ED-2492-4B1C-BCB9-4F36806C4A48"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A72FC232-A2CB-443B-9A4A-8BBFEFE6517C"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.3:-:*:*:*:*:*:*","matchCriteriaId":"BA347CD3-0619-4EA2-A736-B59EE9E3AC12"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.3:rc1:*:*:*:*:*:*","matchCriteriaId":"4ACEF29C-3225-43A7-9E07-FBCCF555887E"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.3:rc2:*:*:*:*:*:*","matchCriteriaId":"46D932AF-FB1A-464D-BA3D-2DC2D3C187CD"},{"vulnerable":false,"criteria":"cpe:2.3:a:litespeedtech:litespeed_web_server:1.3:rc3:*:*:*:*:*:*","matchCriteriaId":"9F532860-9E26-45C3-9FB3-6B0888F1279A"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A037FAA6-6D26-4496-BC67-03475B4D1155"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D3831DD3-E783-4200-8986-FDBF7DD9BA53"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.2:*:*:*:*:*:*:*","matchCriteriaId":"2909C9D5-3D8F-4C41-B0E7-A0C0B432C19A"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.3:*:*:*:*:*:*:*","matchCriteriaId":"E09436DF-E3C1-4C03-A3BE-73C4BC84BB7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:neoteris:instant_virtual_extranet:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"699764B6-0F86-4AB0-86A3-4F2E69AD820C"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.0:*:*:*:*:*:*:*","matchCriteriaId":"7562ADC4-0D01-4FC2-98F0-1F4041BDA52E"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5:*:*:*:*:*:*:*","matchCriteriaId":"E6FAB588-BDBE-4A04-AB9E-4F700A3951F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.12a:*:*:*:*:*:*:*","matchCriteriaId":"E1B83F84-D1EF-43B4-8620-3C1BCCE44553"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.5.27:*:*:*:*:*:*:*","matchCriteriaId":"41169D2F-4F16-466A-82E9-AD0735472B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.6.2:*:*:*:*:*:*:*","matchCriteriaId":"947699C3-D9DE-411A-99C0-44ADD1D2223A"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7:*:*:*:*:*:*:*","matchCriteriaId":"15F668C0-8420-4401-AB0F-479575596CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:*:*:*:*:*:*:*","matchCriteriaId":"CDDCC7B6-34CA-4551-9833-306B93E517BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:edirectory:8.7.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6D69C160-39F7-48B8-B9A3-CC86690453C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:1.5:*:*:*:*:*:*:*","matchCriteriaId":"166BF638-ABDC-4BB9-BD4E-2B22681AD9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:imanager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8FA6420B-9F6A-48F4-A445-12B60A320347"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6c:*:*:*:*:*:*:*","matchCriteriaId":"0FCA45CE-4127-47AD-BBA8-8A6DD83AE1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6d:*:*:*:*:*:*:*","matchCriteriaId":"7CA1CA40-7DB5-4DCA-97A8-9A8CF4FECECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6e:*:*:*:*:*:*:*","matchCriteriaId":"180D07AE-C571-4DD6-837C-43E2A946007A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6f:*:*:*:*:*:*:*","matchCriteriaId":"BA3E4D2A-6488-4F8B-A3CA-4161A10FA4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6g:*:*:*:*:*:*:*","matchCriteriaId":"90789533-C741-4B1C-A24B-2C77B9E4DE5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6h:*:*:*:*:*:*:*","matchCriteriaId":"1520065B-46D7-48A4-B9D0-5B49F690C5B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6i:*:*:*:*:*:*:*","matchCriteriaId":"5B76FE2D-FBE0-4A3B-A0EA-179332D74F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6j:*:*:*:*:*:*:*","matchCriteriaId":"2AA526B9-726A-49D5-B3CA-EBE2DA303CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.6k:*:*:*:*:*:*:*","matchCriteriaId":"494E48E7-EF86-4860-9A53-94F6C313746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"45A518E8-21BE-4C5C-B425-410AB1208E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta1:*:*:*:*:*:*","matchCriteriaId":"9E3AB748-E463-445C-ABAB-4FEDDFD1878B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta2:*:*:*:*:*:*","matchCriteriaId":"660E4B8D-AABA-4520-BC4D-CF8E76E07C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7:beta3:*:*:*:*:*:*","matchCriteriaId":"85BFEED5-4941-41BB-93D1-CD5C2A41290E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7a:*:*:*:*:*:*:*","matchCriteriaId":"78E79A05-64F3-4397-952C-A5BB950C967D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7b:*:*:*:*:*:*:*","matchCriteriaId":"7F7C9E77-1EB2-4720-A8FD-23DC1C877D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openssl:openssl:0.9.7c:*:*:*:*:*:*:*","matchCriteriaId":"549BB01D-F322-4FE3-BDA2-4FEA8ED8568A"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6-15:*:i386:*:*:*:*:*","matchCriteriaId":"09F3FB7B-0F68-49F3-A3B7-977A687A42E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.6b-3:*:i386:*:*:*:*:*","matchCriteriaId":"088F2FF7-96E5-455E-A35B-D99F9854EC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386:*:*:*:*:*","matchCriteriaId":"FFA721BF-1B2E-479F-BF25-02D441BF175B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386_dev:*:*:*:*:*","matchCriteriaId":"AFEDCE49-21CC-4168-818F-4C638EE3B077"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:openssl:0.9.7a-2:*:i386_perl:*:*:*:*:*","matchCriteriaId":"B7D18F9B-C0BE-4DE8-81F4-5BF56C00BF41"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:servercluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8F0F78F4-E81E-4C6B-AB73-D6AAE191060E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:servercluster:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DF1A5808-6D5D-48AD-9470-5A6510D17913"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:1_2.0:*:*:*:*:*:*:*","matchCriteriaId":"C1E8990D-D9A0-4A71-9D87-EC047E01B0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:1_3.0:*:*:*:*:*:*:*","matchCriteriaId":"6DBCC172-6867-4DFD-AAEF-9BDB4DA21F46"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C2F2BEEA-46BB-4718-B0F3-B4EC62B678A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8D09E11C-C5BB-409E-BB0D-7F351250419B"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_fullcluster:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6B06A05D-AA31-441D-9FC2-3558648C3B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_securitycluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C0886901-6F93-44C1-B774-84D7E5D9554C"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_securitycluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"3F203A80-7C1E-4A04-8E99-63525E176753"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_webcluster:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CA0A204C-158B-4014-A53C-75E0CD63E0DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:stonebeat_webcluster:2.5:*:*:*:*:*:*:*","matchCriteriaId":"085BA581-7DA5-4FA4-A888-351281FD0A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.20:*:*:*:*:*:*:*","matchCriteriaId":"9519BCB2-B401-44CE-97F6-847BB36AE45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.30:*:*:*:*:*:*:*","matchCriteriaId":"BBE573E8-DD94-4293-99AE-27B9067B3ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:tarantella:tarantella_enterprise:3.40:*:*:*:*:*:*:*","matchCriteriaId":"D14413DA-5199-4282-9E22-D347E9D8E469"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"05CC5F49-0E9E-45D8-827D-A5940566DB25"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.0.1_build_2129:*:*:*:*:*:*:*","matchCriteriaId":"5D94EE19-6CE9-4E02-8174-D9954CDBF02B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D4E4BEE3-AE7B-4481-B724-2E644E18ACC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:2.5.1_build_5336:*:*:*:*:*:*:*","matchCriteriaId":"EAAB7052-E0B6-472E-920B-A0F0AEA25D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:gsx_server:3.0_build_7592:*:*:*:*:*:*:*","matchCriteriaId":"8CE38F15-BD42-4171-8670-86AA8169A60C"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"20C0BD87-CE4B-49D2-89BE-EF282C43AD72"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C3E6C4A8-59F4-43EE-8413-E95289037598"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FE76357A-27E6-4D85-9AA0-1BB658C41568"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C56C5FDB-24E2-479D-87CA-164CD28567D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AEF6C16F-8EDF-4A24-BFEF-6A304D654EEB"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D982AE39-BB57-49E7-B5FE-5EF1ADE2F019"},{"vulnerable":true,"criteria":"cpe:2.3:h:bluecoat:proxysg:*:*:*:*:*:*:*:*","matchCriteriaId":"1B6CFEC9-0F8F-4CD4-ABD1-E6533F910F7F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"12DE5E22-DF93-46BE-85A3-D4E04379E901"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11500:*:*:*:*:*:*:*:*","matchCriteriaId":"BF28C435-C036-4507-8E3F-44E722F9974A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gss_4480_global_site_selector:*:*:*:*:*:*:*:*","matchCriteriaId":"CDA957E2-ABF9-49B2-874F-3FC3060CE0B0"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:gss_4490_global_site_selector:*:*:*:*:*:*:*:*","matchCriteriaId":"5F2CDFE7-6853-4A31-85C0-50C57A8D606A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:mds_9000:*:*:*:*:*:*:*:*","matchCriteriaId":"0F2ED90B-DDBA-49DE-AC78-20E7D77C8858"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:secure_content_accelerator:10000:*:*:*:*:*:*:*","matchCriteriaId":"408A9DB0-81EF-4186-B338-44954E67289B"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2:*:*:*:*:*:*:*","matchCriteriaId":"5B0C5F92-7E93-4C3F-B22B-E6612A4D3E10"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.01:*:*:*:*:*:*:*","matchCriteriaId":"2D0DC4B4-9AD9-4AC8-BFA7-A3D209B5D089"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.02:*:*:*:*:*:*:*","matchCriteriaId":"303362A5-9C3C-4C85-8C97-2AB12CE01BF6"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.03:*:*:*:*:*:*:*","matchCriteriaId":"FED22DC1-E06B-4511-B920-6DAB792262D8"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.0.04:*:*:*:*:*:*:*","matchCriteriaId":"4CE44CA7-4BC7-4C2B-948F-2ACABB91528B"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F757B2A7-869F-4702-81EB-466317A79D61"},{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder:5.2.1.02:*:*:*:*:*:*:*","matchCriteriaId":"01F6E9A9-6C85-48DA-BC61-55F8EACCB59F"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:crypto_accelerator_4000:1.0:*:*:*:*:*:*:*","matchCriteriaId":"64AF1E33-4086-43E2-8F54-DA75A99D4B75"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos_ca_sa:4.1.10:*:*:*:*:*:*:*","matchCriteriaId":"53D16F03-A4C7-4497-AB74-499F208FF059"},{"vulnerable":true,"criteria":"cpe:2.3:o:bluecoat:cacheos_ca_sa:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"13A33EC1-836B-4C8C-AC18-B5BD4F90E612"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0:*:*:*:*:*:*:*","matchCriteriaId":"58BE9C02-2A01-4F6F-A6BD-BC0173561E9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C558CED8-8342-46CB-9F52-580B626D320E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"0F85D19E-6C26-429D-B876-F34238B9DAAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"FEC7CCF7-CBC6-4EDC-8EDD-884DFFFBCC7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"E5011A33-CD6D-4EFC-ACFD-E51C9AE726A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.0\\(4.101\\):*:*:*:*:*:*:*","matchCriteriaId":"09063867-0E64-4630-B35B-4CCA348E4DAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1:*:*:*:*:*:*:*","matchCriteriaId":"78F98CD7-A352-483C-9968-8FB2627A7CBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F97FE485-705F-4707-B6C6-0EF9E8A85D5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"E2B925E8-D2C2-4E8C-AC21-0C422245C482"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"B9170562-872E-4C32-869C-B10FF35A925E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"D0927A68-8BB2-4F03-8396-E9CACC158FC0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.1\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"559DDBA3-2AF4-4A0C-B219-6779BA931F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2:*:*:*:*:*:*:*","matchCriteriaId":"ED9D142A-DDC8-4BD6-8C22-F242C9C0B1ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5226C9CC-6933-4F10-B426-B47782C606FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"757DAE9A-B25D-4B8A-A41B-66C2897B537E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"5E3DC170-E279-4725-B9EE-6840B5685CC9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.2\\(3.100\\):*:*:*:*:*:*:*","matchCriteriaId":"8091EDA9-BD18-47F7-8CEC-E086238647C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6F867890-74A4-4892-B99A-27DB4603B873"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"CE05B514-F094-4632-B25B-973F976F6409"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"3392428D-1A85-4472-A276-C482A78E2CE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.102\\):*:*:*:*:*:*:*","matchCriteriaId":"40954985-16E6-4F37-B014-6A55166AE093"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:pix_firewall_software:6.3\\(3.109\\):*:*:*:*:*:*:*","matchCriteriaId":"0C097809-1FEF-4417-A201-42291CC29122"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00045.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=107953412903636&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108403806509920&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11139","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200403-03.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/o-101.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/484726","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:023","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_07_openssl.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.openssl.org/news/secadv_20040317.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-120.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-121.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9899","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.trustix.org/errata/2004/0012","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.uniras.gov.uk/vuls/2004/224012/index.htm","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-078A.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15508","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1049","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A928","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9580","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00045.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=107953412903636&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108403806509920&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200403-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/o-101.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040317-openssl.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/484726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_07_openssl.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.openssl.org/news/secadv_20040317.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-120.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-121.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.455961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.trustix.org/errata/2004/0012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.uniras.gov.uk/vuls/2004/224012/index.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-078A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0113","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server."},{"lang":"es","value":"Fuga de meoria en ssl_engine_io.c en mod_ssl de Apache 2 anteriores a 2.0.49 permite a atacantes remotos causar una denegación de servicio (consumición de memoria) mediante peticiones HTTP regulares al puerto SSL de un servidor con SSL activado."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.49:\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"B940BB85-03F5-46D7-8DC9-2E1E228D3D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*","matchCriteriaId":"82139FFA-2779-4732-AFA5-4E6E19775899"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*","matchCriteriaId":"B7F717E6-BACD-4C8A-A9C5-516ADA6FEE6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*","matchCriteriaId":"08AB120B-2FEC-4EB3-9777-135D81E809AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*","matchCriteriaId":"1C7FF669-12E0-4A73-BBA7-250D109148C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*","matchCriteriaId":"5AB7B1F1-7202-445D-9F96-135DC0AFB1E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*","matchCriteriaId":"BCB7EE53-187E-40A9-9865-0F3EDA2B5A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*","matchCriteriaId":"9D06AE8A-9BA8-4AA8-ACEA-326CD001E879"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:*","matchCriteriaId":"2FC1A04B-0466-48AD-89F3-1F2EF1DEBE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:*","matchCriteriaId":"19F34D08-430E-4331-A27D-667149425176"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.45:*:*:*:*:*:*:*","matchCriteriaId":"248BDF2C-3E78-49D1-BD9C-60C09A441724"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.46:*:*:*:*:*:*:*","matchCriteriaId":"BB0FDE3D-1509-4375-8703-0D174D70B22E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.47:*:*:*:*:*:*:*","matchCriteriaId":"AFE732B5-00C9-4443-97E0-1DF21475C26B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.48:*:*:*:*:*:*:*","matchCriteriaId":"C79C41D3-6894-4F2D-B8F8-82AB4780A824"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000839","source":"cve@mitre.org"},{"url":"http://issues.apache.org/bugzilla/show_bug.cgi?id=27106","source":"cve@mitre.org"},{"url":"http://marc.info/?l=apache-cvs&m=107869699329638","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108034113406858&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108369640424244&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108731648532365&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200403-04.xml","source":"cve@mitre.org"},{"url":"http://www.apacheweek.com/features/security-20","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:043","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4182","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-084.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-182.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9826","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0017","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15419","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A876","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://issues.apache.org/bugzilla/show_bug.cgi?id=27106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=apache-cvs&m=107869699329638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108034113406858&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108369640424244&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108731648532365&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200403-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apacheweek.com/features/security-20","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-084.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-182.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r7035b7c9091c4b665a3b7205364775410646f12125d48e74e395f2ce%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re028d61fe612b0908595d658b9b39e74bca56f2a1ed3c5f06b5ab571%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0114","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earlier, does not properly decrement a shared memory segment's reference count when the vm_map_find function fails, which could allow local users to gain read or write access to a portion of kernel memory and gain privileges."},{"lang":"es","value":"La llamada de sistema shmat en el interfaz de Memoria Compartida de Sistema V de FreeBSD 5.2 y anteriores, NetBSD 1.3 y anteriores, y OpenBSD 2.6 y anteriores, no decrementa adecuadamente un contador de referencias de segmentos de memoria compartidos cuando al función vm_map_find falla, lo que podría permitir a usuarios locales ganar acceso de lectura y escritura a una porción de memoria del kernel y ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","versionEndIncluding":"5.2","matchCriteriaId":"E12586C9-B199-4E06-B831-97648F1244A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"E5F617D2-2369-4E7A-9211-26D27AE3EBBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6","matchCriteriaId":"769A783B-D80A-4AFF-9676-B0A0457C77B3"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:02.shmat.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-004.txt.asc","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107608375207601&w=2","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata33.html#sysvshm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3836","source":"cve@mitre.org"},{"url":"http://www.pine.nl/press/pine-cert-20040201.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9586","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15061","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:02.shmat.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-004.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107608375207601&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata33.html#sysvshm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pine.nl/press/pine-cert-20040201.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15061","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0115","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServices_Log temporary file."},{"lang":"es","value":"Microsoft Virtual PC para Mac, versiónes 6.0 a 6.1 permite a atacantes locales ejecutar código arbitrario con privilegios de sistema insertando código malicioso en un fichero temporal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_pc:6.0:*:mac:*:*:*:*:*","matchCriteriaId":"3E796D72-A19C-4A97-AF39-5CA140FDE566"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_pc:6.1:*:mac:*:*:*:*:*","matchCriteriaId":"CA6E4485-33D3-45FB-B8AA-7A7719FC3C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_pc:6.2:*:mac:*:*:*:*:*","matchCriteriaId":"9E42A77B-7792-4D25-8CD4-40F4C59A73A5"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2004/a021004-1.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-076.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3893","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9632","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-005","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15113","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2004/a021004-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-076.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0116","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field."},{"lang":"es","value":"Una función de activación en el servicio RPCSS relacionada con la activación DCOM de Microsoft Windows 2000, XP y 2004 permite a atacantes remotos causar una denegación de servicio (consumición de memoria) mediante una petición de activación con un campo de longitud largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://secunia.com/advisories/11065/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Apr/1009758.html","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-115.shtml","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20040413A.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/417052","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10127","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15708","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A955","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A957","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A958","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11065/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2004/Apr/1009758.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-115.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20040413A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/417052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0117","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code."},{"lang":"es","value":"Vulnerabilidad desconocida en la implementación del protocolo H.323 en Microsoft Windows 98, Windows 2000, Windows XP, y Windows Server 2003 permite a atacantes remotos ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:netmeeting:*:*:*:*:*:*:*:*","versionEndIncluding":"3","matchCriteriaId":"62F0F236-B053-4ABF-A052-704C3EBD21EA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/353956","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15710","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A907","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A946","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A964","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/353956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0118","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code."},{"lang":"es","value":"El componente del subsistema de la Máquina Virtual DOS (VDM) en Windows NT 4.0 y Windows 2000 no valida adecuadamente estructuras de sistema, lo que permite a usuarios locales acceder a memoria protegida del kernel y ejecutar código de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020070.html","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20040413E.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/783748","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10117","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15714","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1512","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1718","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020070.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20040413E.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/783748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1512","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1718","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0119","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service (crash from null dereference) or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selection."},{"lang":"es","value":"El intefaz Negotiate Security Software Provider (SSP) en Windows 2000, Windows XP y Windows Server 2003 permite a atacantes remotos causar una denegación de servicio (caída por desreferencia nula) o ejecutar código de su elección mediante una petición SPNEGO NegTokenInit especialemente elaborada durante la selección del protocolo de autenticación."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:*:*:*:*:*:*:*","matchCriteriaId":"685F1981-EA61-4A00-89F8-A748A88962F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:*:*","matchCriteriaId":"E3527F41-A6ED-437D-9833-458A2C60C2A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*","matchCriteriaId":"B47EBFCC-1828-45AB-BC6D-FB980929A81A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0081.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/638548","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10113","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15715","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1808","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1962","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1997","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0081.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/638548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-0120","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages."},{"lang":"es","value":"La librería Microsoft Secure Sockets Layer (SSL), usada en Windows 2000, Windows XP y Windows Server 2003, permite a atacantes remotos causar una denegación de servicio mediante mensajes SSL malformados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/150236","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10115","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15712","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A885","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A886","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A892","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/150236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A885","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0121","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs."},{"lang":"es","value":"Micrososft Outlook 2002 no filtra suficientemente los parámetros de URLs mailto:, cuando se usan como argumentos al llamar a OUTLOOK.EXE, lo que permite a atacantes remotos usar código script en la zona de seguridad \"Máquina Local\" y ejecutar programas arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-88"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp2:*:*:*:*:*:*","matchCriteriaId":"9D02D769-061D-44A5-B019-F4E653DF615A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0E20E02-43B2-499B-ADDD-B5B7003894D7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107893704602842&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-096.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.idefense.com/application/poi/display?id=79&type=vulnerabilities","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/305206","source":"cve@mitre.org","tags":["Mitigation","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9827","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-070A.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-009","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15414","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15429","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A843","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=107893704602842&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-096.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.idefense.com/application/poi/display?id=79&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/305206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-070A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0122","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files."},{"lang":"es","value":"Microsoft MSN Messenger 6.0 y 6.1 no maneja adecuadamente ciertas peticiones, lo que permite a atacantes remotos leer ficheros arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:6.0:*:*:*:*:*:*:*","matchCriteriaId":"6A0D64D3-9B9D-4735-968A-344CC62A2312"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:6.1:*:*:*:*:*:*:*","matchCriteriaId":"3E762116-01B1-472B-AA7E-AB95A7BF7F32"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/688094","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9828","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-010","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15415","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15427","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A844","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/688094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0123","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code."},{"lang":"es","value":"Vulnerabilidad de doble liberación de memoria en la librería ASN.1 usada en Windows NT 4.0, Windows 2000, Windows XP, y Windows Server 2003, permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/255924","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10118","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15713","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1007","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1076","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A924","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-114.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/255924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1007","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0124","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an \"alter context\" call that contains additional data, aka the \"Object Identity Vulnerability.\""},{"lang":"es","value":"El interfaz RPC DCOM de Microsoft Windows NT 4.0, 2000, XP y Server 2003 permite a atacantes remotos causar comunicaciones de red mediante una llamada de \"alterar contexto\" conteniendo datos adicionales, también conocida como \"Vulnerabilidad de Identidad de Objeto\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://secunia.com/advisories/11065/","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-115.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/212892","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10121","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15711","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1041","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1062","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1066","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1072","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11065/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-115.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/212892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1072","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0125","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table."},{"lang":"es","value":"La llamada de sistema jail en FreeBSD 4.x anterior a 4.10-RELEASE no verifica que un intento de manipular tablas de encaminamiento provenga de un proceso no enjaulado, lo que podría permitir a usuarios locales modificar la tabla de encaminamiento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"E3F7EB61-55A5-4776-B0E7-3508920A6CEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*","matchCriteriaId":"A442DE97-4485-4D95-B95D-58947585E455"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*","matchCriteriaId":"1E8A6564-129A-4555-A5ED-6F65C56AE7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*","matchCriteriaId":"237174A4-E030-4A0B-AD0B-5C463603EAA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*","matchCriteriaId":"5D7F8F11-1869-40E2-8478-28B4E946D3CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*","matchCriteriaId":"9062BAB5-D437-49BE-A384-39F62434B70B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*","matchCriteriaId":"3BA1504C-14FE-4C21-A801-944041F2946F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*","matchCriteriaId":"21B69535-4FB6-4FAD-AAA6-C790FF82EFAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*","matchCriteriaId":"6E53C673-9D6D-42C8-A502-033E1FC28D97"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*","matchCriteriaId":"6F4AC452-6042-409D-8673-ACAD108EE3B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*","matchCriteriaId":"2FE1009B-371A-48E2-A456-935A1F0B7D0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*","matchCriteriaId":"C844A170-B5A7-4703-AF3B-67366D44EA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*","matchCriteriaId":"3D41CB12-7894-4D25-80EC-23C56171D973"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*","matchCriteriaId":"9BCD9C12-EDAB-473F-9CC5-04F06B413720"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*","matchCriteriaId":"58EBC5C8-5CA8-4881-A036-179FDEBA3CA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*","matchCriteriaId":"09789843-6A1A-4CDB-97E8-89E82B79DDB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*","matchCriteriaId":"118211EF-CED7-4EB5-9669-F54C8169D4AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*","matchCriteriaId":"58288F0F-B4CE-445C-AD93-DA73E3AD6FC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*","matchCriteriaId":"CC96FBA9-6A65-4CC7-BE68-ADAF450ABE21"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*","matchCriteriaId":"9A405AE2-ECC4-4BB0-80DD-4736394FB217"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B86C77AB-B8FF-4376-9B4E-C88417396F3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*","matchCriteriaId":"E5612FB0-8403-4A7E-B89A-D7BDFAC00078"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*","matchCriteriaId":"FA699BB4-94AA-40E6-A6B6-33E3D416CDA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*","matchCriteriaId":"AFDA151E-E614-4A24-A34D-B6D5309110CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*","matchCriteriaId":"A7818E11-1BEB-4DAA-BA7A-A278454BA4B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*","matchCriteriaId":"441BE3A0-20F4-4972-B279-19B3DB5FA14D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*","matchCriteriaId":"09BFA20B-2F31-4246-8F74-63DF1DB884EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*","matchCriteriaId":"5F3B4BA2-8A61-4F9A-8E46-7FA80E7F5514"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*","matchCriteriaId":"2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*","matchCriteriaId":"00EAEA17-033A-4A50-8E39-D61154876D2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*","matchCriteriaId":"4AE93D3D-34B4-47B7-A784-61F4479FF5A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*","matchCriteriaId":"E6288144-0CD7-45B6-B5A7-09B1DF14FBE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*","matchCriteriaId":"9FFD9D1C-A459-47AD-BC62-15631417A32F"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:12.jailroute.asc","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10485","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16342","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:12.jailroute.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16342","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0126","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The jail_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/write privileges to files and directories within another jail."},{"lang":"es","value":"La llamada de sistema jail_attach de FreeBSD 5.1 y 5.2 cambia el directorio de un proceso llamante incluso si el proceso no tiene permisos para cambiar el directorio, lo que permite a usuarios locales ganar privilegios de lectura y escritura dentro de otra jaula."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*","matchCriteriaId":"0D9F2B04-A1F2-4788-A53D-C8274A758DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*","matchCriteriaId":"C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:03.jail.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4101","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9762","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15344","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:03.jail.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15344","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0127","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on the server via .. (dot dot) sequences in the gedcom_config parameter."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en editconfig_gedcom.php de phpGedView 2.65.1 y anteriores permite a atacantes remotos leer ficheros arbitrarios o ejecutar programa PHP arbitrarios en el servidor mediante secuencias .. en el parámetro gedcom_config."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.52.3:*:*:*:*:*:*:*","matchCriteriaId":"56A9CE2D-8079-4E71-A049-493A7A72C9A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.60:*:*:*:*:*:*:*","matchCriteriaId":"EDA13EED-7C5F-4F5E-AEC2-D5DA0206B238"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*","matchCriteriaId":"CE53F2DA-37A7-482C-81BE-8D2D12489462"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.61.1:*:*:*:*:*:*:*","matchCriteriaId":"65B164FD-C465-4C3D-B929-3A5B18D8897B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.65:*:*:*:*:*:*:*","matchCriteriaId":"12A0E38B-C9E3-4619-B1A1-94C11546D6DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.65.1:*:*:*:*:*:*:*","matchCriteriaId":"2F4C6AC9-0DBB-42AE-BDAE-48CDA55913E4"}]}]}],"references":[{"url":"http://secunia.com/advisories/10753/","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=3768","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/352355","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9529","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008892","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15129","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10753/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=3768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/352355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008892","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15129","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0128","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains a malicious theme.php script."},{"lang":"es","value":"Vulnerabilidad de inclusión de código PHP remoto en el script de configuración GEDCOM de phpGedView 2.65.1 y anteriores permite a atacantes remotos ejecutar código PHP arbitrario modificando el parámetro PGV_BASE_DIRECTORY para que referencie a una URL en un servidor web remoto conteniendo un script theme.php malicioso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.52.3:*:*:*:*:*:*:*","matchCriteriaId":"56A9CE2D-8079-4E71-A049-493A7A72C9A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.60:*:*:*:*:*:*:*","matchCriteriaId":"EDA13EED-7C5F-4F5E-AEC2-D5DA0206B238"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.61:*:*:*:*:*:*:*","matchCriteriaId":"CE53F2DA-37A7-482C-81BE-8D2D12489462"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.61.1:*:*:*:*:*:*:*","matchCriteriaId":"65B164FD-C465-4C3D-B929-3A5B18D8897B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.65:*:*:*:*:*:*:*","matchCriteriaId":"12A0E38B-C9E3-4619-B1A1-94C11546D6DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:2.65.1:*:*:*:*:*:*:*","matchCriteriaId":"2F4C6AC9-0DBB-42AE-BDAE-48CDA55913E4"}]}]}],"references":[{"url":"http://secunia.com/advisories/10753/","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=141517","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3769","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/352355","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9531","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14987","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10753/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=141517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/352355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14987","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0129","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in the what parameter."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en export.php en phpMyAdmin 2.5.5 y anteriores permite a atacantes remotos leer ficheros arbitrarios mediante secuencias .. (punto punto) en el parámetro what"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0:*:*:*:*:*:*:*","matchCriteriaId":"61A423F0-91C8-48C9-A6B1-46DBB1A31DC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"59384A5A-F530-4417-8AFB-005EE4A54A44"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"85CFC048-C7C5-47E6-A7E9-E1ED99142493"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"120A58AE-69B7-426D-947D-9C0D9D9CE1E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8E1CEFBE-9194-4350-9F81-2EA6EDF52AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"980AC0DB-2759-49D3-8347-C119AFFF8DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CABC8407-173D-466B-B366-5F7F5D9F2F14"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D2743D-5B67-4D6A-9A03-FCF9EA4534A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2C2535BF-A7BE-40DD-9582-0DE66B8FDC2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"F666B78D-5DC9-4256-8A23-A4021AE7044A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"096B01B4-3CD4-4CB4-8528-D1DB0D0BFB44"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"229DE8B7-489B-4848-B1BE-2339CB771573"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D9BC58E6-CA26-4760-A6A4-D65184A50539"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"ACE7C97E-60C6-417F-86F7-963ADE52A895"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_pre1:*:*:*:*:*:*:*","matchCriteriaId":"3FF189AE-9485-4F8C-AAAE-25088DF6F964"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc1:*:*:*:*:*:*:*","matchCriteriaId":"560BC57D-BDCE-4479-9847-6DB53A89FFD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc2:*:*:*:*:*:*:*","matchCriteriaId":"4859644F-E5FF-4AE4-B16D-CC2243964D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.2_rc3:*:*:*:*:*:*:*","matchCriteriaId":"FD44FE0C-C9A5-4B2E-AE71-CFDE406DCA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C3DE653E-E7FF-4DE0-A7C8-CC86C95550F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"48888218-B238-4F0D-A4C2-E9877D3F3A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"A393256A-A5BE-4467-8058-E9CA5D626D59"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9C4839-2356-4630-BDB3-4A0171F3A785"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"22C55462-6370-45B3-8F00-50F4502981F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"18BBE005-1FEC-4178-A6A0-CAAB148948F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"6D2E7577-5F89-4B2C-9C28-A5268B539968"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"929F5CD6-51F3-42CF-8BA8-579120DD835D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*","matchCriteriaId":"0F86B56F-510F-4C6F-A259-6200DC2B05ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"92B58A87-7A30-494D-9A9A-AF9FE6E59600"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"F56E2F91-DC93-4FF0-AFF2-DBB5E13B467D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107582619125932&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10769","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200402-05.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=350228","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3800","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/relnotes.php?rel=0","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9564","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15021","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107582619125932&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200402-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=350228","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/relnotes.php?rel=0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0130","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the required username or password parameters, which causes the information to be leaked in an error message."},{"lang":"es","value":"login.php en phpGedView 2.65 y anteriores permite a atacantes remotos obtener información sensible mediante una petición HTTP a login.php sin los parámetros requeridos de nombre de usaurio y contraseña, lo que hace que se filtre información en el mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgedview:phpgedview:*:*:*:*:*:*:*:*","versionEndIncluding":"2.65","matchCriteriaId":"C05501C0-BAF9-483E-A9CF-5F46D14E88FA"}]}]}],"references":[{"url":"http://securitytracker.com/alerts/2004/Jan/1008844.html","source":"cve@mitre.org"},{"url":"http://www.netvigilance.com/advisory0001","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6886","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/unixfocus/5NP0M1PBPQ.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15128","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Jan/1008844.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.netvigilance.com/advisory0001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/unixfocus/5NP0M1PBPQ.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15128","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0131","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Status-Type attribute without a value and no Acct-Session-Id attribute, which causes a null dereference."},{"lang":"es","value":"La función rad_print_request en logger.c del demonio GNU Radius (radiusd) anteriores a 1.2 permite a atacantes remotos causar una denegación de servicio (caída) mediante un paquete UDP con un atributo Acct-Status-Type sin ningún valor, lo que causar una desreferencia nula."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5C1B4923-F65D-4D51-944B-B63283FBAD13"}]}]}],"references":[{"url":"http://ftp.gnu.org/gnu/radius/radius-1.2.tar.gz","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10799","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=71&type=vulnerabilities&flashstatus=true","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/277396","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3824","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9578","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15046","source":"cve@mitre.org"},{"url":"http://ftp.gnu.org/gnu/radius/radius-1.2.tar.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=71&type=vulnerabilities&flashstatus=true","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/277396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0132","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote web server, as demonstrated using (1) the GLOBALS[rootdp] parameter to db.php, or (2) the GLOBALS[language_home] parameter to archivednews.php, and a malicious version of lang_admin.php."},{"lang":"es","value":"Múltiples vulnerabilidades de inclusión remota de archivo en PHP en ezContents 2.0.2 y anteriores permite a atacantes remotos ejecutar código PHP de su elección de un servidor web remoto, como se ha demostrado usando:\r\nel parámetro GLOBALS[rootdp] de db.php, o\r\nel parámetro GLOBALS[language_home] de archivednews.php, y una versión maliciosa de lang_admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:1.40:*:*:*:*:*:*:*","matchCriteriaId":"34986CA0-5D4E-44D6-849D-5CBD2820B5B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:1.41:*:*:*:*:*:*:*","matchCriteriaId":"8F7F91E9-7863-44A5-AAAA-94907D0F663E"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:1.42:*:*:*:*:*:*:*","matchCriteriaId":"BA801A12-208E-46CA-9383-C2DA34A80F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:1.43:*:*:*:*:*:*:*","matchCriteriaId":"FAB18C7A-9D55-4EA4-B99D-7D7186B467C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:1.44:*:*:*:*:*:*:*","matchCriteriaId":"E26C0400-4845-44A3-9148-4B50F8F3D683"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:1.45:*:*:*:*:*:*:*","matchCriteriaId":"262D91DB-DED7-42D4-801A-F51FDB4E01EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:1.45b:*:*:*:*:*:*:*","matchCriteriaId":"41C51865-7F1F-4F8A-9F83-8DF13A9B4BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"28F49C85-8B17-4C92-8E35-E85FCF7D3505"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"3FBB7052-B779-4D85-B639-45DB66407F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"E37437DA-042E-4CAD-BA11-108614D8B482"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"2DF24859-8646-41ED-9EF9-A7B4EA5EE9D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:visualshapers:ezcontents:2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"C9407F37-8477-4B05-99C5-4ADD24A33F9F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107651585921958&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15135","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107651585921958&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0133","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by reading the raw device."},{"lang":"es","value":"El código del sistema de ficheros XFS en Linux 2.4.x tiene una fuga de información en la cual datas de memoria son escritos en el dispositivo de un sistema de ficheros ext3, lo que permite a usuarios locales obtener información sensible leyendo el dispositivo directamente (raw)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108213675028441&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11362","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:029","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10151","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15901","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108213675028441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11362","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0134","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cpr (libcpr) in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while restarting the checkpointed process."},{"lang":"es","value":"cpr (libcpr) en SGI IRIX anteriores a 6.5.25 permite a usuarios locales ganar privilegios cargando una librería suminstrada por el usuario mientras se reinicia el proceso con punto de comprobación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"199F4D8C-2FB9-4AF7-B7A3-339513665616"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:3.3:*:*:*:*:*:*:*","matchCriteriaId":"41D0212C-EA41-4DF3-9A93-4559545BCD7B"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3567046C-FE3F-424D-A1B0-D7A43D00B79F"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"40511481-CD42-4EB7-BE2A-7A78964B7D3B"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D926CDA1-AF2B-4DED-93AE-8F12091E0B23"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"536CB843-5FF6-4BC1-A6DA-92A8CB69D6D4"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E0B4722F-1FBA-4A73-BF85-5920B94F833D"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"B7FD1CEC-9064-483C-A3C2-04E3C50EFBEE"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"05B1518A-9BBC-4CDB-8338-4DCC9A1A91D0"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C26983FB-6FD7-4938-8025-E535A6505ADF"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"52D01CD7-CE53-44D6-82C6-C72579BA089C"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"73F04863-29CB-4E0C-838B-1C23E25C129C"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0.4t:*:*:*:*:*:*:*","matchCriteriaId":"79AA794C-C18F-48A4-ADCB-DC219DF259CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"4D4B36C0-D3FF-4B33-B810-DB920062480B"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0.5_iop:*:*:*:*:*:*:*","matchCriteriaId":"C03CED73-9451-4DE4-A00A-7EAB24424CC6"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0.5_ipr:*:*:*:*:*:*:*","matchCriteriaId":"29446761-8ACE-4E05-82C3-3FF77C1E2CCB"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"20B3C51E-DE28-4B50-B841-31CCFEA88A1C"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0.5b:*:*:*:*:*:*:*","matchCriteriaId":"B6930817-C758-4FC3-A3C2-CD08964C6D2E"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0.5e:*:*:*:*:*:*:*","matchCriteriaId":"7CC66EB2-FFC7-4EF1-9591-A5C5E1E7C919"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0.5f:*:*:*:*:*:*:*","matchCriteriaId":"85D02672-84E9-4036-8ED8-FE6EF4D7E275"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0.5g:*:*:*:*:*:*:*","matchCriteriaId":"646483C9-6FFC-46FE-B9CD-40D733FABFD0"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:4.0.5h:*:*:*:*:*:*:*","matchCriteriaId":"C6B71C71-FA29-4B4C-831C-63AE2797BA2F"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*","matchCriteriaId":"92BF03B6-9CDC-4161-9C1C-3E73582C3D83"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*","matchCriteriaId":"D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.2f:*:*:*:*:*:*:*","matchCriteriaId":"BB113626-38E2-4C42-A6A9-4BBDA0AC4A96"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:*","matchCriteriaId":"772E3C7E-9947-414F-8642-18653BB048E0"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*","matchCriteriaId":"8D51EC29-8836-4F87-ABF8-FF7530DECBB1"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*","matchCriteriaId":"518B7253-7B0F-4A0A-ADA7-F3E3B5AAF877"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.4f:*:*:*:*:*:*:*","matchCriteriaId":"3CEC8518-4DBA-43AA-90B8-279F2DD4A2DB"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.4m:*:*:*:*:*:*:*","matchCriteriaId":"3F8286F3-DF0E-4D8E-A27D-0C5182D5870C"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.5f:*:*:*:*:*:*:*","matchCriteriaId":"B306EE13-57CF-43A6-AA72-C641C53A2A23"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.5m:*:*:*:*:*:*:*","matchCriteriaId":"6291BEE1-73D2-4976-B065-E135880F73B4"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.6f:*:*:*:*:*:*:*","matchCriteriaId":"621C31D9-8102-4F2D-8008-B32020F0B831"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.6m:*:*:*:*:*:*:*","matchCriteriaId":"3FF5E9B8-62F9-4A6F-9C0C-551980981366"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.7f:*:*:*:*:*:*:*","matchCriteriaId":"F883CF73-CDA0-4B50-98E6-1B5DE0A4A816"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.7m:*:*:*:*:*:*:*","matchCriteriaId":"C6C9F200-68AC-4B45-8AFC-F604429FDF3F"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.8f:*:*:*:*:*:*:*","matchCriteriaId":"1742BF2B-63C7-441D-9A01-DE65C95911D4"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.8m:*:*:*:*:*:*:*","matchCriteriaId":"D30B7C42-CEE8-4377-957C-BCCE35C071A6"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.9f:*:*:*:*:*:*:*","matchCriteriaId":"B859D7F7-B0A6-4148-8146-F651ED3F99AA"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.9m:*:*:*:*:*:*:*","matchCriteriaId":"59EC5B1A-309A-4DE2-A197-F4DC07A8DC3D"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.10f:*:*:*:*:*:*:*","matchCriteriaId":"0E7D3C74-CDD2-4DFF-A331-007E1669752A"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.10m:*:*:*:*:*:*:*","matchCriteriaId":"03FA10EA-F6E5-4A89-AC37-40FF6A147528"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.11f:*:*:*:*:*:*:*","matchCriteriaId":"7C8E0DF6-D9C2-4DBC-9997-B5BFC6DEC9F9"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.11m:*:*:*:*:*:*:*","matchCriteriaId":"D1E1480B-2183-45AD-B63F-16DEC9BF0398"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.12f:*:*:*:*:*:*:*","matchCriteriaId":"2D08345C-F945-410C-9DCB-8C358178F975"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.12m:*:*:*:*:*:*:*","matchCriteriaId":"8764BE36-9377-486C-9198-DF79A5A60679"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.13f:*:*:*:*:*:*:*","matchCriteriaId":"25243FA1-7AF7-41D4-8FAD-A5AB289E120D"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*","matchCriteriaId":"94D89730-AA61-4FC9-A6AB-0574CA51EE75"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*","matchCriteriaId":"A7B59E7C-B059-41CD-AE33-E9623ADA12BC"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*","matchCriteriaId":"72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.16f:*:*:*:*:*:*:*","matchCriteriaId":"27532639-37CD-4BD2-AE48-F741009D3449"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.16m:*:*:*:*:*:*:*","matchCriteriaId":"F83879DE-1BD7-4FF7-ACC6-5B119DB09BF9"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.17:*:*:*:*:*:*:*","matchCriteriaId":"8BE3F77A-909E-4947-A808-BCAB7F96A108"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.17f:*:*:*:*:*:*:*","matchCriteriaId":"EED22734-8AAC-4897-BB71-438E19B8A005"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*","matchCriteriaId":"FEA9C28F-18E6-4199-9740-FAB00563EBF7"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.18:*:*:*:*:*:*:*","matchCriteriaId":"A4F1E3C7-0FDD-46E1-8748-6A5FF669C95C"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.18f:*:*:*:*:*:*:*","matchCriteriaId":"C6E63313-9533-478D-ACC0-C050FBA3EACF"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.18m:*:*:*:*:*:*:*","matchCriteriaId":"EA0A7D5D-BDD9-45F8-9BE7-3B01D70C8CC1"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.19:*:*:*:*:*:*:*","matchCriteriaId":"2334FD6C-444F-4042-AF6D-D654C18C9950"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.19f:*:*:*:*:*:*:*","matchCriteriaId":"61370032-AB21-4E93-B143-A92A342AFB1A"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.19m:*:*:*:*:*:*:*","matchCriteriaId":"C833FC19-D913-4C62-B14A-E1B3845D0275"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.20:*:*:*:*:*:*:*","matchCriteriaId":"1EFCB9A7-9121-4FAE-B6FA-96C3A023ACEF"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.20f:*:*:*:*:*:*:*","matchCriteriaId":"B90188D6-6C57-45C2-B266-50D65B4D33E4"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.20m:*:*:*:*:*:*:*","matchCriteriaId":"39DD839E-159B-43FD-A1E6-A22EE658BEE0"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.21:*:*:*:*:*:*:*","matchCriteriaId":"E2C1514F-A4DD-462C-9955-2AD8CF5B7F14"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.21f:*:*:*:*:*:*:*","matchCriteriaId":"CE9CF799-3B52-4694-A706-37FA08EC9ABF"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.21m:*:*:*:*:*:*:*","matchCriteriaId":"4E5A5AD7-F8AD-448F-8125-ACB0E7BA0A4B"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.22:*:*:*:*:*:*:*","matchCriteriaId":"C63CC83D-BF18-42BF-A5DF-3516508B072F"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.22m:*:*:*:*:*:*:*","matchCriteriaId":"797C8D1C-70F7-4AE8-BD9B-3465973D9427"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.23:*:*:*:*:*:*:*","matchCriteriaId":"D61194B2-4636-44BC-87A7-B8B29D0E17F6"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.24:*:*:*:*:*:*:*","matchCriteriaId":"0FA0AC9C-D99E-4DF5-B3F6-EF3E5A9602B0"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5_20:*:*:*:*:*:*:*","matchCriteriaId":"E6C44E34-E074-4FB6-943D-547082A50126"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040507-01-P.asc","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10418","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16259","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040507-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16259","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0135","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The syssgi SGI_IOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel memory."},{"lang":"es","value":"La llamada de sistema syssgi SGI_IOPROVE en IRIX 6.5.20 a 6.5.24 permite a usuarios locales ganar privilegios leyendo y escribiendo en la memoria del kernel."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.2:*:*:*:*:*:*:*","matchCriteriaId":"199F4D8C-2FB9-4AF7-B7A3-339513665616"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3:*:*:*:*:*:*:*","matchCriteriaId":"41D0212C-EA41-4DF3-9A93-4559545BCD7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3567046C-FE3F-424D-A1B0-D7A43D00B79F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"40511481-CD42-4EB7-BE2A-7A78964B7D3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"D926CDA1-AF2B-4DED-93AE-8F12091E0B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0:*:*:*:*:*:*:*","matchCriteriaId":"536CB843-5FF6-4BC1-A6DA-92A8CB69D6D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E0B4722F-1FBA-4A73-BF85-5920B94F833D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.1t:*:*:*:*:*:*:*","matchCriteriaId":"B7FD1CEC-9064-483C-A3C2-04E3C50EFBEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"05B1518A-9BBC-4CDB-8338-4DCC9A1A91D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C26983FB-6FD7-4938-8025-E535A6505ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"52D01CD7-CE53-44D6-82C6-C72579BA089C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.4b:*:*:*:*:*:*:*","matchCriteriaId":"73F04863-29CB-4E0C-838B-1C23E25C129C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.4t:*:*:*:*:*:*:*","matchCriteriaId":"79AA794C-C18F-48A4-ADCB-DC219DF259CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"4D4B36C0-D3FF-4B33-B810-DB920062480B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5_iop:*:*:*:*:*:*:*","matchCriteriaId":"C03CED73-9451-4DE4-A00A-7EAB24424CC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5_ipr:*:*:*:*:*:*:*","matchCriteriaId":"29446761-8ACE-4E05-82C3-3FF77C1E2CCB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"20B3C51E-DE28-4B50-B841-31CCFEA88A1C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5b:*:*:*:*:*:*:*","matchCriteriaId":"B6930817-C758-4FC3-A3C2-CD08964C6D2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5e:*:*:*:*:*:*:*","matchCriteriaId":"7CC66EB2-FFC7-4EF1-9591-A5C5E1E7C919"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5f:*:*:*:*:*:*:*","matchCriteriaId":"85D02672-84E9-4036-8ED8-FE6EF4D7E275"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5g:*:*:*:*:*:*:*","matchCriteriaId":"646483C9-6FFC-46FE-B9CD-40D733FABFD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:4.0.5h:*:*:*:*:*:*:*","matchCriteriaId":"C6B71C71-FA29-4B4C-831C-63AE2797BA2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0:*:*:*:*:*:*:*","matchCriteriaId":"D792E16B-A1AB-4BCE-9E6E-88C17D4F57CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30F950B1-7D5F-4CA9-BBEF-E6DB1A28C156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"333103D5-71B8-4DC1-90F7-15F2841955D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8A889C10-0637-4133-AFBD-533C8397BE89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"E292DA15-91BF-4957-9C0F-A69518538BED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"26144F94-63FD-4907-B548-09B68C2FC9B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:5.3:*:xfs:*:*:*:*:*","matchCriteriaId":"92BF03B6-9CDC-4161-9C1C-3E73582C3D83"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0:*:*:*:*:*:*:*","matchCriteriaId":"26309EFA-0991-46B6-9818-F0FBB902D5F5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A81ED6-CE92-4C10-AA2B-AB9AF573D120"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.0.1:*:xfs:*:*:*:*:*","matchCriteriaId":"D157E1C1-F82B-4FDF-9ADB-5571B75E7D6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.1:*:*:*:*:*:*:*","matchCriteriaId":"966C1A13-8007-408D-96BE-0DA3BB6CA401"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0ECE564D-B4BB-4C05-88CC-CDC3F8E4E366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.3:*:*:*:*:*:*:*","matchCriteriaId":"B2D59247-56FA-46B4-BB51-2DAE71AFC145"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.4:*:*:*:*:*:*:*","matchCriteriaId":"15BE08F8-5F3F-45DB-BFE0-1F6F2F57A4D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2f:*:*:*:*:*:*:*","matchCriteriaId":"BB113626-38E2-4C42-A6A9-4BBDA0AC4A96"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:*","matchCriteriaId":"772E3C7E-9947-414F-8642-18653BB048E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*","matchCriteriaId":"8D51EC29-8836-4F87-ABF8-FF7530DECBB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*","matchCriteriaId":"518B7253-7B0F-4A0A-ADA7-F3E3B5AAF877"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4f:*:*:*:*:*:*:*","matchCriteriaId":"3CEC8518-4DBA-43AA-90B8-279F2DD4A2DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4m:*:*:*:*:*:*:*","matchCriteriaId":"3F8286F3-DF0E-4D8E-A27D-0C5182D5870C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5f:*:*:*:*:*:*:*","matchCriteriaId":"B306EE13-57CF-43A6-AA72-C641C53A2A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5m:*:*:*:*:*:*:*","matchCriteriaId":"6291BEE1-73D2-4976-B065-E135880F73B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6f:*:*:*:*:*:*:*","matchCriteriaId":"621C31D9-8102-4F2D-8008-B32020F0B831"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6m:*:*:*:*:*:*:*","matchCriteriaId":"3FF5E9B8-62F9-4A6F-9C0C-551980981366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7f:*:*:*:*:*:*:*","matchCriteriaId":"F883CF73-CDA0-4B50-98E6-1B5DE0A4A816"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7m:*:*:*:*:*:*:*","matchCriteriaId":"C6C9F200-68AC-4B45-8AFC-F604429FDF3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8f:*:*:*:*:*:*:*","matchCriteriaId":"1742BF2B-63C7-441D-9A01-DE65C95911D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8m:*:*:*:*:*:*:*","matchCriteriaId":"D30B7C42-CEE8-4377-957C-BCCE35C071A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9f:*:*:*:*:*:*:*","matchCriteriaId":"B859D7F7-B0A6-4148-8146-F651ED3F99AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9m:*:*:*:*:*:*:*","matchCriteriaId":"59EC5B1A-309A-4DE2-A197-F4DC07A8DC3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10f:*:*:*:*:*:*:*","matchCriteriaId":"0E7D3C74-CDD2-4DFF-A331-007E1669752A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10m:*:*:*:*:*:*:*","matchCriteriaId":"03FA10EA-F6E5-4A89-AC37-40FF6A147528"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11f:*:*:*:*:*:*:*","matchCriteriaId":"7C8E0DF6-D9C2-4DBC-9997-B5BFC6DEC9F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11m:*:*:*:*:*:*:*","matchCriteriaId":"D1E1480B-2183-45AD-B63F-16DEC9BF0398"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12f:*:*:*:*:*:*:*","matchCriteriaId":"2D08345C-F945-410C-9DCB-8C358178F975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12m:*:*:*:*:*:*:*","matchCriteriaId":"8764BE36-9377-486C-9198-DF79A5A60679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13f:*:*:*:*:*:*:*","matchCriteriaId":"25243FA1-7AF7-41D4-8FAD-A5AB289E120D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*","matchCriteriaId":"94D89730-AA61-4FC9-A6AB-0574CA51EE75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*","matchCriteriaId":"A7B59E7C-B059-41CD-AE33-E9623ADA12BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*","matchCriteriaId":"72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16f:*:*:*:*:*:*:*","matchCriteriaId":"27532639-37CD-4BD2-AE48-F741009D3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16m:*:*:*:*:*:*:*","matchCriteriaId":"F83879DE-1BD7-4FF7-ACC6-5B119DB09BF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17:*:*:*:*:*:*:*","matchCriteriaId":"8BE3F77A-909E-4947-A808-BCAB7F96A108"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17f:*:*:*:*:*:*:*","matchCriteriaId":"EED22734-8AAC-4897-BB71-438E19B8A005"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*","matchCriteriaId":"FEA9C28F-18E6-4199-9740-FAB00563EBF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18:*:*:*:*:*:*:*","matchCriteriaId":"A4F1E3C7-0FDD-46E1-8748-6A5FF669C95C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18f:*:*:*:*:*:*:*","matchCriteriaId":"C6E63313-9533-478D-ACC0-C050FBA3EACF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18m:*:*:*:*:*:*:*","matchCriteriaId":"EA0A7D5D-BDD9-45F8-9BE7-3B01D70C8CC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19:*:*:*:*:*:*:*","matchCriteriaId":"2334FD6C-444F-4042-AF6D-D654C18C9950"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19f:*:*:*:*:*:*:*","matchCriteriaId":"61370032-AB21-4E93-B143-A92A342AFB1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19m:*:*:*:*:*:*:*","matchCriteriaId":"C833FC19-D913-4C62-B14A-E1B3845D0275"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20:*:*:*:*:*:*:*","matchCriteriaId":"1EFCB9A7-9121-4FAE-B6FA-96C3A023ACEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20f:*:*:*:*:*:*:*","matchCriteriaId":"B90188D6-6C57-45C2-B266-50D65B4D33E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20m:*:*:*:*:*:*:*","matchCriteriaId":"39DD839E-159B-43FD-A1E6-A22EE658BEE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21:*:*:*:*:*:*:*","matchCriteriaId":"E2C1514F-A4DD-462C-9955-2AD8CF5B7F14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21f:*:*:*:*:*:*:*","matchCriteriaId":"CE9CF799-3B52-4694-A706-37FA08EC9ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21m:*:*:*:*:*:*:*","matchCriteriaId":"4E5A5AD7-F8AD-448F-8125-ACB0E7BA0A4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.22:*:*:*:*:*:*:*","matchCriteriaId":"C63CC83D-BF18-42BF-A5DF-3516508B072F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.22m:*:*:*:*:*:*:*","matchCriteriaId":"797C8D1C-70F7-4AE8-BD9B-3465973D9427"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.23:*:*:*:*:*:*:*","matchCriteriaId":"D61194B2-4636-44BC-87A7-B8B29D0E17F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.24:*:*:*:*:*:*:*","matchCriteriaId":"0FA0AC9C-D99E-4DF5-B3F6-EF3E5A9602B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5_20:*:*:*:*:*:*:*","matchCriteriaId":"E6C44E34-E074-4FB6-943D-547082A50126"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040601-01-P.asc","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11872","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7122","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16413","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040601-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0136","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system crash) via a \"corrupted binary.\""},{"lang":"es","value":"La llamada a la función mapelf32exec en IRIX 6.5.20 6.5.24 permite a usuarios locales causar una denegación de servicio (caída del sistema) mediante un \"binario corrupto\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20f:*:*:*:*:*:*:*","matchCriteriaId":"B90188D6-6C57-45C2-B266-50D65B4D33E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20m:*:*:*:*:*:*:*","matchCriteriaId":"39DD839E-159B-43FD-A1E6-A22EE658BEE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21f:*:*:*:*:*:*:*","matchCriteriaId":"CE9CF799-3B52-4694-A706-37FA08EC9ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21m:*:*:*:*:*:*:*","matchCriteriaId":"4E5A5AD7-F8AD-448F-8125-ACB0E7BA0A4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.22:*:*:*:*:*:*:*","matchCriteriaId":"C63CC83D-BF18-42BF-A5DF-3516508B072F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.23:*:*:*:*:*:*:*","matchCriteriaId":"D61194B2-4636-44BC-87A7-B8B29D0E17F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.24:*:*:*:*:*:*:*","matchCriteriaId":"0FA0AC9C-D99E-4DF5-B3F6-EF3E5A9602B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.25:*:*:*:*:*:*:*","matchCriteriaId":"6D5F652E-F7FB-4CA5-8434-B65F02C94976"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040601-01-P.asc","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11872","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7123","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10547","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16416","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040601-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16416","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0137","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in init for IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system panic) as a result of \"page invalidation issues.\""},{"lang":"es","value":"Vulnerabilidad desconocida en init de IRIX 6.5.20 A 6.5.24 permite a usuarios locales causar una denegación de servicio (pánico de sistema) como resultado de \"problemas con invalidación de página\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20f:*:*:*:*:*:*:*","matchCriteriaId":"B90188D6-6C57-45C2-B266-50D65B4D33E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20m:*:*:*:*:*:*:*","matchCriteriaId":"39DD839E-159B-43FD-A1E6-A22EE658BEE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21f:*:*:*:*:*:*:*","matchCriteriaId":"CE9CF799-3B52-4694-A706-37FA08EC9ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21m:*:*:*:*:*:*:*","matchCriteriaId":"4E5A5AD7-F8AD-448F-8125-ACB0E7BA0A4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.22:*:*:*:*:*:*:*","matchCriteriaId":"C63CC83D-BF18-42BF-A5DF-3516508B072F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.23:*:*:*:*:*:*:*","matchCriteriaId":"D61194B2-4636-44BC-87A7-B8B29D0E17F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.24:*:*:*:*:*:*:*","matchCriteriaId":"0FA0AC9C-D99E-4DF5-B3F6-EF3E5A9602B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.25:*:*:*:*:*:*:*","matchCriteriaId":"6D5F652E-F7FB-4CA5-8434-B65F02C94976"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040601-01-P.asc","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11872","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7124","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10549","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16417","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040601-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0138","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service (crash) via a crafted ELF file with an interpreter with an invalid arch (architecture), which triggers a BUG() when an invalid VMA is unmapped."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"}]}]}],"references":[{"url":"http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.25","source":"cve@mitre.org"},{"url":"http://linux.bkbits.net:8080/linux-2.4/cset%404021346f79nBb-4X_usRikR3Iyb4Vg","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20162","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20163","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20202","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20338","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-504.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-549.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/18174","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43124","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10123","source":"cve@mitre.org"},{"url":"http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.25","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.bkbits.net:8080/linux-2.4/cset%404021346f79nBb-4X_usRikR3Iyb4Vg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-549.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/18174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0143","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities in Nokia 6310(i) Mobile phones allow remote attackers to cause a denial of service (reset) via malformed Bluetooth OBject EXchange (OBEX) messages, probably triggering buffer overflows."},{"lang":"es","value":"Múltiples vulnerabilidades en teléfonos móviles Nokia 6310(i) permite a atacantes remotos causar una denegación de servicio (reinicio) mediante mensajes OBject EXchange (OBEX) de Bluetooth, posiblemente disparando desbordamientos de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nokia:6310i:*:*:*:*:*:*:*:*","matchCriteriaId":"50037CE8-F026-4BA7-8316-B1E438E0CBFA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0034.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107634788029065&w=2","source":"cve@mitre.org"},{"url":"http://www.pentest.co.uk/documents/ptl-2004-01.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9603","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15107","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107634788029065&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pentest.co.uk/documents/ptl-2004-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0148","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead."},{"lang":"es","value":"wu-ftpd 2.6.2 y anteriores, con la opción restricted-gid activada, permite a usuarios locales saltarse restricciones de acceso cambiando los permisos para impedir el acceso a su directorio home, lo que hace que wu-ftpd use el directorio raíz en su lugar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"28E5257A-F5ED-482C-9A0B-3B576513E7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta2:*:academ:*:*:*:*:*","matchCriteriaId":"833542E5-B4E7-4995-95C9-E012AE13902D"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18:*:academ:*:*:*:*:*","matchCriteriaId":"C63ACBE3-5BB2-483E-A5FE-87698E98354A"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr4:*:*:*:*:*:*:*","matchCriteriaId":"B39D46C4-B153-4301-AE9C-57FB6BA64CD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr5:*:*:*:*:*:*:*","matchCriteriaId":"E55582DD-DEF7-4BF8-950C-E7E58BD29DE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr6:*:*:*:*:*:*:*","matchCriteriaId":"FF9B9132-19A1-4242-A129-E5A49F466EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr7:*:*:*:*:*:*:*","matchCriteriaId":"4B9E32F3-06CF-482D-8313-3D098CDE8B6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr8:*:*:*:*:*:*:*","matchCriteriaId":"0A096214-84AD-44F5-BBEF-F9F17B9B0C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr9:*:*:*:*:*:*:*","matchCriteriaId":"4989799F-143A-45E5-A30C-9E3203649770"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr10:*:*:*:*:*:*:*","matchCriteriaId":"1E3D0CC6-D1A0-4784-BE93-319C7EE59134"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr11:*:*:*:*:*:*:*","matchCriteriaId":"4FA32489-F098-43D2-80B7-89CFE0BE9A3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr12:*:*:*:*:*:*:*","matchCriteriaId":"91C6388E-464B-4562-BC7B-7B4A66387B30"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr13:*:*:*:*:*:*:*","matchCriteriaId":"923B5711-853D-4A77-8FB3-D5C3D449518D"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr14:*:*:*:*:*:*:*","matchCriteriaId":"9BB1B136-F90E-426B-8010-F2D059E89DBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_beta18_vr15:*:*:*:*:*:*:*","matchCriteriaId":"CD9EFCD7-2A13-420E-B6A0-C1248B2E6E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_vr16:*:*:*:*:*:*:*","matchCriteriaId":"573486C8-0349-4BC9-AD7D-3FBF93DDB6AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.4.2_vr17:*:*:*:*:*:*:*","matchCriteriaId":"CAD81A30-9C35-4EEA-B6FE-A4AC76893AC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"473E71DD-F779-4F93-838A-AD6768BB8DFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"C5E9B738-E8DF-4FE7-B4A5-91DE46A9CF8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7196CF2D-8CCC-454A-A2C1-6408A9D636C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"D851CEBD-4FE5-46D9-99BD-CA3F3235B2E6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108999466902690&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11055","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20168","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102356-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-457","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.frsirt.com/english/advisories/2006/1867","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-096.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9832","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15423","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1147","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1636","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1637","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A648","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108999466902690&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102356-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.frsirt.com/english/advisories/2006/1867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0149","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in xboing before 2.4 allow local users to gain privileges."},{"lang":"es","value":"Múltiples desbordamientos de búfer en xboing anteriores a 2.4 permite a usuarios locales ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xboing:xboing:2.4:*:*:*:*:*:*:*","matchCriteriaId":"FD4C7B0B-77B1-430C-B694-AB601292D2C4"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-451","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9764","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15347","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0150","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS."},{"lang":"es","value":"Desbordamiento de búfer en getaddrinfo de Python 2.2 permite a atacantes remotos ejecutar código arbitrario mediante una dirección IPv6 obtenida usando DNS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.2","matchCriteriaId":"F186F453-E521-487E-8ADA-1EC726045E7A"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-458","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-03.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:019","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/4172","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9836","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15409","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://www.debian.org/security/2004/dsa-458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/4172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0151","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in xitalk 1.1.11 and earlier allows local users to execute arbitrary commands."},{"lang":"es","value":"Vulnerabilidad desconocida en xitalk 1.1.11 y anteriores permite a usuarios locales ejecutar comandos arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xintercepttalk:xitalk:1.1.11:*:*:*:*:*:*:*","matchCriteriaId":"EE008CAF-CAEE-4A72-8308-8A64AD3265B2"}]}]}],"references":[{"url":"http://secunia.com/advisories/11114/","source":"cve@mitre.org"},{"url":"http://shellcode.org/Advisories/XITALK.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-462","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9851","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15456","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11114/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://shellcode.org/Advisories/XITALK.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0152","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in (1) the encode_mime function, (2) the encode_uuencode function, (3) or the decode_uuencode function for emil 2.1.0 and earlier allow remote attackers to execute arbitrary code via e-mail messages containing attachments with filenames."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en la pila en emil 2.1.0 y anteriores, en las funciones encode_mime function, encode_uuencode function y  decode_uuencode permiten a atacantes remotos ejecutar código arbitrario mediante mensajes de correo electrónico conteniendo adjuntos con nombres de ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emil:emil:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"19208449-414F-4A60-A9BB-A13457828D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:emil:emil:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E1811963-46E8-42C4-A6F8-47414D54E7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:emil:emil:2.1.0_beta9:*:*:*:*:*:*:*","matchCriteriaId":"140BDB5D-FC3C-47DE-A7E4-BE2C82989F6D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108024939827236&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-468","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15601","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108024939827236&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15601","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0153","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in emil 2.1.0 and earlier may allow remote attackers to execute arbitrary code by triggering certain error messages."},{"lang":"es","value":"Múltiples vulnerabilidades de cadena de formato en emil 2.1.0 y anteriores puede permitir a atacantes remotos ejecutar código arbitrario disparando ciertos mensajes de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emil:emil:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"19208449-414F-4A60-A9BB-A13457828D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:emil:emil:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E1811963-46E8-42C4-A6F8-47414D54E7AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:emil:emil:2.1.0_beta9:*:*:*:*:*:*:*","matchCriteriaId":"140BDB5D-FC3C-47DE-A7E4-BE2C82989F6D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108024939827236&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-468","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15602","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108024939827236&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0154","sourceIdentifier":"cve@mitre.org","published":"2004-06-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name."},{"lang":"es","value":"rpc.mountd en nfs-utils posteriores a 1.0.3 y anteriores a 1.0.6 permite a atacantes causar una denegación de servicio (caída) mediante el montaje de un directorio de un cliente cuya consulta DNS inversa es distinta de la consulta directa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0:*:*:*:*:*:*:*","matchCriteriaId":"813B76CA-5083-4697-A484-435113B7FF88"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0964EDA2-D86C-4189-9B03-61A292601649"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2EFD8CFB-A24A-49F0-856C-4B985E203C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D4645DF7-A5C2-4E8D-A07F-22F77670D68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nfs:nfs-utils:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A8616115-30AC-4160-B196-D417AF32C7C7"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-072.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9813","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15418","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A861","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9673","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-072.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.org/errata/misc/2004/TSL-2004-0009-nfs-utils.asc.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9673","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0155","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate."},{"lang":"es","value":"El KAME IKE Daemon Racoon, cuando autentica a un semejante durante la Fase 1, valida el certificado X.509 pero no verifica la autenticación de firma RSA, lo que permite a atacantes remotos establecer conexiones IP  no autorizadas o relizar ataques del tipo \"hombre en el medio\" usando un certificado X.509 válido y de confianza."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kame:racoon:*:*:*:*:*:*:*:*","matchCriteriaId":"E477F0A9-8027-435B-8F99-A15D1D74220A"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108136746911000&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108369640424244&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11328","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-17.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/552398","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:069","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:027","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-165.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10072","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9291","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A945","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108136746911000&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108369640424244&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/552398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-165.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0156","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial of service and possibly execute arbitrary code."},{"lang":"es","value":"Vulnerabilidades de cadena de formato en las funciones (1) die or (2) log_event de ssmtp anteriores a 2.50.6 permite a relés de correo remotos causar una denegación de servicio y posiblemente ejecutar código de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssmtp:ssmtp:*:*:*:*:*:*:*:*","versionEndIncluding":"2.49","matchCriteriaId":"A09DC9AF-1972-4081-8183-65B176EAB8BB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108403772130855&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11378","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11384","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11485","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11571","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200404-18.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009788","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-485","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5360","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5361","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10150","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15872","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108403772130855&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11571","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200404-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15872","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0157","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program."},{"lang":"es","value":"xonix 1.4 y anteriores invoca un programa externo mientras corre con el privilegio setgid, lo que permite a usuarios locales ejecutar código de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xonix:xonix:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4","matchCriteriaId":"B70B149F-9519-46D6-BC4F-5C2316A2D6B8"}]}]}],"references":[{"url":"http://secunia.com/advisories/11382","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009789","source":"cve@mitre.org"},{"url":"http://shellcode.org/Advisories/XONIX.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-484","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5358","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10149","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15873","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://shellcode.org/Advisories/XONIX.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15873","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0158","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, or (7) main.c."},{"lang":"es","value":"Desbordamiento de búfer en lbreakout2 permite a usuarios locales ganar privilegios de grupo \"games\" mediante una variable de entorno HOME larga en (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, o (7) main.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lgames:lbreakout2:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DBAE314A-F0B8-490D-BBC4-B8E687AD56BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:lgames:lbreakout2:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77AF2489-7635-414F-885F-7785A94D808A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lgames:lbreakout2:2.1:*:*:*:*:*:*:*","matchCriteriaId":"C1969388-D2FA-4E90-BCF7-0CDBC6E7BE9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lgames:lbreakout2:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2258E3D3-999F-421E-A281-F163513FD9C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lgames:lbreakout2:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"107E4995-8A57-41BC-9C04-D9F11EE175D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:lgames:lbreakout2:2.2:*:*:*:*:*:*:*","matchCriteriaId":"A135F5E3-5831-40EE-8F63-A9AB0BC879B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lgames:lbreakout2:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DA98DBEA-617A-407C-BC96-7C4D28B503CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:lgames:lbreakout2:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"527284AC-79FE-4203-A7C1-52E3EB293977"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107755821705356&w=2","source":"cve@mitre.org"},{"url":"http://security.debian.org/pool/updates/main/l/lbreakout2/lbreakout2_2.2.2-1woody1.diff.gz","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-445","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9712","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15229","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107755821705356&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.debian.org/pool/updates/main/l/lbreakout2/lbreakout2_2.2.2-1woody1.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15229","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0159","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via file names containing format string characters that are not properly handled when executing an \"ls\" command."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en hsftp 1.11 permite a usuarios remotos autenticados causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante nombres de fichero conteniendo caracteres de formato de cadena que no son manejados adecuadamente cuando se ejecuta el comando \"ls\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:hsftp:1.4:*:*:*:*:*:*:*","matchCriteriaId":"B2639B9F-A135-4616-B8E2-D475FEFE1A2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:hsftp:1.5:*:*:*:*:*:*:*","matchCriteriaId":"91295F68-A7BC-43C6-8788-37C06C419621"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:hsftp:1.6:*:*:*:*:*:*:*","matchCriteriaId":"618581CE-FCFF-4B25-ACD7-97E090CF79F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:hsftp:1.7:*:*:*:*:*:*:*","matchCriteriaId":"7E117A29-5369-4171-A568-CC4FC6BE099F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:hsftp:1.9:*:*:*:*:*:*:*","matchCriteriaId":"CC346867-CEF7-4A70-8054-373C9DFABF32"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:hsftp:1.10:*:*:*:*:*:*:*","matchCriteriaId":"BEB94FFD-24B6-4D3E-AE7D-F6E6DF85CEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:hsftp:1.11:*:*:*:*:*:*:*","matchCriteriaId":"F3E2FA7E-4F33-46AC-B9C3-C2EBBC2FF69A"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017737.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4029","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9715","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15276","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2004/dsa-447","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017737.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2004/dsa-447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0160","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file."},{"lang":"es","value":"Synaesthesia 2.2 y anteriores permite a usuarios locales ejecutar código arbitrario mediante un ataque de enlaces simbólicos en el fichero de configuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:synaesthesia:synaesthesia:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"624C9224-0A76-42FA-B6A5-A3CAD597911B"},{"vulnerable":true,"criteria":"cpe:2.3:a:synaesthesia:synaesthesia:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FDDA1AF9-DFFF-4499-84D0-3E02CA18C641"},{"vulnerable":true,"criteria":"cpe:2.3:a:synaesthesia:synaesthesia:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"94990CB6-D8A9-4D0F-A975-0E581044F5D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:synaesthesia:synaesthesia:2.2:*:*:*:*:*:*:*","matchCriteriaId":"8AFD3B86-A13E-4033-B60C-8FB615A4E989"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-446","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9713","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15279","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15279","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0161","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, which may be interpreted differently by mail clients."},{"lang":"es","value":"Múltiples productos de pasarelas de seguridad de contenidos y antivirus pueden permitir a atacantes remotos saltarse restricciones de contenido mediante mensajes MIME que usan codificicación RFC2231, lo que puede ser interpretado de forma variable por clientes de correo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CA12B965-672C-444D-9774-0F76FE47EA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"E6C9B32C-5EC9-46BD-AA77-F414A143576C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"823C27EB-C00F-4A7E-B832-013A50A1EE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"BD217379-28E7-465E-843D-E7204EE0E89F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.13:*:*:*:*:*:*:*","matchCriteriaId":"EB96CB8A-59F3-4624-B2BA-687ECF929B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.14:*:*:*:*:*:*:*","matchCriteriaId":"04A02C12-547E-4086-A409-53AA68F1A4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.15:*:*:*:*:*:*:*","matchCriteriaId":"8185FBF2-D678-4D90-A5AC-F9B06DFED95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.3:*:*:*:*:*:*:*","matchCriteriaId":"4F4EC2BB-A979-4C37-B8BB-086DAEEB4A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.4:*:*:*:*:*:*:*","matchCriteriaId":"CD53E1BC-6A92-4D7C-BE1F-FEF88F78DBD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*","matchCriteriaId":"AC782BFC-6BA0-4823-8A6D-F7D83F55393C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*","matchCriteriaId":"E1B09025-47B9-4F77-9DA6-80885E9A4EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E021143-608B-44A2-84FB-8F8AC00A9985"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0A9BB1C1-2CB2-426D-A8CE-AF5CB0B98674"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7AC4686E-B92F-47ED-90DA-42AF650521D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"80EF73F0-1FE1-4041-9C07-A89D153DA41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EF45C4F8-A20C-4D7D-B203-AF36FB046C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"75222D1B-1384-4C74-A54F-BC028C5CDB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A5129FD4-C011-4EA9-B8A1-256E95494FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8F33D78C-9CD1-49A6-A43E-D0187600C033"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6D3CF1D-64E1-47DB-8767-EF8DBF4E17AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E725208-BA0C-41D9-BC45-84577A94AAA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A43C3DCC-3298-4D4D-9485-4A3BECB615E9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109524928232568&w=2","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2004/380375/mime.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9274","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109524928232568&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2004/380375/mime.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/9274","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0162","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that uses RFC822 comment fields, which may be interpreted as other fields by mail clients."},{"lang":"es","value":"Múltiples productos de pasarelas de seguridad de contenidos y antivirus pueden permitir a atacantes remotos saltarse restricciones de contenido mediante encapsulación MIME que usa campos de comentarios RFC822, lo que puede ser interpretado como otros campos por clientes de correo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CA12B965-672C-444D-9774-0F76FE47EA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"E6C9B32C-5EC9-46BD-AA77-F414A143576C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"823C27EB-C00F-4A7E-B832-013A50A1EE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"BD217379-28E7-465E-843D-E7204EE0E89F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.13:*:*:*:*:*:*:*","matchCriteriaId":"EB96CB8A-59F3-4624-B2BA-687ECF929B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.14:*:*:*:*:*:*:*","matchCriteriaId":"04A02C12-547E-4086-A409-53AA68F1A4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.15:*:*:*:*:*:*:*","matchCriteriaId":"8185FBF2-D678-4D90-A5AC-F9B06DFED95F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.3:*:*:*:*:*:*:*","matchCriteriaId":"4F4EC2BB-A979-4C37-B8BB-086DAEEB4A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.4:*:*:*:*:*:*:*","matchCriteriaId":"CD53E1BC-6A92-4D7C-BE1F-FEF88F78DBD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*","matchCriteriaId":"AC782BFC-6BA0-4823-8A6D-F7D83F55393C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*","matchCriteriaId":"E1B09025-47B9-4F77-9DA6-80885E9A4EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E021143-608B-44A2-84FB-8F8AC00A9985"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0A9BB1C1-2CB2-426D-A8CE-AF5CB0B98674"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7AC4686E-B92F-47ED-90DA-42AF650521D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"80EF73F0-1FE1-4041-9C07-A89D153DA41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EF45C4F8-A20C-4D7D-B203-AF36FB046C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"75222D1B-1384-4C74-A54F-BC028C5CDB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A5129FD4-C011-4EA9-B8A1-256E95494FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8F33D78C-9CD1-49A6-A43E-D0187600C033"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6D3CF1D-64E1-47DB-8767-EF8DBF4E17AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E725208-BA0C-41D9-BC45-84577A94AAA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A43C3DCC-3298-4D4D-9485-4A3BECB615E9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109517563513776&w=2","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2004/380375/mime.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17332","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109517563513776&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2004/380375/mime.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17332","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0163","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a denial of service (resource exhaustion) by capturing a session and repeatedly replaying the session."},{"lang":"es","value":"Sygate Secure Enterprise (SSE) 3.5MR3 y anteriores no cambian la clave usada para cifrar datos, lo que permite a atacantes remotos causar una denegación de servicio (consumición de recursos) capturando una sesión y reproduciéndola repetidamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sygate_technologies:secure_enterprise:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5mr3","matchCriteriaId":"515F0ECF-71F1-42CA-BA17-6D9FA16D1386"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109215685731675&w=2","source":"cve@mitre.org"},{"url":"http://www.corsaire.com/advisories/c031120-002.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16945","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109215685731675&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.corsaire.com/advisories/c031120-002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0164","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in isakmp_inf.c."},{"lang":"es","value":"El demonio KAME IKE (racoon) no maneja adecuadamente valores de extractos (hash) lo que permite a atacantes remotos borrar certificados mediante (1) un cierto mensaje de borrado que no es manejado adecuadamente en isakmp.c o isakmp_inf.c, o (2) un cierto mensaje INITIAL-CONTACT que no es manejado adecuadamente en isakmp_inf.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kame:racoon:all_versions:*:*:*:*:*:*:*","matchCriteriaId":"BD0D2B64-7A56-4829-A49A-046BF925B302"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-001.txt.asc","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107403331309838&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107411758202662&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9416","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9417","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14117","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14118","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A947","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9737","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-001.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107403331309838&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107411758202662&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9417","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0165","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en el demonio de Protocolo Punto-a-Punto (pppd) 2.4.0 de Mac OS X 10.3.2 y anteriores permite a atacantes remotos leer datos arbitrarios del proceso pppd, incluyendo credenciales de autenticación PAP o CHAP, para ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2004/a022304-1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/841742","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/6822","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9730","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15297","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/2004/a022304-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/841742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/6822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0166","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Safari web browser for Mac OS X 10.2.8 related to \"the display of URLs in the status bar.\""},{"lang":"es","value":"Vulnerabilidad desconocida en el explorador web Safari para Mac OS X 10.2.8 relacionada con la \"visualización\" de URLs en la barra de estado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10959","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/194238","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14993","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/194238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0167","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writeable removable media."},{"lang":"es","value":"DiskArbitration en Mac OS X 10.2.8 y 10.3.2 no inicializa adecuadamente medios extraibles escribibles."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10959","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/578886","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/6824","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9731","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15300","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/578886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/6824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0168","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in CoreFoundation for Mac OS X 10.3.2, related to \"notification logging.\""},{"lang":"es","value":"Vulnerabilidad desconocida en CoreFoundation para Mac OS X 10.3.3, relacionada con \"registro (logging) de notificaciones\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10959/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15299","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10959/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0169","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests with long User-Agent fields, which causes an Assert error to be triggered in the BufferIsFull function."},{"lang":"es","value":"QuickTime Streaming Server en MacOS X 10.2.8 y 10.3.2 permite a atacantes remotos causar una denegación de servicio (caída) mediante peticiones DESCRIBE con campos de User-Agent muy grandes, lo que causa que se dispare un \"error de Aserción\" en la función BufferIsFull"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"74BCDEA0-2F69-4411-98C5-29C3C0533BDE"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=75&type=vulnerabilities","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/460350","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/6826","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6837","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9735","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15291","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=75&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/460350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/6826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15291","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0171","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large number of out-of-sequence TCP packets, which prevents the operating system from creating new connections."},{"lang":"es","value":"FreeBSD 5.1 y anteriores permite a atacantes remotos causar una denegación de servicio (consumición de recursos de búferes de memoria) mediante un gran número de paquetes TCP fuera de secuencia, lo que impide que FreeBSD cree nuevas conexiones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B86C77AB-B8FF-4376-9B4E-C88417396F3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*","matchCriteriaId":"441BE3A0-20F4-4972-B279-19B3DB5FA14D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*","matchCriteriaId":"00EAEA17-033A-4A50-8E39-D61154876D2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:04.tcp.asc","source":"cve@mitre.org"},{"url":"http://lists.seifried.org/pipermail/security/2004-May/003743.html","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=78&type=vulnerabilities","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/395670","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/4124","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9792","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15369","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:04.tcp.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.seifried.org/pipermail/security/2004-May/003743.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=78&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/395670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/4124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15369","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0172","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the search_for_command function of ltrace 0.3.10, if it is installed setuid, could allow local users to execute arbitrary code via a long filename.  NOTE: It is unclear whether there are any packages that install ltrace as a setuid program, so this candidate might be REJECTed."},{"lang":"es","value":"Desbordamiento de búfer basado en el montón en la función search_for_command de ltrace 0.3.10, si instalado con setuid, podría permitir a usuarios locales ejecutar código arbitrario mediante un nombre de fichero largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:juan_cespedes:ltrace:0.3.10:*:*:*:*:*:*:*","matchCriteriaId":"45B981EA-225F-46F9-AD98-3478C4FD9C30"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011600.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011610.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1007896","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/8790","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13389","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011600.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011610.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1007896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/8790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13389","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0173","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files via a URL containing \"..%5C\" (dot dot encoded backslash) sequences."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en Apache 1.3.29 y anteriores, y Apache 2.0.48 y anteriores, cuando se ejecuta sobre Cygwin, permite a atacantes remotos leer ficheros arbitrarios mediante una URL conteniendo secuencias \"..%5C\" (punto punto barra atrás codificada)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:0.8.11:*:*:*:*:*:*:*","matchCriteriaId":"E80E240C-9879-48EC-AC9A-2C1FD5E2DD8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:0.8.14:*:*:*:*:*:*:*","matchCriteriaId":"AF16AF7D-9475-435F-AE36-F16CE8F45A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"06F3141B-2C30-4230-A425-465E235539EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B6D2C9EA-1241-4DE6-A6CD-FCD7EEC9B42D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B5EA86B9-4F86-4ADA-BC6A-4F6E261848F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"CA6523AC-ECC9-4A79-9387-18308FCF9A68"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"BDCBCF0F-63FB-4A03-92F8-FF121083CD85"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4363C07C-179B-4797-947F-7440AD1F2D00"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0AB1AA4A-DF05-445A-858F-39A9CC2892A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AB26F3B0-04F8-43C1-9136-B85932F1C2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"28EC1F94-04F3-490A-8324-1EB60EEBAD4B"}]}]}],"references":[{"url":"http://issues.apache.org/bugzilla/show_bug.cgi?id=26152","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017740.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107765545431387&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10962","source":"cve@mitre.org"},{"url":"http://www.apacheweek.com/issues/04-03-12","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9733","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15293","source":"cve@mitre.org"},{"url":"http://issues.apache.org/bugzilla/show_bug.cgi?id=26152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017740.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107765545431387&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apacheweek.com/issues/04-03-12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15293","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0174","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (blocked new connections) via a \"short-lived connection on a rarely-accessed listening socket.\""},{"lang":"es","value":"Apache anteriores 2.0.49, cuando usa múltiples sockets en escucha en ciertas plataformas, permite a atacantes remotos causar una denegación de servicio (bloqueo de nuevas conexiones) mediante una \"conexión de vida corta en un socket en escucha raramente accedido."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  This issue did not affect Linux.","lastModified":"2006-08-30T00:00:00.000"},{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.49, and 1.3.31:\nhttp://httpd.apache.org/security/vulnerabilities_20.html\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-667"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.49","matchCriteriaId":"51C2F62A-81F4-49AC-B83F-9A0FDF54FF2C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107973894328806&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=108066914830552&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=108369640424244&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=108437852004207&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=108731648532365&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://secunia.com/advisories/11170","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-22.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.apache.org/dist/httpd/CHANGES_1.3","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/132110","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:046","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-405.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9921","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009495.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.529643","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.trustix.org/errata/2004/0027","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15540","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100110","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1982","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=107973894328806&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=108066914830552&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=108369640424244&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=108437852004207&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=108731648532365&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://secunia.com/advisories/11170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.apache.org/dist/httpd/CHANGES_1.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/132110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-405.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009495.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.529643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.trustix.org/errata/2004/0027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0175","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files.  NOTE: this may be a rediscovery of CVE-2000-0992."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en scp de OpenSSH anteriores a 3.4p1 permite a servidores remotos maliciosos sobreescribir ficheros de su eleccion."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*","matchCriteriaId":"580008AC-2667-4708-8F7E-D70416A460EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E05D8E86-EC01-4589-B372-4DEB7845C81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*","matchCriteriaId":"764AD252-CA2F-4A87-BCAA-7747E8C410E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFAA075-4277-4FD8-8A5A-867EEE1BA2F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*","matchCriteriaId":"269BB9F7-55E5-4CB3-8429-C37C7132799F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*","matchCriteriaId":"C6E6F639-31A0-4026-B6D4-51BA79FB1D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0211BCE3-0DED-40BA-8A21-1A97B91F71C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*","matchCriteriaId":"B4EE9E4B-CABC-4EA2-9075-CC23CEB1B0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*","matchCriteriaId":"5AD7BB30-AC79-4153-852C-1053DCF4DE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*","matchCriteriaId":"9E188C66-C8F1-4C13-AAFF-7C83B2A884B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*","matchCriteriaId":"9039BE91-AF0A-41E7-8F9F-15375890E120"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*","matchCriteriaId":"08BCB2EA-DF9D-4853-805B-29FA6274E2B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*","matchCriteriaId":"0F93417F-2498-4576-9F5D-B59F77D39669"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.4:*:*:*:*:*:*:*","matchCriteriaId":"AF3AB42C-B614-4746-99AD-E94140D91BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.4p1:*:*:*:*:*:*:*","matchCriteriaId":"458167E5-9BC2-40BE-AC8A-9761A4F19494"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000831","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17135","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/19243","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-212.shtml","source":"cve@mitre.org"},{"url":"http://www.juniper.net/support/security/alerts/adv59739.txt","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:100","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:191","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_09_kernel.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9550","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-074.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-106.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-165.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-481.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-495.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-562.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-567.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9986","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120147","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16323","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10184","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-212.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.juniper.net/support/security/alerts/adv59739.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2008:191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_09_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9550","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-074.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-106.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-165.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-481.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-495.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-562.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-567.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16323","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10184","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0176","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Ethereal 0.8.13 a 0.10.2 permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante los diseccionadores (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, o (8) TCAP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*","matchCriteriaId":"3240376B-44CB-4BF3-9EA6-05841FE70AF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*","matchCriteriaId":"D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*","matchCriteriaId":"9DC35478-9276-4732-9F0D-13CA958C617C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*","matchCriteriaId":"77000951-EF3E-41D8-8545-497BA3E5C5E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*","matchCriteriaId":"83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CB461B6B-B731-4732-AAD0-191BE50189D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"19961880-D38A-4785-A7C5-879A061119BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"831705D2-C4DE-475F-B908-8859064AFB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"A4622585-20E2-46E9-B773-74729FF22EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E86ADCB6-0940-4CB9-85F1-A7694210FB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"042B6289-D2E2-4369-BB40-EA6EE7025D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"F0A48938-30B8-4403-B08A-177FFCB9054B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"67B81EFD-27C1-411C-AFF3-E5340627E3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"680934CF-7F9B-41E4-AA03-ECD96F477AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"DBCCE368-64E6-4CEC-B068-9B8BA2527289"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"CF5374A4-5194-45FD-895D-B04FDC7E853C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*","matchCriteriaId":"338CEFD7-EBC0-43FB-B482-9A3D0834447E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"136FF83B-2B03-4E5F-95C1-84195BE8392A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108007072215742&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108058005324316&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108213710306260&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11185","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/032004.html","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200403-07.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-511","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00013.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.kb.cert.org/vuls/id/119876","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/125156","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/433596","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/591820","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/644886","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/659140","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/740188","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/864884","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/931588","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:024","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6893","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-136.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-137.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15569","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10187","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A878","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A887","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108007072215742&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108058005324316&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108213710306260&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/032004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200403-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.kb.cert.org/vuls/id/119876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/125156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/433596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/591820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/644886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/659140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/740188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/864884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/931588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-136.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-137.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A887","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0177","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device."},{"lang":"es","value":"El código ext3 en Linux 2.4.x no inicializa adecuadamente bloques de descriptores de diario, lo que causa una fuga de información en la que datos de memoria son escritos en el dispositivo de un sistema de ficheros ext3, lo que permite a usuarios privilegiados obtener porciones de la memoria del kernel leyendo directamente del dispositivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846","source":"cve@mitre.org"},{"url":"http://linux.bkbits.net:8080/linux-2.4/cset%404056b368s6vpJbGWxDD_LhQNYQrdzQ","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108213675028441&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-166.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-121.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-126.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-127.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-479","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-480","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-481","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-482","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-489","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-491","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-495","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:029","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-504.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-505.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-293.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10152","source":"cve@mitre.org"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2336","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15867","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10556","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.bkbits.net:8080/linux-2.4/cset%404056b368s6vpJbGWxDD_LhQNYQrdzQ","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108213675028441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-166.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-121.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-126.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-127.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-505.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-293.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15867","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0178","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The OSS code for the Sound Blaster (sb16) driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certain sample sizes, which allows local users to cause a denial of service (crash) via a sample with an odd number of bytes."},{"lang":"es","value":"El código OSS del controlador de Sound Blaster en Linux 2.4.x no maneja adecuadamente ciertos tamaños de muestreo, lo que permite a usuarios locales causar una denegación de servicio (caída)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846","source":"cve@mitre.org"},{"url":"http://linux.bkbits.net:8080/linux-2.4/cset%40404ce5967rY2Ryu6Z_uNbYh643wuFA","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-121.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-127.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-193.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-479","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-480","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-481","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-482","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-489","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-491","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-495","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:029","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-413.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-437.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9985","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15868","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9427","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linux.bkbits.net:8080/linux-2.4/cset%40404ce5967rY2Ryu6Z_uNbYh643wuFA","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-121.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-127.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-193.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-413.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-437.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0179","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code."},{"lang":"es","value":"Multiples vulenerabilidades de cadena de formato en (1) neon 0.24.4 y anteriores, y otros productos que usan neon incluyendo (2) Cadaver, (3) Subversion, o (4) OpenOffice, permite a servidores remotos WebDAV maliciosos ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webdav:neon:*:*:*:*:*:*:*:*","versionStartIncluding":"0.19.0","versionEndExcluding":"0.24.5","matchCriteriaId":"BA2849E5-AB29-42FB-9FCA-58232AD2212F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*","matchCriteriaId":"FCCAF014-CA2E-4079-971A-FEC7E2D7D7A2"},{"vulnerable":false,"criteria":"cpe:2.3:a:apache:subversion:*:*:*:*:*:*:*:*","matchCriteriaId":"2B974D6F-2565-43DA-86F3-59D976DF7F07"},{"vulnerable":false,"criteria":"cpe:2.3:a:webdav:cadaver:*:*:*:*:*:*:*:*","matchCriteriaId":"BD1C27C4-0DFD-4FC5-AC73-26637F80CC7C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2004-Apr/0002.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2004-Apr/0003.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108213873203477&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108214147022626&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11363","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-01.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-04.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-487","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:032","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/5365","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-157.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-158.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-159.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-160.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/10136","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1552","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1065","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10913","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2004-Apr/0002.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2004-Apr/0003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108213873203477&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108214147022626&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/5365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-157.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-158.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-159.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-160.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/10136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-0180","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:*:*:*:*:*:*:*:*","versionEndIncluding":"1.10","matchCriteriaId":"3F6FCAEE-A0CB-4D8C-A160-F7A1247E9A64"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:07.cvs.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/002_cvs.patch","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108636445031613&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11368","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11371","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11374","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11375","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11377","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11380","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11391","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11400","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11405","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11548","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200404-13.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-486","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:028","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-153.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-154.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.400181","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15864","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1042","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9462","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:07.cvs.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/002_cvs.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108636445031613&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200404-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-153.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-154.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.400181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9462","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0181","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the JFS file system, which allows local users to obtain sensitive information by reading the raw device."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108213675028441&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17002","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:029","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-504.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-663.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10143","source":"cve@mitre.org"},{"url":"http://www.turbolinux.com/security/2004/TLSA-2004-14.txt","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2005/1878","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15902","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10329","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108213675028441&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-663.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.turbolinux.com/security/2004/TLSA-2004-14.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2005/1878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0182","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mailman before 2.0.13 allows remote attackers to cause a denial of service (crash) via an email message with an empty subject field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.12","matchCriteriaId":"764628A5-3961-43E9-92B4-EE6054EA6E90"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-156.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-156.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-0183","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite."},{"lang":"es","value":"TCPDUMP 3.8.1 y anteriores permite a atacantes remotos causar una denegación de servicio (caída) mediante paquetes ISAKMP conteniendo un carga útil de Dorrado con un gran númeo de SPIs, lo que causa una lectura fuera de límites, como se ha demostrado por el paquete de pruebas de protocolo ISAKMP Striker."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8.1","matchCriteriaId":"770A6EDA-10B7-4DB1-B150-A40F015FE3FB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108067265931525&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11258","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/11320","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1009593","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2004/dsa-478","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/240790","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.rapid7.com/advisories/R7-0017.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-219.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10003","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.tcpdump.org/tcpdump-changes.txt","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://www.trustix.org/errata/2004/0015","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1468","source":"cve@mitre.org","tags":["Broken Link","Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15680","source":"cve@mitre.org","tags":["Broken Link","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A972","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9971","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108067265931525&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/11320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1009593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2004/dsa-478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/240790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.rapid7.com/advisories/R7-0017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-219.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.tcpdump.org/tcpdump-changes.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.trustix.org/errata/2004/0015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0184","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite."},{"lang":"es","value":"Desbordamieto de enteros en la función isakmp_id_print de TCPDUMP 3.8.1 y anteriores permite a atacantes remotos causar una denegación de servicio mediante un paquete ISAKMP con una carga útil de identificación con una longitud que se hace menor de 8 durante una conversión de orden de bytes, lo que causa una lectura fuera de límites, como se ha demostrado por el paquete de pruebas de protocolo ISAKMP Striker."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"},{"lang":"en","value":"CWE-191"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*","versionEndIncluding":"3.8.1","matchCriteriaId":"770A6EDA-10B7-4DB1-B150-A40F015FE3FB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108067265931525&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11258","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1009593","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2004/dsa-478","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/492558","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.rapid7.com/advisories/R7-0017.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-219.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10004","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.tcpdump.org/tcpdump-changes.txt","source":"cve@mitre.org","tags":["Release Notes"]},{"url":"http://www.trustix.org/errata/2004/0015","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1468","source":"cve@mitre.org","tags":["Broken Link","Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15679","source":"cve@mitre.org","tags":["Broken Link","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9581","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A976","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108067265931525&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1009593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2004/dsa-478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/492558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.rapid7.com/advisories/R7-0017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-219.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.tcpdump.org/tcpdump-changes.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]},{"url":"http://www.trustix.org/errata/2004/0015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0185","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name."},{"lang":"es","value":"Desbordamiento de búfer en la función skey_challenge en ftpd.c de wu-ftp daemon (wu-ftpd) 2.6.2 permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante una petición s/key (SKEY) con un nombre muy grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:washington_university:wu-ftpd:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"D851CEBD-4FE5-46D9-99BD-CA3F3235B2E6"}]}]}],"references":[{"url":"ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.2/skeychallenge.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://unixpunx.org/txt/exploits_archive/packetstorm/0310-advisories/wuftpd-skey.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.debian.org/security/2004/dsa-457","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-096.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securiteam.com/unixfocus/6X00Q1P8KC.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8893","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13518","source":"cve@mitre.org"},{"url":"ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.2/skeychallenge.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://unixpunx.org/txt/exploits_archive/packetstorm/0310-advisories/wuftpd-skey.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.debian.org/security/2004/dsa-457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securiteam.com/unixfocus/6X00Q1P8KC.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0186","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted."},{"lang":"es","value":"smbmnt en Samba 2.0 y 3.0 para Linux 2.6, cuando se instala con setuid, permite a usuarios locales ganar privilegios de root montando un recurso compartido de Samba que contiene un programa con setuid de root, cuyos atributos no se limpian cuando el recurso compartido es eliminado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0:*:*:*:*:*:*:*","matchCriteriaId":"245628A9-A5DC-403F-A781-7A066E9ECC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F84FB25B-5EA5-48DC-B528-E8CCF714C919"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107636290906296&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107657505718743&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-463","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3916","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9619","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15131","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107636290906296&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107657505718743&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15131","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0187","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2023-11-07T01:56:38.503","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-0185.  Reason: This candidate is a reservation duplicate of CVE-2004-0185.  Notes: All CVE users should reference CVE-2004-0185 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-0188","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long password."},{"lang":"es","value":"Desbordamiento de búfer basado en el montón en Calife 2.8.5 y anteriores puede permitir a usuarios locales ejecutar código arbitrario mediante una contraseña larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:calife:calife:2.8.4_c:*:*:*:*:*:*:*","matchCriteriaId":"A968F785-97F4-4871-8FC1-6E4463CD1D11"},{"vulnerable":true,"criteria":"cpe:2.3:a:calife:calife:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"D5109204-4B0D-4B1B-9D7C-962165CA2F7A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107789737832092&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-461","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9756","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9776","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15335","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107789737832092&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15335","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0189","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"%xx\" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL (\"%00\") character, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists."},{"lang":"es","value":"La función de decodificación de URL \"%xx\" en Squid 2.5STABLE4  y anteriores permite a atacantes remotos saltarse las listas de control de acceso (ACL) url_regex mediante una URL con un carácter nulo (\"%00\"), lo que hace que Squid use sólo un parte de la URL solicitada para compararla con la lista de control de acceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:2.0_patch2:*:*:*:*:*:*:*","matchCriteriaId":"E0AA7680-E004-44AC-9AE9-C0186459C4B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:2.1_patch2:*:*:*:*:*:*:*","matchCriteriaId":"05A4829D-4DC1-4CD2-B136-48719A254EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:2.3_stable5:*:*:*:*:*:*:*","matchCriteriaId":"DCC6CCDC-237A-408E-9CAF-D41EC3A9D45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:2.4:*:*:*:*:*:*:*","matchCriteriaId":"540AA8A9-A4AB-4DB2-B37E-11876348DF3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:2.4_stable7:*:*:*:*:*:*:*","matchCriteriaId":"885123F3-346F-451E-B72A-D0405F0B72E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:2.5_stable3:*:*:*:*:*:*:*","matchCriteriaId":"5F8096AB-99B9-4D08-AA13-6AFF0DD65BD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:2.5_stable4:*:*:*:*:*:*:*","matchCriteriaId":"A356D04A-7882-4A14-AD5F-2079EA0E79C7"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.16/SCOSA-2005.16.txt","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000838","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108084935904110&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200403-11.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-474","source":"cve@mitre.org"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:025","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5916","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-133.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-134.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9778","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2004_1.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15366","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A877","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A941","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.16/SCOSA-2005.16.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108084935904110&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200403-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-474","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-133.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-134.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9778","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.squid-cache.org/Advisories/SQUID-2004_1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A941","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0190","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy, which allows attackers to steal the password and gain privileges."},{"lang":"es","value":"Symantec FireWall/VPN Appliance model 200 registra la contraseña de la página de administración en texto claro, que puede ser guardad en caché en el sistema local del administrador o en un proxy, lo que podría permitir a atacantes robar la contraseña y ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:firewall_vpn_appliance_100:*:*:*:*:*:*:*:*","matchCriteriaId":"E5851263-81A6-40AE-8486-E919D5279CC7"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:firewall_vpn_appliance_200:*:*:*:*:*:*:*:*","matchCriteriaId":"0E0D3199-365E-4D26-8D23-6492832EF096"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:firewall_vpn_appliance_200r:*:*:*:*:*:*:*:*","matchCriteriaId":"5081F382-CC20-4C7B-A3F8-08FAF31012D9"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017414.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107694794031839&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4117","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9784","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15212","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017414.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107694794031839&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15212","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0191","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events."},{"lang":"es","value":"Mozilla 1.4.2 ejecuta eventos de Javascript en el contexto de una nueva página mientras se está cargando, permitiéndolo interactuar con la página anterior (\"documento zombi\") y posibilitando ataques de secuencias de comandos en sitios cruzados (XSS), como se ha demostrado usando eventos onmousemove."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*","matchCriteriaId":"BA58BA23-4CFE-40F8-A2F4-104007E12E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"22F00276-9071-4B96-B49C-2E0898476874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EB84CC9B-346B-4AF4-929E-D56D85960103"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9420CD82-0E5F-4486-9AF8-9DCD6ED7E037"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"0A9C79AB-4ABE-49E6-BAB2-94610AE0316F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"04DE7CCB-79B8-4F9B-AC14-E4A100F9E473"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"1444C77E-FF98-40E5-9CA9-B4C71B3C9304"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3B40771F-30CB-45D0-9EDE-1F13852085B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"47315EC4-1EED-4070-A087-8E37C8FE6703"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"9F1EB38F-CEB2-40BC-AA5D-CC539F597137"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*","matchCriteriaId":"EE6B0681-B96F-405C-8042-1BF2DDB41648"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*","matchCriteriaId":"5436BBD2-E3FF-4558-B8F5-FFF5CA9FC045"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A76ACC55-754D-4501-8312-5A4E10D053B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8987151-0901-4547-B750-5DC470BB9CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"53E60BCC-6D1C-489E-9F3B-9BE42B46704F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66A87ED8-9E1F-4C2C-B806-A41765081C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C795D86F-9B08-41FE-B82B-5BBB3DE6357D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"2637D552-4A3D-4867-B52A-ACCED8681AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CC237C8-CFE0-4128-B549-93CD16894E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*","matchCriteriaId":"6B8EA79A-8426-44CF-AF13-58F7EF8B6D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"367A5D46-0FF3-4140-9478-251363822E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CAA58EE9-05C7-4395-A8A4-5F54BE4C5DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C656A621-BE62-4BB8-9B25-A3916E60FA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F8DE4889-424F-4A44-8C14-9F18821CE961"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*","matchCriteriaId":"82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*","matchCriteriaId":"1003D688-3EEA-45F9-BB2C-5BAB395D7678"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED69BEB9-8D83-415B-826D-9D17FB67976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BCDB64E5-AE26-43DF-8A66-654D5D22A635"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=227417","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107774710729469&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108448379429944&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4062","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-110.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-112.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9747","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15322","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A874","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A937","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=227417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107774710729469&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108448379429944&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-110.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-112.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A874","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0192","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a management session via a /sgmi URL that contains malicious script, which is not quoted in the resulting error page."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el Servicio de Administración de Symantec Gateway Security 2.0 permite a atacantes remotos robar cookies y secuestrar una sesión de administración mediante una URL /smgi que contiene un script malicioso, que no es puesto entre comillas en la página de error resultante."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security_5400:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C1B7CF42-F93E-48E6-BCD2-30B357F80DDA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107790684732458&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9755","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15330","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107790684732458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15330","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0193","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en el Módulo de análisis de Protocolos (PAM) de ISS, usado en ciertas versiones de RealSecure Network 7.0 y Server Sensor 7.0, Proventia series A, G, y M, Desktop 7.0 y 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, y BlackICE Server Protection 3.6, permite a atacantes remotos ejecutar código arbitrario mediante un paquete SMB conteniendo una petición de autenticación con un nombre de usuario largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_agent_server:3.6eca:*:*:*:*:*:*:*","matchCriteriaId":"68D71B50-D280-4735-BFFE-2548C3117D70"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6cbd:*:*:*:*:*:*:*","matchCriteriaId":"D62AC2AC-E7ED-498B-805F-2300B9793C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6cbz:*:*:*:*:*:*:*","matchCriteriaId":"E33242A8-7BE6-4A69-A7CC-81BAFC2ADD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:3.6eca:*:*:*:*:*:*:*","matchCriteriaId":"CF2247F3-0287-40DC-8CE8-3D0E15910056"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:3.6ecf:*:*:*:*:*:*:*","matchCriteriaId":"23AE96AD-84D6-4C76-9197-AFCDCC6EA705"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:7.0ebg:*:*:*:*:*:*:*","matchCriteriaId":"1F9233FA-D30A-4D0B-9605-CAA119C97CC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:7.0epk:*:*:*:*:*:*:*","matchCriteriaId":"F3CEB52E-9D4F-456A-A0C9-38E9D5FB6770"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_guard:3.6ecb:*:*:*:*:*:*:*","matchCriteriaId":"31FBC29D-CA61-44D8-A270-46A03A833B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_network:7.0:xpu_20.15:*:*:*:*:*:*","matchCriteriaId":"4D69F073-8619-42F0-BCF4-EB15F22D2855"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_sentry:3.6ecf:*:*:*:*:*:*:*","matchCriteriaId":"8983BE98-CC42-4B87-931B-31EF6B9AB840"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:7.0:xpu20.16:*:*:*:*:*:*","matchCriteriaId":"A6E4DF0F-6EE2-4445-BAAA-F6762CB933F0"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_a_series_xpu:20.15:*:*:*:*:*:*:*","matchCriteriaId":"EC3D8ECB-C355-4AD4-8AE1-EE3621EBAB1F"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_g_series_xpu:22.3:*:*:*:*:*:*:*","matchCriteriaId":"0C3D5C60-1E1C-4831-895A-7C28D279FFF8"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_m_series_xpu:1.30:*:*:*:*:*:*:*","matchCriteriaId":"616323E5-C7EB-4101-9F10-1A33645FEDAB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107789851117176&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10988","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20040226.html","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Upcoming/20040213.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/150326","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/4072","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9752","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/xforce/alerts/id/165","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15207","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107789851117176&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20040226.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eeye.com/html/Research/Upcoming/20040213.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/150326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/4072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/xforce/alerts/id/165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15207","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0194","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to execute arbitrary code via a PDF document with XML Forms Data Format (XFDF) data."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en la función OutputDebugString de Adobe Acrobat Reader 5.1 permite a atacantes remotos ejecutar código arbitraro mediante un documento PDF con datos XML Forms Data Format (XFDF)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*","matchCriteriaId":"ACF742B8-5F7A-487B-835C-756B1BB392F4"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018227.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107842545022724&w=2","source":"cve@mitre.org"},{"url":"http://www.nextgenss.com/advisories/adobexfdf.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4135","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9802","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15384","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018227.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107842545022724&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nextgenss.com/advisories/adobexfdf.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15384","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0197","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database query."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:jet:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7D19C4A6-8BDB-4397-9C51-8C9AC2B5D4FE"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/740716","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10112","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-014","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15703","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A968","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/740716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A968","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0199","sourceIdentifier":"cve@mitre.org","published":"2004-06-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm)."},{"lang":"es","value":"El Centro de Ayuda y Soporte en Windows XP y Windows Server 2003 SP1 no valida adecuadamente URLs HCP, lo que permite a atancantes remotos ejecutar código arbitrario, como se ha demostrado usando ciertas URLs hcp:// que acceden a la capacidad de mejora de DVD (dvdupgrd.htm)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*","matchCriteriaId":"E69D0E21-8C62-403E-8097-2CA403CBBB1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*","matchCriteriaId":"B127407D-AE50-4AFE-A780-D85B5AF44A2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*","matchCriteriaId":"5D42E51C-740A-4441-8BAF-D073111B984C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*","matchCriteriaId":"34ACB544-87DD-4D9A-99F0-A10F48C1EE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*","matchCriteriaId":"74AD256D-4BCE-41FB-AD73-C5C63A59A06D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*","matchCriteriaId":"B518E945-5FDE-4A37-878D-6946653C91F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*","matchCriteriaId":"B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108437759930820&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=108430407801825&w=2","source":"cve@mitre.org"},{"url":"http://www.exploitlabs.com/files/advisories/EXPL-A-2004-001-helpctr.txt","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/484814","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10321","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-015","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16095","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1008","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1032","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108437759930820&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=108430407801825&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploitlabs.com/files/advisories/EXPL-A-2004-001-helpctr.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/484814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0200","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation."},{"lang":"es","value":"Desbordamiento de búfer en el motor de proceso de JPEG (JPG) en GDIPlus.dll, usado en varios productos de Microsoft, permite a atacantes remotos ejecutar código de su elección mediante un campo de longitud JPEG COM pequeño que es normalizado a una longitud de entero grande antes de una operación de copia de memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:.net_framework:1.0:sp2:sdk:*:*:*:*:*","matchCriteriaId":"644D1C0E-482D-4C6D-AE9D-6B1F99306BC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:digital_image_pro:7.0:*:*:*:*:*:*:*","matchCriteriaId":"DED35E4C-1108-44AE-BA55-A008EB9864ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:digital_image_pro:9:*:*:*:*:*:*:*","matchCriteriaId":"BCC28680-6FA1-424A-BB8D-5E37E04D4089"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:digital_image_suite:9:*:*:*:*:*:*:*","matchCriteriaId":"370835D5-D28A-4961-B1B4-72E889596D07"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*","matchCriteriaId":"082D3262-87E3-4245-AD9C-02BE0871FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2003:*:*:*:*:*:*:*","matchCriteriaId":"5F79E0AB-7081-4F97-BFE4-9AF84F643B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:2002:*:*:*:*:*:*:*","matchCriteriaId":"6548F837-A687-4EEF-B754-DAA834B34FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:2003:*:*:*:*:*:*:*","matchCriteriaId":"3C79FEE1-70A3-4A48-BE7B-0D18F0A5FA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:greetings:2002:*:*:*:*:*:*:*","matchCriteriaId":"69AFBA4D-6F42-4ED9-9DF4-4A9C29B3ED8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:infopath:2003:*:*:*:*:*:*:*","matchCriteriaId":"345BC07E-1558-4C27-BF1A-C13547D175FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*","matchCriteriaId":"DB7EA4CC-E705-42DB-86B6-E229DA36B66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*","matchCriteriaId":"79BA1175-7F02-4435-AEA6-1BA8AADEB7EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:onenote:2003:*:*:*:*:*:*:*","matchCriteriaId":"36BA88A3-A31F-4F90-8913-67D5BC00E72D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2002:*:*:*:*:*:*:*","matchCriteriaId":"3FE6EAE0-5A8F-4A97-950B-879379A3C0F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*","matchCriteriaId":"C3189982-F780-4AC2-9663-E6D4DF9DD319"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:picture_it:7.0:*:*:*:*:*:*:*","matchCriteriaId":"5D85EB5B-A9FE-497E-9922-6D6BDD0C6975"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:picture_it:9:*:*:*:*:*:*:*","matchCriteriaId":"A27F0EA6-C023-47C5-8F26-7E8A665533F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:picture_it:2002:*:*:*:*:*:*:*","matchCriteriaId":"337555B3-6318-41FE-9AD7-6CEAA46F0DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2002:*:*:*:*:*:*:*","matchCriteriaId":"711D9CC0-31B8-4511-A9F3-CA328A02ED84"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:powerpoint:2003:*:*:*:*:*:*:*","matchCriteriaId":"F5611EFD-2C7C-47BA-83E5-947EA00D8E6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:producer:*:gold:office_powerpoints:*:*:*:*:*","matchCriteriaId":"999276CD-D074-4AB1-A53E-5133A3B7BFF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"9B14AE8E-1BFF-4458-87CC-357957F18F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:project:2003:*:*:*:*:*:*:*","matchCriteriaId":"34EFAEFE-2BDE-4111-91F5-E9F75ADFA920"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:publisher:2002:*:*:*:*:*:*:*","matchCriteriaId":"99ED878A-CFC5-4FD5-A403-EB16CC4F8BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:publisher:2003:*:*:*:*:*:*:*","matchCriteriaId":"617E8BE3-8AD0-42FC-BDEE-6B1F120AE512"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0D2C5C3-225C-49DC-B9C7-C5BC05900F2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visio:2003:*:*:*:*:*:*:*","matchCriteriaId":"511E22C6-DB04-44A0-906D-F432DD42CA5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_basic:2002:*:.net_standard:*:*:*:*:*","matchCriteriaId":"B3B633A9-519A-4179-9F10-3C2C5C9BA6B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_basic:2003:*:.net_standard:*:*:*:*:*","matchCriteriaId":"D6D51C0E-BFF4-46A0-A8FD-45BE591DA347"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_c\\#:2002:*:.net_standard:*:*:*:*:*","matchCriteriaId":"1A1D8127-80AC-4D5B-9D1C-DA2406EF6666"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_c\\#:2003:*:.net_standard:*:*:*:*:*","matchCriteriaId":"8916C0DE-2759-4F97-B7D7-0BCFDC41AB4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_c\\+\\+:2002:*:.net_standard:*:*:*:*:*","matchCriteriaId":"F1090984-34A7-4A21-B903-3FF5E5AB7D5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_c\\+\\+:2003:*:.net_standard:*:*:*:*:*","matchCriteriaId":"A0BED5B2-5F57-4FC8-8B51-908A311B480B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_j\\#_.net:2003:*:.net_standard:*:*:*:*:*","matchCriteriaId":"CC13A32B-5F2A-42A4-95B5-D13EE78F013B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2002:gold:*:*:*:*:*:*","matchCriteriaId":"E17BD019-DD35-413E-ACBA-2E77C8A1247D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:gold:*:*:*:*:*:*","matchCriteriaId":"B9E6C132-4F4B-4FB0-9DDC-DD9750D8552D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*","matchCriteriaId":"2D90B1E1-23CD-4595-AD78-DA1758E9896D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*","matchCriteriaId":"379C2A4A-78EF-473D-954B-F5DD76C3D6CF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*","matchCriteriaId":"B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*","matchCriteriaId":"B9687E6C-EDE9-42E4-93D0-C4144FEC917A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109524346729948&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/297462","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-260A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-028","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16304","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1105","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1721","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2706","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3038","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3082","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3320","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3810","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3881","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4003","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4216","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4307","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109524346729948&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/297462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-260A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4307","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0201","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041."},{"lang":"es","value":"Vulnerabilidad basada en el montón en el programa HtmlHelp (hh.exe) en ayuda HTML de Microsoft Windows 98, Me, NT, 4.0, 2000, XP y Server 2003 permite a atacantes remotos ejecutar órdenes de su elección mediante un fichero .CHML con un campo de longitud largo, una vulnerabilidad distinta de CAN-2003-1041."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip600_media_servers:*:*:*:*:*:*:*:*","matchCriteriaId":"9692F8E9-E8E9-43A8-87D5-F2409333F8CC"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:definity_one_media_server:*:*:*:*:*:*:*:*","matchCriteriaId":"88301496-BED2-45EB-BF19-5F5BF2957373"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8100:*:*:*:*:*:*:*:*","matchCriteriaId":"1D190CA6-7807-4361-8FB8-C015B21E66B1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:s3400:*:*:*:*:*:*:*","matchCriteriaId":"9BFF29C7-E5AA-44EB-B1A9-602B3692D893"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*","matchCriteriaId":"E69D0E21-8C62-403E-8097-2CA403CBBB1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*","matchCriteriaId":"B127407D-AE50-4AFE-A780-D85B5AF44A2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*","matchCriteriaId":"5D42E51C-740A-4441-8BAF-D073111B984C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*","matchCriteriaId":"34ACB544-87DD-4D9A-99F0-A10F48C1EE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*","matchCriteriaId":"74AD256D-4BCE-41FB-AD73-C5C63A59A06D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*","matchCriteriaId":"B518E945-5FDE-4A37-878D-6946653C91F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"237D7C18-C8D6-4FDB-A160-FA17DD46A55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*","matchCriteriaId":"B5CAF64E-98AA-4813-A2A2-5AC3387CF230"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*","matchCriteriaId":"B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023919.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/920060","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-196A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-023","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16586","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1503","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1530","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2155","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3179","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023919.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/920060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-196A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1530","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3179","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0202","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet."},{"lang":"es","value":"El interfaz de programación de aplicación (API) IDirectPlay de  Microsoft DirectPlay 7.0a a 9.0b, usado en Windows Server 2003 y anteriores, permite a atacantes remotos causar una denegación de servicio (caída de aplicación) mediante un paquete malformado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:7.0:*:*:*:*:*:*:*","matchCriteriaId":"2BFE77B9-6C2A-45D3-A4B5-2679CC4B0DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:7.0a:*:*:*:*:*:*:*","matchCriteriaId":"459D411C-4994-41DB-9594-F460EADA3351"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4F01F75D-4C20-4DA2-BD3B-4A3BD466F773"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:8.0:*:*:*:*:*:*:*","matchCriteriaId":"0D1C38DA-F7C2-4291-8384-E822BAE7F25D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:8.0a:*:*:*:*:*:*:*","matchCriteriaId":"CB69C888-AAE7-4472-B2D3-76CEFFF48D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:8.1:*:*:*:*:*:*:*","matchCriteriaId":"8FF0278F-AFA7-48BA-8762-5569EC174AEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:8.1a:*:*:*:*:*:*:*","matchCriteriaId":"CD4C6E3F-58B3-4871-AC3A-DC54F9031C1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:8.1b:*:*:*:*:*:*:*","matchCriteriaId":"1BBFBDA6-90F5-4A8A-BD47-2DCA5CA8D5AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:8.2:*:*:*:*:*:*:*","matchCriteriaId":"A84968C5-EFBE-4BC6-8A3B-0110A65EC97E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0a:*:*:*:*:*:*:*","matchCriteriaId":"B2F096A3-DD19-4D54-94F4-027DBDF1A705"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:directx:9.0b:*:*:*:*:*:*:*","matchCriteriaId":"70A8E96E-F752-43D2-83C3-877DE1042B80"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*","matchCriteriaId":"E69D0E21-8C62-403E-8097-2CA403CBBB1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*","matchCriteriaId":"B127407D-AE50-4AFE-A780-D85B5AF44A2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*","matchCriteriaId":"5D42E51C-740A-4441-8BAF-D073111B984C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*","matchCriteriaId":"34ACB544-87DD-4D9A-99F0-A10F48C1EE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*","matchCriteriaId":"74AD256D-4BCE-41FB-AD73-C5C63A59A06D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*","matchCriteriaId":"B518E945-5FDE-4A37-878D-6946653C91F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*","matchCriteriaId":"B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://secunia.com/advisories/11802","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6742","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10487","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-016","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16306","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1027","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2190","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2413","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2516","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2705","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-016","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2413","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2705","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0203","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en Outlook Web Access de Exchange Server 5.5 Service Pack 4 permite a atacantes remotos la inserción de rutinas arbitrarias y falsificar el contenido de correos HTML o cachés web mediante petición HTML redirigida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:-:*:*:*:*:*:*","matchCriteriaId":"B4F9C143-4734-4E5D-9281-F51513C5CAAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"AD3E2F18-A369-4767-ACEF-38DB40EEC6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"EC01670D-4550-4034-86A5-7879B6334241"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp3:*:*:*:*:*:*","matchCriteriaId":"B80A57A1-7B9F-4C07-ADAA-DBC4687F1EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:5.5:sp4:*:*:*:*:*:*","matchCriteriaId":"E3983529-F4E3-4883-97AF-5BFC87AC3E86"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/948750","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-026","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16583","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2016","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/948750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-0204","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via \"..\" sequences in the dynamicimag argument to crystalimagehandler.aspx."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en los visores web de Business Objects Crystal Reports 9 and 10, y Crystal Enterprise 9 o 10, usados en Visual Studio .NET 2003 y Outlook 2003 con Business Contact Manager, Microsoft Business Solutions CRM 1.2, y otros productos, permiten a atacantes remotos leer y borrar ficheros de su elección mediante secuencias \"..\" en el argumento dynamicimag de crystalimagehandler.aspx."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*","matchCriteriaId":"ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*","matchCriteriaId":"A3DFE048-905E-4890-809D-F6BCEF7F83C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*","matchCriteriaId":"F7560131-A6AC-4BBB-AA2D-C7C63AB51226"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"D18E22CC-A0FC-4BC7-AD39-2645F57486C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*","matchCriteriaId":"893C2387-03E3-4F8E-9029-BC64C64239EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"D00633D1-4B38-48D9-B5CD-E8D66EA90599"},{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:j_builder:*:*:*:*:*:*:*:*","matchCriteriaId":"7A50A593-04D3-4FDA-8015-901750AEE4C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_enterprise:9:*:*:*:*:*:*:*","matchCriteriaId":"53235D62-18AA-4482-B9AE-9E1AE87BDB3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_enterprise:10:*:*:*:*:*:*:*","matchCriteriaId":"38F02473-3701-413D-B2F2-B400958F22F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_enterprise_java_sdk:8.5:*:*:*:*:*:*:*","matchCriteriaId":"3F1A5E6C-F762-4FD1-A105-EFC4E3746B6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_enterprise_ras:8.5:*:unix:*:*:*:*:*","matchCriteriaId":"CD34959D-8A0C-48B4-8132-865406EABB4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_reports:9:*:*:*:*:*:*:*","matchCriteriaId":"716121F8-EE8D-4A4C-BAB6-943BE3ADDC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_reports:10:*:*:*:*:*:*:*","matchCriteriaId":"F4D5162B-391B-4B36-A688-8D903218B3B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:business_solutions_crm:1.2:*:*:*:*:*:*:*","matchCriteriaId":"5FFC5454-8557-4886-AEB4-3E04EC6FC477"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2003:*:business_contact_manager:*:*:*:*:*","matchCriteriaId":"F148421C-7BF5-4A58-83DF-4879B27C912A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:visual_studio_.net:2003:gold:*:*:*:*:*:*","matchCriteriaId":"B9E6C132-4F4B-4FB0-9DDC-DD9750D8552D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108360413811017&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108671836127360&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11800","source":"cve@mitre.org"},{"url":"http://support.businessobjects.com/fix/hot/critical/bulletins/security_bulletin_june04.asp","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6748","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10260","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-017","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16044","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1157","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108360413811017&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108671836127360&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.businessobjects.com/fix/hot/critical/bulletins/security_bulletin_june04.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1157","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0205","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function."},{"lang":"es","value":"Desbordamiento de búfer en Microsoft Internet Information Server (IIS) 4.0 permite a usuarios locales ejecutar código de su elección mediante la función de redirección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip600_media_servers:*:*:*:*:*:*:*:*","matchCriteriaId":"9692F8E9-E8E9-43A8-87D5-F2409333F8CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_information_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5D47E9C4-5439-4A82-BBD8-D6B482B47E51"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:definity_one_media_server:*:*:*:*:*:*:*:*","matchCriteriaId":"88301496-BED2-45EB-BF19-5F5BF2957373"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8100:*:*:*:*:*:*:*:*","matchCriteriaId":"1D190CA6-7807-4361-8FB8-C015B21E66B1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:s3400:*:*:*:*:*:*:*","matchCriteriaId":"9BFF29C7-E5AA-44EB-B1A9-602B3692D893"}]}]}],"references":[{"url":"http://secunia.com/advisories/12061","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-179.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/717748","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/7799","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10706","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-196A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-021","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16578","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2204","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-179.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/717748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/7799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-196A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-021","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0206","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an \"unchecked buffer,\" possibly a buffer overflow."},{"lang":"es","value":"Los servicios Network Dynamic Data Exchange (NetDDE) de Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003  permiten a atacantes ejecutar código de su elección remotamente o ganar privilegios localmente mediante un mensaje o aplicación maliciosos que envuelve un \"búfer sin comprobar\", posiblemente un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109786703930674&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12803/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/640488","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11372","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-031","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16556","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17657","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1852","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2394","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3120","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3242","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4592","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5074","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6788","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109786703930674&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12803/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/640488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16556","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0207","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"\"Shatter\" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions."},{"lang":"es","value":"Vulnerabilidad de estilo \"hacer añicos\" en la interfaz de programación de aplicación (API) de Administración  de Windows en Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, y Windows Server 2003 permite a usuarios locales ganar privilegios usando ciertas funciones de API para cambiar las propiedades de programas privilegiados usando las funciones de API SetWindowLong y SetWIndowLongPtr."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109777417922695&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/218526","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16579","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17658","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109777417922695&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/218526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17658","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0208","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions."},{"lang":"es","value":"El subsistema de Máquina Virtual DOS de Microsoft Windows NT 4.0, Windows 2000, Windows XP, y Windows Server 2003 permite a usuarios locales acceder a memoria del kernel y ganar privilegios mediante un programa malicioso que modifica ciertas estructuras de sistema de manera que no es validado adecuadamente por funciones privilegiadas del sistema operativo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109772135404427&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/910998","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16580","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17658","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1751","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3161","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3953","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4316","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4762","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109772135404427&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/910998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3161","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4762","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0209","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve \"an unchecked buffer.\""},{"lang":"es","value":"Vulnerabilidad desconocida en los procesos del Motor de Generación de Gráficos de Microsoft Windows 2000, Windows XP, y Windows Server 2003  permite a atacantes remotos ejecutar código de su elección mediante formatos de imagen (1) Metafichero de Windows (WMF) o (2) Metafichero Mejorado (EMF) que tiene que ver con \"un búfer no comprobado\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109829067325779&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/806278","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11375","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16581","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17658","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1872","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2114","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2428","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109829067325779&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/806278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0210","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-10-22T01:15:31.677","vulnStatus":"Deferred","cisaExploitAdd":"2022-03-03","cisaActionDue":"2022-03-24","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow."},{"lang":"es","value":"El componente POSIX de Microsoft Windows NT y Windows 2000 permite a usuarios locales ejecutar código de su elección mediante ciertos parámetros, posiblemente modificando valores de tamaño de mensaje y causando un desbordamiento de búfer."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:interix:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D191C828-2312-4579-9910-511BB35FD4E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp2:*:*:*:*:*:*","matchCriteriaId":"FF99A17F-9469-4937-A23B-FD5C8B37087B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp3:*:*:*:*:*:*","matchCriteriaId":"530FC172-94E1-481A-9810-26061D22B6AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:server:*:*:*","matchCriteriaId":"DB28B8C1-9110-4780-A0CB-2188D1E86F56"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:terminal_server:*:*:*","matchCriteriaId":"8C5AA872-3652-4A44-8858-80F7E73AE610"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:*:*:workstation:*:*:*","matchCriteriaId":"F08AE7EC-2EBC-4088-8874-640A63C4A7F6"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/647436","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-196A.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16590","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2847","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/647436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-196A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-0210","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2004-0211","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denial of service (system crash) via a malicious program."},{"lang":"es","value":"El kernel de Microsoft Windows Server 2003 no restaura ciertos valores en estructuras de datos de CPU, lo que permite a usuarios locales causar una denegación de servicio (caída) mediante un programa malicioso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/119262","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16582","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17658","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4893","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/119262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0212","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share."},{"lang":"es","value":"Vulnerabilidad basada en la pila en el Programador de Tareas de Windows 2000 y XP, e Internet Explorer 6 en Windows NT 4.0 permite a atacantes remotos o locales ejecutar código de su elección mediante un fichero .job conteniendo parámetros grandes, como se ha demostrado utlizando Internet Explorer y accediendo a un fichero .job en una carpeta de red compartida anónimamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip600_media_servers:*:*:*:*:*:*:*:*","matchCriteriaId":"9692F8E9-E8E9-43A8-87D5-F2409333F8CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:definity_one_media_server:*:*:*:*:*:*:*:*","matchCriteriaId":"88301496-BED2-45EB-BF19-5F5BF2957373"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8100:*:*:*:*:*:*:*:*","matchCriteriaId":"1D190CA6-7807-4361-8FB8-C015B21E66B1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:s3400:*:*:*:*:*:*:*","matchCriteriaId":"9BFF29C7-E5AA-44EB-B1A9-602B3692D893"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*","matchCriteriaId":"B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108981273009250&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108981403025596&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12060","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/228028","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/mstaskjob.txt","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-196A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-022","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16591","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1344","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1781","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1964","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3428","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108981273009250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108981403025596&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/228028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/mstaskjob.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-196A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0213","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a \"Shatter\" style attack that sends a Windows message to cause Utility Manager to launch winhlp32 by directly accessing the context sensitive help and bypassing the GUI, then sending another message to winhlp32 in order to open a user-selected file, a different vulnerability than CVE-2003-0908."},{"lang":"es","value":"El Adminstrador de Útiles en Windows 2000 lanza winhlp32.exe mientras que el Administrador de útiles se está ejecutando con privilegios elevados, lo que permite a usuarios locales ganar privilegios de sistema mediante un ataque de estilo \"estallamiento\" (shatter) que envía un mensaje de Windows para hacer que el Administrador de Útiles lance winhlp32 accediendo directamente a la ayuda sensible al contexto y saltándose el interfaz de usuario (GUI), y entonces enviando otro mensaje a winhlp32 para abrir un fichero seleccionado por el usuario, una vulnerabilidad distinta de CAN 2003-0908."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-306"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp2:*:*:*:*:*:*","matchCriteriaId":"FF99A17F-9469-4937-A23B-FD5C8B37087B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp3:*:*:*:*:*:*","matchCriteriaId":"530FC172-94E1-481A-9810-26061D22B6AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108975382413405&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.kb.cert.org/vuls/id/868580","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-196A.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-019","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16592","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2495","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108975382413405&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.kb.cert.org/vuls/id/868580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-196A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0214","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba."},{"lang":"es","value":"Desbordamiento de búfer en Microsoft Internet Explorer y Explorador de Windows XP SP1, 2000, 98 y Me puede permitir a usuarios remotos maliciosos causar una denegación de servicio (caída de aplicación) y posiblemente ejecutar código de su elección mediante nombres de recursos compartidos largos, como se ha demostrado usando Samba."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*","matchCriteriaId":"7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*","matchCriteriaId":"B9687E6C-EDE9-42E4-93D0-C4144FEC917A"}]}]}],"references":[{"url":"http://seclists.org/lists/bugtraq/2004/Apr/0322.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://seclists.org/lists/fulldisclosure/2004/Apr/0933.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11482/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011647","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B322857","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/616200","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5687","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5JP0M1PCKI.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10213","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-037","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15956","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17662","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1601","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1749","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2638","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4345","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5307","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/bugtraq/2004/Apr/0322.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://seclists.org/lists/fulldisclosure/2004/Apr/0933.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11482/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B322857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/616200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/5687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5JP0M1PCKI.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5307","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0215","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header."},{"lang":"es","value":"Microsoft Outlook Express 5.5 y 6 permiten a atacantes causar una denegación de servicio (caída de la aplicación) mediante una cabecera de correo electrónico malformada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip600_media_servers:*:*:*:*:*:*:*:*","matchCriteriaId":"9692F8E9-E8E9-43A8-87D5-F2409333F8CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*","matchCriteriaId":"85FD3557-956D-4A96-8AA5-5FD9DB87FD11"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:definity_one_media_server:*:*:*:*:*:*:*:*","matchCriteriaId":"88301496-BED2-45EB-BF19-5F5BF2957373"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8100:*:*:*:*:*:*:*:*","matchCriteriaId":"1D190CA6-7807-4361-8FB8-C015B21E66B1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:s3400:*:*:*:*:*:*:*","matchCriteriaId":"9BFF29C7-E5AA-44EB-B1A9-602B3692D893"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/869640","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-196A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-018","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16585","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1950","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2137","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2657","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3376","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/869640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-196A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3376","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0216","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de búfer en el Motor de Instalación (inseng.dll) de Internet Explorer 5.01, 5.5 y 6 permite a atacantes remotos ejecutar código de su elección mediante un sitio web maliciosos o correo electrónico HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*","matchCriteriaId":"B80088A3-2AA4-44A2-98DF-359E15F8E18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109760693512754&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110616383332055&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=110619893620517&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/637760","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/msinsengfull.txt","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17620","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17651","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5316","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5329","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6100","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6600","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7717","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7865","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109760693512754&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110616383332055&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=110619893620517&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/637760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/msinsengfull.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5316","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6600","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7865","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0217","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log."},{"lang":"es","value":"La capacidad LiveUpdate de Symantec Antivirus Scan Engine 4.0 y 4.3 para Red Hat Linux permite a usuarios locales crear o añadir ficheros arbitrarios mediante un ataque de enlaces simbólicos sobre /tmp/LiveUpdate.log."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.0,"baseSeverity":"HIGH"},"exploitabilityScore":1.0,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus_scan_engine:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4D2AD14C-2BD2-4658-BDB0-232A9E26EA2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:antivirus_scan_engine:4.3:*:*:*:*:*:*:*","matchCriteriaId":"F11687CE-E997-4D26-ACAE-B9175348ADDE"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux:-:*:*:*:*:*:*:*","matchCriteriaId":"C4EBE07A-6FEF-4343-BA5D-58FD175F5CD1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107694800908164&w=2","source":"cve@mitre.org","tags":["Exploit","Mailing List"]},{"url":"http://www.securityfocus.com/bid/9662","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15215","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=107694800908164&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Mailing List"]},{"url":"http://www.securityfocus.com/bid/9662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0218","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (infinite loop) via an ISAKMP packet with a zero-length payload, as demonstrated by the Striker ISAKMP Protocol Test Suite."},{"lang":"es","value":"isakmpd en OpenBSD 3.4 y anteriores permite a atacantes remotos causar una denegación de servicio (bucle infinito) mediante un paquete ISAKMP con una carga útil de logitud cero, como se ha demostrado por la Suite de pruebas de protocolos ISAKMP Striker."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4","matchCriteriaId":"C5DFD8FE-5B7A-4A71-B9C8-BF7E9F0F7DB9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108008530028019&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11156","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/349113","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.rapid7.com/advisories/R7-0018.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10028","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009468.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15518","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108008530028019&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11156","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/349113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.rapid7.com/advisories/R7-0018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009468.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0219","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a malformed IPSEC SA payload, as demonstrated by the Striker ISAKMP Protocol Test Suite."},{"lang":"es","value":"isakmpd en OpenBSD 3.4 y anteriores permite a atacantes causar una denegación de servicio (caída) mediante un paquete ISAKMP con una carga útil IPSEC SA, como se ha demostrado por el paquete de pruebas de protocolos  ISAKMP Striker."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4","matchCriteriaId":"C5DFD8FE-5B7A-4A71-B9C8-BF7E9F0F7DB9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108008530028019&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/785945","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata.html","source":"cve@mitre.org"},{"url":"http://www.rapid7.com/advisories/R7-0018.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9907","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009468.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15628","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108008530028019&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/785945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rapid7.com/advisories/R7-0018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009468.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0220","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer underflow that is used in a malloc operation that is not properly handled, as demonstrated by the Striker ISAKMP Protocol Test Suite."},{"lang":"es","value":"isakmpd en OpenBSD 3.4 y versiones anteriores permite a atacantes remotos provocar una denegación de servicio a través de un paquete ISAKMP con una carga útil Cert Request malformada, lo que provoca un desbordamiento inferior de entero que es usado en una operación malloc que no se maneja adecuadamente, según lo demonstrado por el Striker ISAKMP Protocol Test Suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4","matchCriteriaId":"C5DFD8FE-5B7A-4A71-B9C8-BF7E9F0F7DB9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108008530028019&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/223273","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.rapid7.com/advisories/R7-0018.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9907","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009468.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15629","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108008530028019&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/223273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.openbsd.org/errata.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.rapid7.com/advisories/R7-0018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009468.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15629","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0221","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite."},{"lang":"es","value":"isakmpd en OpenBSD 3.4 y anteriores permite a atacantes remotos causar una denegación de servicio (caída) mediante un paquete ISAKMP con una carga útil de borrado conteniendo un gran número de SPIs, lo que dispara un error de lectura fuera de límites, como se ha demostrado por el paquete de pruebas de protocolo ISAKMP Striker."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4","matchCriteriaId":"C5DFD8FE-5B7A-4A71-B9C8-BF7E9F0F7DB9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108008530028019&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/524497","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.openbsd.org/errata.html","source":"cve@mitre.org","tags":["Product","Vendor Advisory"]},{"url":"http://www.rapid7.com/advisories/R7-0018.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9907","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009468.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15630","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=108008530028019&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/524497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.openbsd.org/errata.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product","Vendor Advisory"]},{"url":"http://www.rapid7.com/advisories/R7-0018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009468.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0222","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via certain ISAKMP packets, as demonstrated by the Striker ISAKMP Protocol Test Suite."},{"lang":"es","value":"Múltiples fugas de memoria en isakmpd en OpenBSD 3.4 y anteriores permite a atacantes remotos causar una denegación de servicio (consumición de memoria) mediante ciertos paquetes ISAKMP, como se ha demostrado por el paquete de pruebas de protocolos ISAKMP Striker."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4","matchCriteriaId":"C5DFD8FE-5B7A-4A71-B9C8-BF7E9F0F7DB9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108008530028019&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/996177","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.openbsd.org/errata.html","source":"cve@mitre.org","tags":["Product"]},{"url":"http://www.rapid7.com/advisories/R7-0018.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10032","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009468.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15519","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=108008530028019&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/996177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.openbsd.org/errata.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]},{"url":"http://www.rapid7.com/advisories/R7-0018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009468.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0224","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code \"when Unicode character is out of BMP range.\""},{"lang":"es","value":"Múltiples desobordamientos de búfer en (1) iso2022jp.c o (2) shiftjis.c  de Courier-IMAP anteriores a 3.0.0, Courier anteriores a 0.45, y SQWebMail anteriores a 4.0.0 pueden permitir a atacantes remotos ejecutar código arbitrario \"cuando el carácter Unicode está fuera de rango BMP\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:double_precision_incorporated:courier_mta:0.43:*:*:*:*:*:*:*","matchCriteriaId":"59676325-66F3-42EA-935B-1436961E3B50"},{"vulnerable":true,"criteria":"cpe:2.3:a:double_precision_incorporated:courier_mta:0.43.1:*:*:*:*:*:*:*","matchCriteriaId":"A801771F-0CBF-40DC-91F2-D4C885B28FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:double_precision_incorporated:courier_mta:0.43.2:*:*:*:*:*:*:*","matchCriteriaId":"D2464DEE-21EF-40B6-A691-6B8A89DED2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:double_precision_incorporated:courier_mta:0.44:*:*:*:*:*:*:*","matchCriteriaId":"CA66C89A-F87F-4854-A358-2E8377DD431D"},{"vulnerable":true,"criteria":"cpe:2.3:a:double_precision_incorporated:courier_mta:0.44.2:*:*:*:*:*:*:*","matchCriteriaId":"2D580A21-C0E9-40F1-ADC2-0DD17D51909B"},{"vulnerable":true,"criteria":"cpe:2.3:a:double_precision_incorporated:sqwebmail:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"49F81672-03E5-4F7A-91B9-5CA22F97DEA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:double_precision_incorporated:sqwebmail:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F19F4FF8-5736-40E5-9B77-1239EC32E4A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:double_precision_incorporated:sqwebmail:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4F34BDC5-1BB5-42B5-A69F-A3B4C2F4A0EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:double_precision_incorporated:sqwebmail:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"714A150C-6D9D-4A31-958D-F1A1EBE4F3A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:double_precision_incorporated:sqwebmail:3.6_.0:*:*:*:*:*:*:*","matchCriteriaId":"D4E759B1-C7FF-447A-882D-7F9C8D35D744"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:courier-imap:1.6:*:*:*:*:*:*:*","matchCriteriaId":"CE124EB9-DA25-459A-83A2-43E8A0AC0EF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:courier-imap:1.7:*:*:*:*:*:*:*","matchCriteriaId":"6A41204F-5DF0-48C3-A6EA-BEB9F16AD819"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:courier-imap:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D2EEAB62-A508-4138-8633-9EC55FA9BA70"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:courier-imap:2.1:*:*:*:*:*:*:*","matchCriteriaId":"FB2AC82C-77EE-4FF1-BFCB-F3C05FE7D77D"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:courier-imap:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1CBF3328-97BF-4C82-B99A-1C0C55E63716"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:courier-imap:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C2C8E71C-8CD0-491F-9531-EBB909F540BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:courier-imap:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4EE24695-FA49-4323-8A57-E4E618FAD45E"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:courier-imap:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"803700EC-E4E9-45DB-9024-4FDE322BB783"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D1FD0EB4-E744-4465-AFEE-A3C807C9C993"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*","matchCriteriaId":"1D866A7D-F0B9-4EA3-93C6-1E7C2C2A861F"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*","matchCriteriaId":"57772E3B-893C-408A-AA3B-78C972ED4D5E"}]}]}],"references":[{"url":"http://secunia.com/advisories/11087/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=5767","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9845","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15434","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11087/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=5767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0226","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Midnight Commander (mc) anteriores a 4.6.0 pueden permitir a atacantes causar una denegación de servicio o ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.40:*:*:*:*:*:*:*","matchCriteriaId":"EB4028BE-4173-4175-B9EF-A85A47476A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.41:*:*:*:*:*:*:*","matchCriteriaId":"FC64619A-D8C3-4613-9A51-849DC65DC959"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.42:*:*:*:*:*:*:*","matchCriteriaId":"0A4BBBE0-E96D-4BCB-BF5B-673888C00AC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.43:*:*:*:*:*:*:*","matchCriteriaId":"D410B4E1-DA7A-4F62-A0F9-E8C5A147BD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.44:*:*:*:*:*:*:*","matchCriteriaId":"949399A7-6E77-4F12-86EE-7B6FBAA16D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.45:*:*:*:*:*:*:*","matchCriteriaId":"FDE8085F-84F3-4305-A52B-FEFF05E9FD17"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.46:*:*:*:*:*:*:*","matchCriteriaId":"D5DA21F1-8700-437C-8D64-70D97A508598"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.47:*:*:*:*:*:*:*","matchCriteriaId":"B03CA3A4-86E2-4E10-8F56-51B814F51540"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.48:*:*:*:*:*:*:*","matchCriteriaId":"F5AA5CCF-F160-4092-A7E7-29459E2528F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.49:*:*:*:*:*:*:*","matchCriteriaId":"F2B90B64-72A2-46D3-A6CC-07052FC70740"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.50:*:*:*:*:*:*:*","matchCriteriaId":"1E7739C2-C590-479E-8A0B-2EC95E836E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.51:*:*:*:*:*:*:*","matchCriteriaId":"25C1FE96-BC31-48D3-BB64-F132E17B8244"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.52:*:*:*:*:*:*:*","matchCriteriaId":"0BFFA28E-B2EA-4F1A-8A05-7F2B05572B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.55:*:*:*:*:*:*:*","matchCriteriaId":"E5969E22-C2B8-4440-92D0-EF17ECFECFCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.6:*:*:*:*:*:*:*","matchCriteriaId":"98D27DF4-BCF6-4AB8-9117-80E2D1072C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:0.5:*:*:*:*:*:*:*","matchCriteriaId":"980553F2-8662-47CF-95F0-645141746AEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:0.7:*:*:*:*:*:*:*","matchCriteriaId":"40EBF1CD-B392-4262-8F06-2C784ADAF0F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.1a:*:*:*:*:*:*:*","matchCriteriaId":"9C00F84A-FCD4-4935-B7DE-ECBA6AE9B074"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"960DC6C2-B285-41D4-96F7-ED97F8BD5482"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D1FD0EB4-E744-4465-AFEE-A3C807C9C993"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*","matchCriteriaId":"1D866A7D-F0B9-4EA3-93C6-1E7C2C2A861F"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*","matchCriteriaId":"57772E3B-893C-408A-AA3B-78C972ED4D5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"F432C6C2-8676-4DD5-B9E6-71F6C164EF9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"300A6A65-05FD-401C-80F6-B5F5B1F056E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"AA3D53C9-3806-45E6-8AE9-7D41280EF64C"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200405-21.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-497","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:039","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_12_mc.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-172.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16016","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200405-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_12_mc.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-172.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0227","sourceIdentifier":"cve@mitre.org","published":"2004-06-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to execute arbitrary code via a long query string."},{"lang":"es","value":"Desbordamiento de búfer en el script zms en ZineMinder anteriores a 1.19.2 puede permitir a un atacante remotos ejecutar código arbitrario mediante una cadena de consulta larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:triornis:zoneminder:1.17.0:*:*:*:*:*:*:*","matchCriteriaId":"AA4C0438-EE38-4AEC-90B9-5CA9425862ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:triornis:zoneminder:1.17.1:*:*:*:*:*:*:*","matchCriteriaId":"15F7CBD4-7784-4B11-9E96-1CADE4F3C154"},{"vulnerable":true,"criteria":"cpe:2.3:a:triornis:zoneminder:1.17.2:*:*:*:*:*:*:*","matchCriteriaId":"8CA7DB88-DB12-467B-B916-5D8CF0D91132"},{"vulnerable":true,"criteria":"cpe:2.3:a:triornis:zoneminder:1.18.0:*:*:*:*:*:*:*","matchCriteriaId":"7AF2CE99-52EA-4EBB-8306-C2F26970806C"},{"vulnerable":true,"criteria":"cpe:2.3:a:triornis:zoneminder:1.18.1:*:*:*:*:*:*:*","matchCriteriaId":"BD3A3321-D753-4931-AAE2-DE5716E5A063"},{"vulnerable":true,"criteria":"cpe:2.3:a:triornis:zoneminder:1.19.0:*:*:*:*:*:*:*","matchCriteriaId":"B5CD5CCF-85CD-407C-8FE3-433E3805EE56"},{"vulnerable":true,"criteria":"cpe:2.3:a:triornis:zoneminder:1.19.1:*:*:*:*:*:*:*","matchCriteriaId":"66B91923-F4A3-4A23-B180-43B34AC93EE0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/10340","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zoneminder.com/index.php?id=20&type=0&backPID=20&tt_news=29","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16136","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zoneminder.com/index.php?id=20&type=0&backPID=20&tt_news=29","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0228","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in the cpufreq proc handler (cpufreq_procctl) in Linux kernel 2.6 allows local users to gain privileges."},{"lang":"es","value":"Error falta de signo en enteros en el manejador proc cpufreq (cpufrep_procctl) en Linux kernel 2.6 permite a usuarios locales ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852","source":"cve@mitre.org"},{"url":"http://fedoranews.org/updates/FEDORA-2004-111.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11429","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11464","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11486","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11491","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11683","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:050","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_10_kernel.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15951","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://fedoranews.org/updates/FEDORA-2004-111.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11486","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_10_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15951","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0229","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The framebuffer driver in Linux kernel 2.6.x does not properly use the fb_copy_cmap function, with unknown impact."},{"lang":"es","value":"El controlador de framebuffer en Linux kernel 2.6.x no usa adecuadamente la función fb_copy_cmap, con impacto desconocido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:037","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_10_kernel.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10211","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15974","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_10_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0230","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-05-02T16:40:41.530","vulnStatus":"Analyzed","evaluatorComment":"<a href=\"https://cwe.mitre.org/data/definitions/331.html\">CWE-331: Insufficient Entropy</a>","cveTags":[],"descriptions":[{"lang":"en","value":"TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP."},{"lang":"es","value":"TCP, cuando se usa un tamaño de ventana de transmisión grande, hace más fácil a atacantes remotos adivinar números de secuencia y causar una denegación de servicio (pérdida de la conexión) en conexiones TCP persistentes inyectando repetidamente un paquete TCP RST, especialmente en protocolos que usan conexiones de vida larga, como BGP."}],"vendorComments":[{"organization":"Red Hat","comment":"The DHS advisory is a good source of background information about the\nissue: http://www.us-cert.gov/cas/techalerts/TA04-111A.html\n\nIt is important to note that the issue described is a known function of TCP. In order to perform a connection reset an attacker would need to know the source and destination ip address and ports as well as being able to guess the sequence number within the window. These requirements seriously reduce the ability to trigger a connection reset on normal TCP connections. The DHS advisory explains that BGP routing is a specific case where being able to trigger a reset is easier than expected as the end points can be easily determined and\nlarge window sizes are used. BGP routing is also signficantly affected by having it’s connections terminated. The major BGP peers have recently switched to requiring md5 signatures which mitigates against this attack.\n\nThe following article from Linux Weekly News also puts the flaw into context and shows why it does not pose a significant threat:\nhttp://lwn.net/Articles/81560/\n\nRed Hat does not have any plans for action regarding this issue.\n","lastModified":"2006-08-16T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*","versionEndExcluding":"11.4","matchCriteriaId":"4B07F91B-3981-423E-9ECF-752CC64D4E03"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:11.4:-:*:*:*:*:*:*","matchCriteriaId":"5C947EA2-329F-4AC7-A1F4-64164C20CC4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:11.4:r1:*:*:*:*:*:*","matchCriteriaId":"926EDB84-E8C5-4030-8B69-CDA9BF1A9D94"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:11.4:r10:*:*:*:*:*:*","matchCriteriaId":"8CAECB8C-6B4D-440C-B031-2CF3061393DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:11.4:r2:*:*:*:*:*:*","matchCriteriaId":"BAD7336D-EAAC-4817-9D3A-5664B0AAE6AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:11.4:r3:*:*:*:*:*:*","matchCriteriaId":"BC336F14-5D8D-4B28-8F47-2A5EFFC7800C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:11.4:r4:*:*:*:*:*:*","matchCriteriaId":"C47F92DD-59C4-4C86-9360-86E840243123"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:11.4:r5:*:*:*:*:*:*","matchCriteriaId":"DE6B95FB-F936-430A-B715-7430327E1872"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:11.4:r6:*:*:*:*:*:*","matchCriteriaId":"D4A8F07B-110F-4FE4-BA09-F23A4D1DCA5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:11.4:r7:*:*:*:*:*:*","matchCriteriaId":"78A3616E-9666-4D09-9ED7-EFD796E6E08E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:11.4:r8:*:*:*:*:*:*","matchCriteriaId":"2ACF87F1-B5DD-469A-87D6-94AD8D0758F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:11.4:r9:*:*:*:*:*:*","matchCriteriaId":"9D4F8B25-B632-4C4B-9E90-3DF9FC98207B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:11.4r13:s2:*:*:*:*:*:*","matchCriteriaId":"0A6BC136-FFA2-40AB-8E27-0B6CC153471F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:11.4x27:*:*:*:*:*:*:*","matchCriteriaId":"80EFC6D6-43F9-4277-ACAC-D5929AF6FF7D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1:-:*:*:*:*:*:*","matchCriteriaId":"BCE524EE-245F-4750-9963-9D0FB7A6A965"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1r:*:*:*:*:*:*:*","matchCriteriaId":"ECE31A7E-657C-49FC-B3F8-5654B0C6087E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:-:*:*:*:*:*:*","matchCriteriaId":"86141A33-344E-4152-8B76-2DB383954F02"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d10:*:*:*:*:*:*","matchCriteriaId":"AC405A12-112D-4C9D-90DA-6ED484109793"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d15:*:*:*:*:*:*","matchCriteriaId":"3FC42F2D-7593-4DBE-AE89-A6B78E7F9089"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d20:*:*:*:*:*:*","matchCriteriaId":"731A6469-3DE0-491A-BCC5-7642FB347ACE"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d25:*:*:*:*:*:*","matchCriteriaId":"D12A8119-3E59-4062-9A04-1F6EA48B78E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d30:*:*:*:*:*:*","matchCriteriaId":"E8B33B80-3189-4412-BFE0-359E755AB07A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x44:d35:*:*:*:*:*:*","matchCriteriaId":"C0E8F87E-DEB2-4849-ABB5-75A67CFD2D39"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x45:-:*:*:*:*:*:*","matchCriteriaId":"A4D7E551-A150-415E-80D5-374DAB29B6D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x45:d10:*:*:*:*:*:*","matchCriteriaId":"A5306185-574A-43B4-8B3B-1B047CA36D66"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x45:d15:*:*:*:*:*:*","matchCriteriaId":"79F1F205-A4A9-4161-B6CF-55CEEFD7D8D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x45:d20:*:*:*:*:*:*","matchCriteriaId":"33FD6DB0-F995-4A22-A97F-6276AFE9EFB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:-:*:*:*:*:*:*","matchCriteriaId":"92F31F7F-02E0-4E63-A600-DF8AB4E3BAA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*","matchCriteriaId":"A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*","matchCriteriaId":"4FD4237A-C257-4D8A-ABC4-9B2160530A4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.1x47:-:*:*:*:*:*:*","matchCriteriaId":"ABBEDB3F-5FD1-4290-A80A-7EAD9B9C38C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.2:-:*:*:*:*:*:*","matchCriteriaId":"AF8575EF-C83B-4241-B033-A2C020E29286"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.2:r1:*:*:*:*:*:*","matchCriteriaId":"43B661F8-1F43-4073-9275-AE1FFCB17BF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.2:r2:*:*:*:*:*:*","matchCriteriaId":"EF88921E-18E4-49B2-AAF4-ED8C393D4750"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.2:r3:*:*:*:*:*:*","matchCriteriaId":"144DA08B-A129-4DC6-81D2-782BD7C3074B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.2:r4:*:*:*:*:*:*","matchCriteriaId":"F1936A41-302E-4546-9F7A-CAE3A3C68718"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.2:r5:*:*:*:*:*:*","matchCriteriaId":"6EB55673-5857-452F-9D22-B422CC9CC3F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.2:r6:*:*:*:*:*:*","matchCriteriaId":"03D4519D-1289-47E9-BFB7-E3831BFD50F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.2:r7:*:*:*:*:*:*","matchCriteriaId":"77CDB10F-3BCE-41AF-B633-DFAC9B8A5D9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:-:*:*:*:*:*:*","matchCriteriaId":"223C12D0-61A0-4C12-8AFC-A0CB64759A31"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*","matchCriteriaId":"371A7DF8-3F4B-439D-8990-D1BC6F0C25C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r2:*:*:*:*:*:*","matchCriteriaId":"7CC3BCFD-2B0F-4994-9FE4-9D37FA85F1E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r3:*:*:*:*:*:*","matchCriteriaId":"C6F309FD-0A5A-4C86-B227-B2B511A5CEB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r4:*:*:*:*:*:*","matchCriteriaId":"960059B5-0701-4B75-AB51-0A430247D9F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:12.3:r5:*:*:*:*:*:*","matchCriteriaId":"1D1DCA52-DA81-495B-B516-5571F01E3B0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.1:-:*:*:*:*:*:*","matchCriteriaId":"67B3BF03-9919-4C12-97A3-B20161725F35"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.1:r1:*:*:*:*:*:*","matchCriteriaId":"FCD4D8EB-8625-47CD-8F0E-D2FC8CAA5462"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.1:r2:*:*:*:*:*:*","matchCriteriaId":"A0150A4C-2C5A-49FC-8FB3-B93CB45B8284"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.1:r3:*:*:*:*:*:*","matchCriteriaId":"BFEB7A59-7536-4A92-A9C8-79FDE657B8AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:-:*:*:*:*:*:*","matchCriteriaId":"931D77A8-FA39-479E-91DB-CDDC9113252B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r1:*:*:*:*:*:*","matchCriteriaId":"D3A0A607-7D3C-4F2A-B5F5-576A70649CB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r2:*:*:*:*:*:*","matchCriteriaId":"32E9620A-7C0A-474C-919E-13609FFE580D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.2:r3:*:*:*:*:*:*","matchCriteriaId":"672D3A38-92B4-4F33-82A6-B2D3F3403AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:-:*:*:*:*:*:*","matchCriteriaId":"FE2FBBA2-6185-463F-96D3-9AB2C778B4F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:13.3:r1:*:*:*:*:*:*","matchCriteriaId":"3FF9FF91-9184-4D18-8288-9110E35F4AE5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp3:*:*:*:*:*:*","matchCriteriaId":"530FC172-94E1-481A-9810-26061D22B6AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*","matchCriteriaId":"CA2CBE65-F4B6-49AF-983C-D3CF6C172CC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:-:*:*:*:*:*:*:*","matchCriteriaId":"40FC681A-7B85-4495-8DCC-C459FE7E2F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:-:*:*:*:*:*:*:*","matchCriteriaId":"A2354216-8103-49F9-A95C-7DE4F738BBEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:itanium:*","matchCriteriaId":"5AA32D8C-430E-4CA2-B2DF-FFF63714F480"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*","matchCriteriaId":"E3C43D05-40F8-4769-BA6B-A376420EA972"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:-:*","matchCriteriaId":"7BC4A4A0-4EEE-4C51-BFF4-4B65C815AB4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:itanium:*","matchCriteriaId":"72CC2D03-538A-4603-B4FF-C6930F9D7E20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:*:x64:*:*:*:*:*","matchCriteriaId":"5894A4E3-D063-4BE2-8579-B9BBF581EE98"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp1:*:*:*:*:*:*","matchCriteriaId":"2572F7E5-75A3-4C11-866B-A4E9ADBD8D08"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp1:*:*:*:*:itanium:*","matchCriteriaId":"54879DE7-47AE-4E94-986C-4D956B64411C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*","matchCriteriaId":"34DF3B5E-F17F-49B4-9DC8-06749F3C9CC3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*","matchCriteriaId":"964B57CD-CB8A-4520-B358-1C93EC5EF2DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*","matchCriteriaId":"8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openpgp:openpgp:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"FE7DB4DC-5369-4087-B055-F1B1BFB50812"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:network_data_loss_prevention:*:*:*:*:*:*:*:*","versionEndIncluding":"8.6","matchCriteriaId":"F205B07D-D1C9-4761-9C63-D7BE5E2C73CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"40679A45-CE96-4F49-B552-8FB5B6AD493F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"99FB50CA-9C49-4358-8C1F-803CC976408D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:network_data_loss_prevention:9.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8D153658-7BAF-42D3-AA20-3B6193EB184B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7AC78BA4-70F4-4B9F-93C2-B107E4DCC418"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*","matchCriteriaId":"28A10F5A-067E-4DD8-B585-ABCD6F6B324E"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"249FA642-3732-4654-88CB-3F1D19A5860A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"5071CA39-65B3-4AFB-8898-21819E57A084"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A3C3F588-98DA-4F6F-A083-2B9EE534C561"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xinuos:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3E2AD5B8-44C1-4981-A795-E76EFFD8C96E"},{"vulnerable":true,"criteria":"cpe:2.3:o:xinuos:openserver:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"29E97E1A-268A-4F18-86A4-39A960E2082C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:xinuos:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"25A2CA45-7476-4D11-9236-15072E4C9CA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:xinuos:unixware:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F96B92D7-ED2E-439C-B1D7-949628CF4456"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc","source":"cve@mitre.org","tags":["Third Party Advisory","Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt","source":"cve@mitre.org","tags":["Third Party Advisory","Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt","source":"cve@mitre.org","tags":["Third Party Advisory","Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt","source":"cve@mitre.org","tags":["Third Party Advisory","Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc","source":"cve@mitre.org","tags":["Third Party Advisory","Broken Link"]},{"url":"http://kb.juniper.net/JSA10638","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108302060014745&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=108506952116653&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11440","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory","VDB Entry","Broken Link"]},{"url":"http://secunia.com/advisories/11458","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory","VDB Entry","Broken Link"]},{"url":"http://secunia.com/advisories/22341","source":"cve@mitre.org","tags":["Permissions Required","Third Party Advisory","VDB Entry","Broken Link"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/415294","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.osvdb.org/4030","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/449179/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/449179/100/0/threaded","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10183","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.uniras.gov.uk/vuls/2004/236929/index.htm","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-111A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2006/3983","source":"cve@mitre.org","tags":["Permissions Required","Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15886","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10053","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Broken Link"]},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.14/SCOSA-2005.14.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040403-01-A.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Broken Link"]},{"url":"http://kb.juniper.net/JSA10638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108302060014745&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=108506952116653&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory","VDB Entry","Broken Link"]},{"url":"http://secunia.com/advisories/11458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory","VDB Entry","Broken Link"]},{"url":"http://secunia.com/advisories/22341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Third Party Advisory","VDB Entry","Broken Link"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040420-tcp-ios.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/415294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.osvdb.org/4030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/449179/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/449179/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.uniras.gov.uk/vuls/2004/236929/index.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-111A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2006/3983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required","Broken Link"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0231","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to \"Insecure temporary file and directory creations.\""},{"lang":"es","value":"Múltiples vulnerabilidades en Midnight Commander (mc) anteriores a 4.6.0, con impacto desconocido, relacionadas con \"creación insegura de ficheros y directorios temporales.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.40:*:*:*:*:*:*:*","matchCriteriaId":"EB4028BE-4173-4175-B9EF-A85A47476A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.41:*:*:*:*:*:*:*","matchCriteriaId":"FC64619A-D8C3-4613-9A51-849DC65DC959"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.42:*:*:*:*:*:*:*","matchCriteriaId":"0A4BBBE0-E96D-4BCB-BF5B-673888C00AC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.43:*:*:*:*:*:*:*","matchCriteriaId":"D410B4E1-DA7A-4F62-A0F9-E8C5A147BD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.44:*:*:*:*:*:*:*","matchCriteriaId":"949399A7-6E77-4F12-86EE-7B6FBAA16D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.45:*:*:*:*:*:*:*","matchCriteriaId":"FDE8085F-84F3-4305-A52B-FEFF05E9FD17"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.46:*:*:*:*:*:*:*","matchCriteriaId":"D5DA21F1-8700-437C-8D64-70D97A508598"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.47:*:*:*:*:*:*:*","matchCriteriaId":"B03CA3A4-86E2-4E10-8F56-51B814F51540"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.48:*:*:*:*:*:*:*","matchCriteriaId":"F5AA5CCF-F160-4092-A7E7-29459E2528F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.49:*:*:*:*:*:*:*","matchCriteriaId":"F2B90B64-72A2-46D3-A6CC-07052FC70740"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.50:*:*:*:*:*:*:*","matchCriteriaId":"1E7739C2-C590-479E-8A0B-2EC95E836E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.51:*:*:*:*:*:*:*","matchCriteriaId":"25C1FE96-BC31-48D3-BB64-F132E17B8244"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.52:*:*:*:*:*:*:*","matchCriteriaId":"0BFFA28E-B2EA-4F1A-8A05-7F2B05572B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.55:*:*:*:*:*:*:*","matchCriteriaId":"E5969E22-C2B8-4440-92D0-EF17ECFECFCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.6:*:*:*:*:*:*:*","matchCriteriaId":"98D27DF4-BCF6-4AB8-9117-80E2D1072C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:0.5:*:*:*:*:*:*:*","matchCriteriaId":"980553F2-8662-47CF-95F0-645141746AEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:0.7:*:*:*:*:*:*:*","matchCriteriaId":"40EBF1CD-B392-4262-8F06-2C784ADAF0F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.1a:*:*:*:*:*:*:*","matchCriteriaId":"9C00F84A-FCD4-4935-B7DE-ECBA6AE9B074"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"960DC6C2-B285-41D4-96F7-ED97F8BD5482"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D1FD0EB4-E744-4465-AFEE-A3C807C9C993"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*","matchCriteriaId":"1D866A7D-F0B9-4EA3-93C6-1E7C2C2A861F"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*","matchCriteriaId":"57772E3B-893C-408A-AA3B-78C972ED4D5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"F432C6C2-8676-4DD5-B9E6-71F6C164EF9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"300A6A65-05FD-401C-80F6-B5F5B1F056E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"AA3D53C9-3806-45E6-8AE9-7D41280EF64C"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200405-21.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-497","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:039","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_12_mc.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-172.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16020","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200405-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_12_mc.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-172.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0232","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code."},{"lang":"es","value":"Mútiples vulnerabilidades de cadena de formato en Midnight Commander (mc) anteriores a 4.6.0 pueden permitir a atacantes causar una denegación de servicio o ejecutar código de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.40:*:*:*:*:*:*:*","matchCriteriaId":"EB4028BE-4173-4175-B9EF-A85A47476A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.41:*:*:*:*:*:*:*","matchCriteriaId":"FC64619A-D8C3-4613-9A51-849DC65DC959"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.42:*:*:*:*:*:*:*","matchCriteriaId":"0A4BBBE0-E96D-4BCB-BF5B-673888C00AC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.43:*:*:*:*:*:*:*","matchCriteriaId":"D410B4E1-DA7A-4F62-A0F9-E8C5A147BD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.44:*:*:*:*:*:*:*","matchCriteriaId":"949399A7-6E77-4F12-86EE-7B6FBAA16D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.45:*:*:*:*:*:*:*","matchCriteriaId":"FDE8085F-84F3-4305-A52B-FEFF05E9FD17"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.46:*:*:*:*:*:*:*","matchCriteriaId":"D5DA21F1-8700-437C-8D64-70D97A508598"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.47:*:*:*:*:*:*:*","matchCriteriaId":"B03CA3A4-86E2-4E10-8F56-51B814F51540"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.48:*:*:*:*:*:*:*","matchCriteriaId":"F5AA5CCF-F160-4092-A7E7-29459E2528F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.49:*:*:*:*:*:*:*","matchCriteriaId":"F2B90B64-72A2-46D3-A6CC-07052FC70740"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.50:*:*:*:*:*:*:*","matchCriteriaId":"1E7739C2-C590-479E-8A0B-2EC95E836E3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.51:*:*:*:*:*:*:*","matchCriteriaId":"25C1FE96-BC31-48D3-BB64-F132E17B8244"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.52:*:*:*:*:*:*:*","matchCriteriaId":"0BFFA28E-B2EA-4F1A-8A05-7F2B05572B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.5.55:*:*:*:*:*:*:*","matchCriteriaId":"E5969E22-C2B8-4440-92D0-EF17ECFECFCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:midnight_commander:midnight_commander:4.6:*:*:*:*:*:*:*","matchCriteriaId":"98D27DF4-BCF6-4AB8-9117-80E2D1072C6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*","matchCriteriaId":"26430687-409B-448F-934B-06AB937DDF63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:0.5:*:*:*:*:*:*:*","matchCriteriaId":"980553F2-8662-47CF-95F0-645141746AEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:0.7:*:*:*:*:*:*:*","matchCriteriaId":"40EBF1CD-B392-4262-8F06-2C784ADAF0F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.1a:*:*:*:*:*:*:*","matchCriteriaId":"9C00F84A-FCD4-4935-B7DE-ECBA6AE9B074"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"960DC6C2-B285-41D4-96F7-ED97F8BD5482"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D1FD0EB4-E744-4465-AFEE-A3C807C9C993"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*","matchCriteriaId":"1D866A7D-F0B9-4EA3-93C6-1E7C2C2A861F"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*","matchCriteriaId":"57772E3B-893C-408A-AA3B-78C972ED4D5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"F432C6C2-8676-4DD5-B9E6-71F6C164EF9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"300A6A65-05FD-401C-80F6-B5F5B1F056E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"AA3D53C9-3806-45E6-8AE9-7D41280EF64C"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200405-21.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-497","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:039","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_12_mc.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-172.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16021","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200405-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_12_mc.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-172.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0233","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files."},{"lang":"es","value":"Utempter permite nombres de dispositivo que contengan secuencias de cruce de directorios \"..\" (punto punto), lo que permite a usuarios locles sobreesciribir ficheros de su elección mediante un ataque de enlaces simbólicos en nombres de dispositivos en combinación con una aplicación que confíe en ficheros utmp o wtmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:utempter:utempter:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"E720990E-7705-49FD-9254-88C22F261E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:utempter:utempter:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"C4196D87-419F-495F-96AB-4D3CAB37C70D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:*:*:*:*:*:*:*:*","matchCriteriaId":"F432C6C2-8676-4DD5-B9E6-71F6C164EF9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"AA3D53C9-3806-45E6-8AE9-7D41280EF64C"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200405-05.xml","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000752.1-1","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:031","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-174.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-175.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10178","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404389","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15904","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10115","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A979","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200405-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000752.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-174.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-175.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.404389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15904","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0234","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en la pila en la función get_header de header.c de LHA 1.14 utilizado en productos como Barracuda Spam Firewall, permite a atacantes remotos o a usuarios locales ejecutar código arbitrario mediante nombres de fichero o de directorio largos en un archivo LHA, lo que dispara el desbordamiento cuando se prueba o se extrae un fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EFE4FA19-F2EA-4292-A441-2E4A39366942"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FA5D7FD1-D5AB-4987-801A-FA464C31298A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.2:*:*:*:*:*:*:*","matchCriteriaId":"772710C7-41FE-47E2-B0D7-A3C8D36C8808"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7358AD98-44C1-4CC4-BD50-CFF3822F3A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"AAA1C283-E518-4BC6-BBF0-FCE09F9E0F17"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5B8A74FB-07B0-42D6-ABF3-D7A073A329E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"49668AFD-4821-4D5A-BEBD-DF55A8AB58C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"57E0BFFD-D777-43A5-AEE8-765F55C86E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.6_sp1:*:*:*:*:*:*:*","matchCriteriaId":"DAF9A151-6EBF-4760-A154-A34FF7C9E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CA12B965-672C-444D-9774-0F76FE47EA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"E6C9B32C-5EC9-46BD-AA77-F414A143576C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"823C27EB-C00F-4A7E-B832-013A50A1EE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"BD217379-28E7-465E-843D-E7204EE0E89F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.13:*:*:*:*:*:*:*","matchCriteriaId":"EB96CB8A-59F3-4624-B2BA-687ECF929B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_gateways:*:*:*:*:*","matchCriteriaId":"6CC9AA17-3EF4-4BC5-9E29-5A6525B9AC51"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_servers:*:*:*:*:*","matchCriteriaId":"A9C60C23-FC4D-4D14-B3E3-ECD797888AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_workstations:*:*:*:*:*","matchCriteriaId":"D04E2381-68CB-455F-8878-17C8E4112C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_gateways:*:*:*:*:*","matchCriteriaId":"4AE00A20-8152-48D9-9AC4-EA359284E635"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_servers:*:*:*:*:*","matchCriteriaId":"6B334073-9FF3-4F75-8702-51DB6937B7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_workstations:*:*:*:*:*","matchCriteriaId":"2D553EF0-6A08-4DD0-A301-99AADAFBFFBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.60:*:samba_servers:*:*:*:*:*","matchCriteriaId":"C8C41338-0651-425E-A823-C8CBD91977D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:client_security:*:*:*:*:*","matchCriteriaId":"46F72328-7B69-4A1B-A065-E65544F27A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:mimesweeper:*:*:*:*:*","matchCriteriaId":"2BA28970-0DB9-433E-83A1-36BF05DB062A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:windows_servers:*:*:*:*:*","matchCriteriaId":"C0D25A1D-2B31-4B29-96FE-A793F8244F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:workstations:*:*:*:*:*","matchCriteriaId":"AC90ADFD-32FE-4EA1-9583-5EFE585152CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:mimesweeper:*:*:*:*:*","matchCriteriaId":"B490FC59-616A-4F90-95D8-50F9C0D6CB40"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:windows_servers:*:*:*:*:*","matchCriteriaId":"858468E0-4208-4703-A3AA-4BF6CC254DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:workstations:*:*:*:*:*","matchCriteriaId":"4E26052D-35B8-44E7-8F66-442BA55F4483"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:client_security:*:*:*:*:*","matchCriteriaId":"CBA4A9B7-626A-4539-852F-96C49D860E41"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:6.21:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"19828867-7079-4233-A3B8-BF7A3052FB8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2003:*:*:*:*:*:*:*","matchCriteriaId":"831F0C4D-C85F-46DA-BC9E-D3F56DE2B085"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2004:*:*:*:*:*:*:*","matchCriteriaId":"7F996B07-8B07-42A6-86FC-B5B55F708861"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_for_firewalls:6.20:*:*:*:*:*:*:*","matchCriteriaId":"119D5A71-E7C2-4603-9D78-A161D82BC2D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2003:*:*:*:*:*:*:*","matchCriteriaId":"6689D4E1-F8DC-46D9-BA35-4E4AE9C28456"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2004:*:*:*:*:*:*:*","matchCriteriaId":"0429B86A-F228-44E8-ABBB-D57BEE3679F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_personal_express:4.5:*:*:*:*:*:*:*","matchCriteriaId":"72DE7015-C1FF-4803-8B28-5AF5ECC3AAB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_personal_express:4.6:*:*:*:*:*:*:*","matchCriteriaId":"D04F7296-3290-40D1-9CFB-E52FADAE5719"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_personal_express:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B9A0DDB6-4B86-430E-879A-C835DBB96C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*","matchCriteriaId":"AC782BFC-6BA0-4823-8A6D-F7D83F55393C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*","matchCriteriaId":"E1B09025-47B9-4F77-9DA6-80885E9A4EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*","matchCriteriaId":"C1011521-AEF2-40EB-B671-66B20FF01CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:lha:1.14i-9:*:i386:*:*:*:*:*","matchCriteriaId":"EB59539A-8973-45C8-A553-1B524DA43937"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stalker:cgpmcafee:3.2:*:*:*:*:*:*:*","matchCriteriaId":"FC4CB399-2E2F-4A73-BA41-3EFB0DBDC404"},{"vulnerable":true,"criteria":"cpe:2.3:a:tsugio_okamoto:lha:1.14:*:*:*:*:*:*:*","matchCriteriaId":"081C75A4-FDB1-4941-8276-985570632A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:tsugio_okamoto:lha:1.15:*:*:*:*:*:*:*","matchCriteriaId":"A623BD1B-DB9A-4545-9970-E3492AA39A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:tsugio_okamoto:lha:1.17:*:*:*:*:*:*:*","matchCriteriaId":"8984B914-9850-405C-AAE6-A7C266F13BA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:9.0:*:*:*:*:*:*:*","matchCriteriaId":"523ADB29-C3D5-4C06-89B6-22B5FC68C240"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2006-04/0059.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020778.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108422737918885&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/19514","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-02.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1015866","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-515","source":"cve@mitre.org"},{"url":"http://www.guay-leroux.com/projects/barracuda-advisory-LHA.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5753","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5754","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-178.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-179.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10243","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/1220","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1833","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16012","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A977","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9881","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2006-04/0059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020778.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108422737918885&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1015866","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.guay-leroux.com/projects/barracuda-advisory-LHA.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-178.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-179.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/1220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9881","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0235","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes (\"//absolute/path\")."},{"lang":"es","value":"Múltiples vulnerabilidades de atravesamiento de directorios en LHA 1.14 permite a atacantes locales o usuarios locales crear ficheros arbitrarios mediante un archivo LHA conteniendo nombres de fichero con secuencias (1) \"..\" (punto punto) o (2) rutas absolutas con barra inicial doble (\"//ruta/absoluta\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EFE4FA19-F2EA-4292-A441-2E4A39366942"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FA5D7FD1-D5AB-4987-801A-FA464C31298A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.2:*:*:*:*:*:*:*","matchCriteriaId":"772710C7-41FE-47E2-B0D7-A3C8D36C8808"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7358AD98-44C1-4CC4-BD50-CFF3822F3A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"AAA1C283-E518-4BC6-BBF0-FCE09F9E0F17"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5B8A74FB-07B0-42D6-ABF3-D7A073A329E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"49668AFD-4821-4D5A-BEBD-DF55A8AB58C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"57E0BFFD-D777-43A5-AEE8-765F55C86E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.6_sp1:*:*:*:*:*:*:*","matchCriteriaId":"DAF9A151-6EBF-4760-A154-A34FF7C9E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CA12B965-672C-444D-9774-0F76FE47EA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"E6C9B32C-5EC9-46BD-AA77-F414A143576C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"823C27EB-C00F-4A7E-B832-013A50A1EE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"BD217379-28E7-465E-843D-E7204EE0E89F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.13:*:*:*:*:*:*:*","matchCriteriaId":"EB96CB8A-59F3-4624-B2BA-687ECF929B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_gateways:*:*:*:*:*","matchCriteriaId":"6CC9AA17-3EF4-4BC5-9E29-5A6525B9AC51"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_servers:*:*:*:*:*","matchCriteriaId":"A9C60C23-FC4D-4D14-B3E3-ECD797888AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_workstations:*:*:*:*:*","matchCriteriaId":"D04E2381-68CB-455F-8878-17C8E4112C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_gateways:*:*:*:*:*","matchCriteriaId":"4AE00A20-8152-48D9-9AC4-EA359284E635"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_servers:*:*:*:*:*","matchCriteriaId":"6B334073-9FF3-4F75-8702-51DB6937B7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_workstations:*:*:*:*:*","matchCriteriaId":"2D553EF0-6A08-4DD0-A301-99AADAFBFFBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.60:*:samba_servers:*:*:*:*:*","matchCriteriaId":"C8C41338-0651-425E-A823-C8CBD91977D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:client_security:*:*:*:*:*","matchCriteriaId":"46F72328-7B69-4A1B-A065-E65544F27A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:mimesweeper:*:*:*:*:*","matchCriteriaId":"2BA28970-0DB9-433E-83A1-36BF05DB062A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:windows_servers:*:*:*:*:*","matchCriteriaId":"C0D25A1D-2B31-4B29-96FE-A793F8244F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:workstations:*:*:*:*:*","matchCriteriaId":"AC90ADFD-32FE-4EA1-9583-5EFE585152CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:mimesweeper:*:*:*:*:*","matchCriteriaId":"B490FC59-616A-4F90-95D8-50F9C0D6CB40"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:windows_servers:*:*:*:*:*","matchCriteriaId":"858468E0-4208-4703-A3AA-4BF6CC254DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:workstations:*:*:*:*:*","matchCriteriaId":"4E26052D-35B8-44E7-8F66-442BA55F4483"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:client_security:*:*:*:*:*","matchCriteriaId":"CBA4A9B7-626A-4539-852F-96C49D860E41"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:6.21:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"19828867-7079-4233-A3B8-BF7A3052FB8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2003:*:*:*:*:*:*:*","matchCriteriaId":"831F0C4D-C85F-46DA-BC9E-D3F56DE2B085"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2004:*:*:*:*:*:*:*","matchCriteriaId":"7F996B07-8B07-42A6-86FC-B5B55F708861"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_for_firewalls:6.20:*:*:*:*:*:*:*","matchCriteriaId":"119D5A71-E7C2-4603-9D78-A161D82BC2D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2003:*:*:*:*:*:*:*","matchCriteriaId":"6689D4E1-F8DC-46D9-BA35-4E4AE9C28456"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2004:*:*:*:*:*:*:*","matchCriteriaId":"0429B86A-F228-44E8-ABBB-D57BEE3679F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_personal_express:4.5:*:*:*:*:*:*:*","matchCriteriaId":"72DE7015-C1FF-4803-8B28-5AF5ECC3AAB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_personal_express:4.6:*:*:*:*:*:*:*","matchCriteriaId":"D04F7296-3290-40D1-9CFB-E52FADAE5719"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_personal_express:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B9A0DDB6-4B86-430E-879A-C835DBB96C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*","matchCriteriaId":"AC782BFC-6BA0-4823-8A6D-F7D83F55393C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*","matchCriteriaId":"E1B09025-47B9-4F77-9DA6-80885E9A4EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*","matchCriteriaId":"C1011521-AEF2-40EB-B671-66B20FF01CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:lha:1.14i-9:*:i386:*:*:*:*:*","matchCriteriaId":"EB59539A-8973-45C8-A553-1B524DA43937"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:stalker:cgpmcafee:3.2:*:*:*:*:*:*:*","matchCriteriaId":"FC4CB399-2E2F-4A73-BA41-3EFB0DBDC404"},{"vulnerable":true,"criteria":"cpe:2.3:a:tsugio_okamoto:lha:1.14:*:*:*:*:*:*:*","matchCriteriaId":"081C75A4-FDB1-4941-8276-985570632A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:tsugio_okamoto:lha:1.15:*:*:*:*:*:*:*","matchCriteriaId":"A623BD1B-DB9A-4545-9970-E3492AA39A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:tsugio_okamoto:lha:1.17:*:*:*:*:*:*:*","matchCriteriaId":"8984B914-9850-405C-AAE6-A7C266F13BA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:9.0:*:*:*:*:*:*:*","matchCriteriaId":"523ADB29-C3D5-4C06-89B6-22B5FC68C240"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108422737918885&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200405-02.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-515","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-178.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-179.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10243","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1833","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16013","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10409","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A978","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108422737918885&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200405-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-May/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-178.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-179.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0236","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain unauthorized access via the password field."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en login.asp de thePHOTOtool permite a atacantes remotos obtener acceso no autorizado mediante el campo password (contraseña)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steelid:thephototool:*:*:*:*:*:*:*:*","matchCriteriaId":"D670748B-7A95-4C66-88EC-650DD16EA214"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107576894019530&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Feb/1008906.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6727","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9884","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15007","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107576894019530&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2004/Feb/1008906.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6727","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0237","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Aprox PHP Portal allows remote attackers to read arbitrary files via a full pathname in the show parameter."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en index.php de Aprox PHP Portal permite a atacantes remotos la lectura de ficheros arbitrarios mediante su ruta completa en el parámetro show."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:aprox_portal:aprox_portal:3.0_final:*:*:*:*:*:*:*","matchCriteriaId":"7376F6E4-63B4-4B5F-8036-908B768A611B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107577555527321&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008915","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10859","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9540","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15014","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107577555527321&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0238","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute arbitrary code in the client via a long HOME environment variable in the (1) load_cfg and (2) save_cfg functions; possibly allow remote attackers to execute arbitrary code via long strings to (3) the send_message function; and, in the server, via (4) the parse_command_line function."},{"lang":"es","value":"Múltiples desbordamientos de búfer en verkill (0verkill) 0.15pre3 permite que usuarios locales ejecuten código de su elección en el cliente a través de un una variable de entorno HOME en las funciones (1) load_cfg y (2) save_cfg; posiblemente permite a atacantes remotos ejecutar código de su elección a través de cadenas largas en la (3)función send_message y, en el servidor, a través de (4)la función parse_command_line."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:0verkill:0verkill:0.16:*:*:*:*:*:*:*","matchCriteriaId":"A9082D8E-C94D-4CDC-AF4F-2BB795D29054"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016579.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107577335424509&w=2","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/securitynews/5AP010KC0C.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9550","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14999","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15000","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016579.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107577335424509&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/securitynews/5AP010KC0C.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14999","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15000","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0239","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauthorized access via the photo variable."},{"lang":"es","value":"Vulnerabilidad de inyección de código SQL en showphoto.php de PhotoPost PHP Pro 4.6 y anteriores permite que atacantes remotos obtengan acceso no autorizado mediante la variable photo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:3.1:*:*:*:*:*:*:*","matchCriteriaId":"C2C8CE03-944A-480E-9349-9143A74ADCBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:3.2:*:*:*:*:*:*:*","matchCriteriaId":"762D922E-387C-41D6-BA4B-9D97692B7570"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:3.3:*:*:*:*:*:*:*","matchCriteriaId":"8D07B06C-3872-4D39-95FA-C0FAEBD9C2DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C36E11FE-5E1F-4BF9-A223-64B74984C5DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:4.1:*:*:*:*:*:*:*","matchCriteriaId":"5D19ECFF-EAE7-4FCB-BE21-B0C08FF65AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:4.6:*:*:*:*:*:*:*","matchCriteriaId":"8F04E77C-C9ED-4CAE-964C-6AB395BFEBE4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107582512023998&w=2","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/securitynews/5KP010UC0W.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9557","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15008","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107582512023998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/securitynews/5KP010UC0W.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0240","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a .. (dot dot) in the shop_closed_file argument to auth.php."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en X-Cart 3.4.3  permite que atacantes remotos vean ficheros arbitrarios mediante un argumento .. (punto punto) a shop_closed_file de auth.php"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8D8A255F-6C87-4400-A6E3-F12A510E9483"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D648DB94-F9C6-42E6-919D-A4DCF0412CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3E7223D2-62D9-42D3-B408-49D880B648D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"493B9800-3D8F-4711-B0F6-C4667A6B4AA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2D03FBE3-B36C-495C-96F3-427FECAA0ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FE3A8B97-1D7D-4BCB-8141-1E3A37628DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.4.11:*:*:*:*:*:*:*","matchCriteriaId":"0179F0D3-BC83-4935-84AE-A34324380108"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107582648326448&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15033","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107582648326448&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0241","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php."},{"lang":"es","value":"X-Cart 3.4.3 permite que atacantes remotos ejecuten comandos arbitrarios a través del argumento perl_binary en upgrade.php o general.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8D8A255F-6C87-4400-A6E3-F12A510E9483"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D648DB94-F9C6-42E6-919D-A4DCF0412CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3E7223D2-62D9-42D3-B408-49D880B648D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"493B9800-3D8F-4711-B0F6-C4667A6B4AA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2D03FBE3-B36C-495C-96F3-427FECAA0ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FE3A8B97-1D7D-4BCB-8141-1E3A37628DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.4.11:*:*:*:*:*:*:*","matchCriteriaId":"0179F0D3-BC83-4935-84AE-A34324380108"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107582648326448&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9560","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15034","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107582648326448&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0242","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2) perlinfo command."},{"lang":"es","value":"X-Cart 3.4.3 permite que atacantes remotos obtengan información relevante mediante el parámetro de modo en los comandos phpinfo o perlinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"8D8A255F-6C87-4400-A6E3-F12A510E9483"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D648DB94-F9C6-42E6-919D-A4DCF0412CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3E7223D2-62D9-42D3-B408-49D880B648D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"493B9800-3D8F-4711-B0F6-C4667A6B4AA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"2D03FBE3-B36C-495C-96F3-427FECAA0ACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FE3A8B97-1D7D-4BCB-8141-1E3A37628DE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualiteam:x-cart:3.4.11:*:*:*:*:*:*:*","matchCriteriaId":"0179F0D3-BC83-4935-84AE-A34324380108"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107582648326448&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9563","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15036","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107582648326448&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9563","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0243","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote attackers to guess the password via brute force methods."},{"lang":"es","value":"Cuando está deshabilitado el login remoto en AiX4.3.3 hasta AIX5.1  muestra un mensaje diferencte si la contraseña es correcta, lo que permite que atacantes remotos adivinen la contraseña por métodos de fuerza bruta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","matchCriteriaId":"F7F01A55-7C37-4BAF-A4D4-61E8AC54FF79"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:*:*:*:*:*:*:*:*","versionStartIncluding":"4.3.3","versionEndIncluding":"5.1","matchCriteriaId":"C6FCB46F-45F5-4B7D-805E-588DE9F441D5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0313.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=107583269206044&w=2","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15172","source":"cve@mitre.org","tags":["VDB Entry","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0313.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=107583269206044&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-0244","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module allow local users to cause a denial of service (hang or reset) by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet."},{"lang":"es","value":"Los sistemas Cisco de la serie 6000, 6500 y 76000 con Multilayer Switch Feature Card 2 (MSFC2) y módulo OSM  FlexWAN permiten que usuarios locales causen una denegación de servicio enviando un paquete de capa 2 que encapsule otro de capa 3, pero con valores de longitud incorrecto para ese paquete."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.7},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"}]}]}],"references":[{"url":"http://secunia.com/advisories/10780","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040203-cat6k.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/810062","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9562","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15013","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5828","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040203-cat6k.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/810062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0245","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service (crash) by sending a HTTP POST request with a large or negative Content-Length, which causes an integer divide-by-zero."},{"lang":"es","value":"Web Crossing 4.x y 5.x permite que atacantes remotos causen una denegación de servicio (caída) enviando una petición HTTP POST con un Content-Length muy grande o negativo (provoca una división por cero)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web_crossing_inc:web_crossing:4.0:*:*:*:*:*:*:*","matchCriteriaId":"20DD0BAD-193B-4AD6-AE22-6C52D928ECFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:web_crossing_inc:web_crossing:5.0:*:*:*:*:*:*:*","matchCriteriaId":"5E213B75-9825-4207-AB87-5B4903D2DE26"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107586518120516&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9576","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15022","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107586518120516&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9576","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15022","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0246","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in (1) fonctions.lib.php, (2) derniers_commentaires.php, and (3) admin.php in Les Commentaires 2.0 allow remote attackers to execute arbitrary PHP code via the rep parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de código PHP remoto en functions.lib.php, admini.php y derniers_commentaires.php en Les Commentaires 2.0 permite que atacantes remotos ejecuten código PHP arbitrario modificando el parámetro \"rep\" para referenciar una URL en un servidor web remoto que contenga el código."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:laurent_adda:les_commentaires:2.0:*:*:*:*:*:*:*","matchCriteriaId":"10D7E08B-2377-435B-AB5F-6E879D34ABA9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107584083719763&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10768/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9536","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15010","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107584083719763&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10768/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0247","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service (crash via exception) via a UDP packet with a length field that is greater than the actual data length, which causes Chaser to read unexpected memory."},{"lang":"es","value":"El cliente y el servidor de Chaser 1.50 y anteriores permite que atacantes remotos provoquen una denegación de servicio (caída) mediante un paquete UDP con un campo de longitud que es mayor que la longitud real de los datos (lo que provoca leer memoria inexperadamente)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cauldron:chaser_client:1.5:*:*:*:*:*:*:*","matchCriteriaId":"0092E5FF-5978-4DD7-A1E3-CB9F3D640754"},{"vulnerable":true,"criteria":"cpe:2.3:a:cauldron:chaser_server:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"FC5912C4-EBE1-4928-BC62-2E39B4E1417F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cauldron:chaser_server:1.5:*:*:*:*:*:*:*","matchCriteriaId":"49C5DD74-599D-4D6A-91A0-233380B00C4B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107584109420084&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9567","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15031","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107584109420084&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0248","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is addressed in the following product release:\r\nPHPX, PHPX, 3.2.4","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability (XSS) in PHPX 3.2.3 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into (1) keywords argument of main.inc.php, (2) body argument of help.inc.php, or (3) the subject field in Personal Messages and Forum."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en PHPX 3.2.3 permite que atacantes remotos ejecuten script arbirtrario como otros usuarios inyectando HTML arbitrario o script  dentro de los argumentos: (1) \"keywords\" de main.inc.php, (2) \"body\" de help.inc.php o (3) el campo asunto de Personal Messages and Forum"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A692A925-E22A-4A35-96F8-8F9E123B44E0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107586932324901&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10797/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9569","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15050","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15051","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107586932324901&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10797/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0249","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID."},{"lang":"es","value":"PHPX 3.2.3>/b> permite que atacantes remotos obtengan acceso a otras cuentas modificando la variable PXL de la cooky referenciando la ID de otro usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A692A925-E22A-4A35-96F8-8F9E123B44E0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0154.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107586932324901&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10797/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9569","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15052","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15512","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0154.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107586932324901&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10797/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15512","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0250","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php."},{"lang":"es","value":"Vulnerabilidad de inyección de código SQL en PhotoPost PHP Pro 4.6 y anteriores  permite que atacantes remotos ganen privilegios mediante (1) el parámetro \"product\" en showproduct.php ó (2) el parámetro \"cat\" en showcat.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:3.1:*:*:*:*:*:*:*","matchCriteriaId":"C2C8CE03-944A-480E-9349-9143A74ADCBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:3.2:*:*:*:*:*:*:*","matchCriteriaId":"762D922E-387C-41D6-BA4B-9D97692B7570"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:3.3:*:*:*:*:*:*:*","matchCriteriaId":"8D07B06C-3872-4D39-95FA-C0FAEBD9C2DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C36E11FE-5E1F-4BF9-A223-64B74984C5DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:4.1:*:*:*:*:*:*:*","matchCriteriaId":"5D19ECFF-EAE7-4FCB-BE21-B0C08FF65AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:4.6:*:*:*:*:*:*:*","matchCriteriaId":"8F04E77C-C9ED-4CAE-964C-6AB395BFEBE4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107593114909696&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9557","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zone-h.org/en/advisories/read/id=3864/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15008","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107593114909696&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zone-h.org/en/advisories/read/id=3864/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0251","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in rxgoogle.cgi allows remote attackers to execute arbitrary script as other users via the query parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en rxgoogle.cgi permite que atacantes remotos ejecuten script arbitrario como otro usuario mediante el parámetro \"query\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rxgoogle.cgi:rxgoogle.cgi:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6B38AC69-7FE8-43AA-8499-80516F58F00D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107594183924958&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9575","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15043","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107594183924958&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9575","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0252","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service (CPU consumption) via an empty USER name."},{"lang":"es","value":"TYPSoft FTP Server 1.10  permite que atacantes remotos provoquen una denegación de servicio (consumo de CPU) mediante un nombre USER vacío."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typsoft:typsoft_ftp_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"4F905CD6-D28F-4001-A879-DEB90ED6320F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107591511716707&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/alerts/2004/Feb/1008943.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15048","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107591511716707&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/alerts/2004/Feb/1008943.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15048","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0253","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Cloudscape 5.1 running jdk 1.4.2_03 allows remote attackers to execute arbitrary programs or cause a denial of service via certain SQL code, possibly due to a SQL injection vulnerability."},{"lang":"es","value":"IBM Cloudscape 5.1 sobre jdk 1.4.2_03 permite que atacantes remotos ejecuten programas arbitrarios o causen una denegación de servicio mediante cierto código SQL (posiblemente, debido a una vulnerabilidad de inyección de SQL)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:cloudscape:5.1:*:*:*:*:*:*:*","matchCriteriaId":"88BAC51D-2A09-41A1-BB65-17BB4C2673AC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107604065819233&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9583","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15067","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107604065819233&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15067","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0254","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Discuz! Board 2.x and 3.x allows remote attackers to execute arbitrary script as other users via an img tag."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados en Discuz! Board 2.x y 3.x  permite que atacantes remotos ejecuten script arbitrario a través de un tag \"img\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crosscom_olicom:discuz:2.0:*:*:*:*:*:*:*","matchCriteriaId":"85E3C526-76E6-4B59-A5BB-23DA238A5BE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:crosscom_olicom:discuz:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DA823A1E-F72A-4EC6-AC16-23716173B9D7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107606726417150&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9584","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15066","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107606726417150&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15066","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0255","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . (dot) and / (slash) characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow."},{"lang":"es","value":"Xlight 1.52, con registro de mensajes en pantalla activado, permite a atacantes remotos causar una denegación de servicio solicitando un directorio largo consistente en caractéres . (punto) y / (barra), lo que hace que el servidor se caiga cuando el administrador visualiza el fichero de registro, posiblemente disparando un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xlight_ftp_server:xlight_ftp_server:1.25:*:*:*:*:*:*:*","matchCriteriaId":"370C00A2-E338-481E-A094-31D88E96C274"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlight_ftp_server:xlight_ftp_server:1.41:*:*:*:*:*:*:*","matchCriteriaId":"3B626835-21D2-472D-BF90-97369B01BA1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlight_ftp_server:xlight_ftp_server:1.45:*:*:*:*:*:*:*","matchCriteriaId":"6EB5EC65-21A5-484A-91BA-3D1E10D9AC36"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlight_ftp_server:xlight_ftp_server:1.52:*:*:*:*:*:*:*","matchCriteriaId":"190EDA56-3CE8-452E-BD25-4DC89EFEC62F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107605633904122&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9585","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15064","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107605633904122&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15064","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0256","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp."},{"lang":"es","value":"GNU libtool anteriores a 1.5.2, durante la compilación, permite a usuarios locales sobreescribir ficheros arbitrarios mediante un ataque de enlaces simbólicos en directorios de libtool en /tmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D5215486-F7EB-4A4F-B2FD-7FD7A0622BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A155124-93FB-4BF4-921C-A725659B5FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3913A8C6-BB84-4F98-8E15-89F46DD97D27"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.3:*:*:*:*:*:*:*","matchCriteriaId":"53078611-5F8C-4772-B02C-49385817C565"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"011AFF50-B79D-49A0-9592-6DC0F3B035CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"6169ACF4-8F2C-4FD8-9C14-884D7DE1C308"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"38A4AF7D-59DE-4754-82EF-184FC016ACCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"A94FD25D-ED17-4765-92C5-2A6CDADD4EC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.4:*:*:*:*:*:*:*","matchCriteriaId":"66DD96CF-883A-4A1F-BC96-9961251CD98F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7DC9BB6C-3B55-49E6-A5DF-DBF8CF867598"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"06C62528-7FE5-4281-9A65-351F1B64E2C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"251BD921-207F-4BA5-BD91-A73E6300328A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:libtool:1.5:*:*:*:*:*:*:*","matchCriteriaId":"0418D690-1347-49A7-9962-BA70DA7858E7"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000811","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10777","source":"cve@mitre.org"},{"url":"http://www.geocrawler.com/mail/msg.php3?msg_id=3438808&list=405","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3795","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/352333","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9530","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15017","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000811","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.geocrawler.com/mail/msg.php3?msg_id=3438808&list=405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/352333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0257","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service (crash) by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port."},{"lang":"es","value":"OpenBSD 3.4 y NetBSD 1.6 y 1.6.1 permiten a atacantes remotos causar una denegación de servicio (caida) enviand un paquete IPv6 con una MTU pequeña a un puerto en escucha y a continuación un conectar TCP a ese puerto."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*","matchCriteriaId":"28A10F5A-067E-4DD8-B585-ABCD6F6B324E"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"249FA642-3732-4654-88CB-3F1D19A5860A"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1957B3C0-7F25-469B-BC3F-7B09260837ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-002.txt.asc","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016704.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107604603226564&w=2","source":"cve@mitre.org"},{"url":"http://www.guninski.com/obsdmtu.html","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet6/ip6_output.c","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3825","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9577","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15044","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-002.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016704.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107604603226564&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.guninski.com/obsdmtu.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet6/ip6_output.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0258","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed (1) .RP, (2) .RT, (3) .RAM, (4) .RPM or (5) .SMIL files."},{"lang":"es","value":"Múltiples desbordamientos de búfer en RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, y RealPlayer Enterprise permiten a atacantes remotos ejecutar código de su elección mediante ficheros 1) .RP, (2) .RT, (3) .RAM, (4) .RPM o (5) .SMIL malformados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_desktop_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"C9200BD8-6D2F-49D4-B85B-C17D2C0F400E"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_enterprise_desktop:6.0.11.774:*:*:*:*:*:*:*","matchCriteriaId":"27DDB6F2-9EAF-4A77-BB3B-D3989E1D9458"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CF6535A6-6647-4E60-B5AA-24DFC06360AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:2.0:*:win:*:*:*:*:*","matchCriteriaId":"B49F1421-2C52-4B67-BE04-A62E553E1819"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.11.818:*:*:*:*:*:*:*","matchCriteriaId":"0C6BB6A9-B0CE-4C04-8481-53B7CB195264"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.11.830:*:*:*:*:*:*:*","matchCriteriaId":"41688192-70B7-4C35-AE4F-FE116104137A"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.11.841:*:*:*:*:*:*:*","matchCriteriaId":"FA11D9CD-113B-4977-B150-D6500552222A"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.11.853:*:*:*:*:*:*:*","matchCriteriaId":"BF391DD1-2912-49BF-BC9F-B9FA3771737F"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.11.868:*:*:*:*:*:*:*","matchCriteriaId":"3908DB26-D8C4-4368-A1B6-C067085CE4B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:8.0:*:mac_os:*:*:*:*:*","matchCriteriaId":"971CE8B9-8A57-4849-9461-E4E79D1AB6F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:8.0:*:unix:*:*:*:*:*","matchCriteriaId":"96180A27-295D-4C5E-9ED1-8D4F77C72183"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:8.0:*:win32:*:*:*:*:*","matchCriteriaId":"003D7E29-9970-4984-9756-C070E15B7979"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"9FDC43D9-C93E-4FB4-B05B-9FB519B03DCA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0027.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107608748813559&w=2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-075.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/473814","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/advisories/realone.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9579","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.service.real.com/help/faq/security/040123_player/EN/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15040","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107608748813559&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-075.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/473814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.nextgenss.com/advisories/realone.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.service.real.com/help/faq/security/040123_player/EN/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15040","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0259","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The check_referer() function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via an empty or spoofed HTTP Referer, as demonstrated using an application on the same web server that contains a cross-site scripting (XSS) issue."},{"lang":"es","value":"La función check_referer() en Formmail.php 5.0 y anteriores permite a atacantes remotos saltarse restricciones de acceso mediante un Referente HTTP vacío o suplantado, como se ha demostrado usando una aplicación en el mismo servidor web que contiene un problema de secuencias de comandos en sitios cruzados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joe_lumbroso_acks:formmail.php:2.0:*:*:*:*:*:*:*","matchCriteriaId":"48186EA1-E911-49D9-8FB8-76B3C0653901"},{"vulnerable":true,"criteria":"cpe:2.3:a:joe_lumbroso_acks:formmail.php:5.0:*:*:*:*:*:*:*","matchCriteriaId":"84C48F13-B46F-48B3-B4D6-EE76FF83A412"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107619109629629&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9591","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15079","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107619109629629&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0260","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AddToMailingList function in CactuSoft CactuShop 5.0 Lite contains a backdoor that allows remote attackers to delete arbitrary files via an email address that starts with |||."},{"lang":"es","value":"La función AddToMailingList en CactuSoft 5.0 Lite contiene una puerta trasera que permite a atacantes remotos borrar ficheros de su elección mediante una dirección de correo electrónico que comience con ||| (tres barras verticales)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cactusoft:cactushop_lite:5.0:*:*:*:*:*:*:*","matchCriteriaId":"0868136B-D65D-4722-830E-2F8201AB1C31"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016819.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107619501815888&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9589","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15063","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016819.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107619501815888&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15063","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0261","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel via a 0 in the uid parameter."},{"lang":"es","value":"oj.cgi en OpenJournal 2.0 a 2.0.5 permite a atacantes remotos saltarse la autenticación y acceder al panel de control mediante un 0 en el parámetro uid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openjournal:openjournal:2.0:*:*:*:*:*:*:*","matchCriteriaId":"65B74FBD-AF7F-413F-9879-EFA9CBFC1921"},{"vulnerable":true,"criteria":"cpe:2.3:a:openjournal:openjournal:2.0_1:*:*:*:*:*:*:*","matchCriteriaId":"9819A503-F63E-4E21-A353-9ABB6BB1A6AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openjournal:openjournal:2.0_2:*:*:*:*:*:*:*","matchCriteriaId":"2EF2FC40-D51B-43A6-A64B-6D70BD4F31EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openjournal:openjournal:2.0_3:*:*:*:*:*:*:*","matchCriteriaId":"099119F6-3F35-4047-B1B1-906FC9D9ED25"},{"vulnerable":true,"criteria":"cpe:2.3:a:openjournal:openjournal:2.0_4:*:*:*:*:*:*:*","matchCriteriaId":"620E2EC7-C0DB-4653-B500-24FDAFC5E85A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openjournal:openjournal:2.0_5:*:*:*:*:*:*:*","matchCriteriaId":"8488D7D9-6C5D-4EF9-BBC6-A1B3384CEB3C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107619136600713&w=2","source":"cve@mitre.org"},{"url":"http://www.grohol.com/downloads/oj/latest/changelog.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3872","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9598","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15069","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107619136600713&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.grohol.com/downloads/oj/latest/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0262","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in The Palace 3.5 and earlier client allows remote attackers to execute arbitrary code via a link to a palace:// url followed by a long server address string."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en The Palace 3.5 y anteriores permite a atacantes remotos ejecutar código arbitrario mediante un enlace a una url palace:// seguido de una cadena de dirección de servidor larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the_palace:the_palace_client:3.5:*:*:*:*:*:*:*","matchCriteriaId":"98A515D0-1ABC-4519-8BBD-218689031298"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0033.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107634556632195&w=2","source":"cve@mitre.org"},{"url":"http://www.elitehaven.net/thepalace.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9602","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15074","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0033.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107634556632195&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.elitehaven.net/thepalace.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0263","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information."},{"lang":"es","value":"PHP 4.3.4 y anteriores en Apache 1.x y 2.x (mod_php) pude filtrar variables globales entre servidores virtuales con diferente configuración que son manejadas por el mismo proceso hijo de Apache, lo que podría permitir a atacantes remotos obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"06F3141B-2C30-4230-A425-465E235539EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B6D2C9EA-1241-4DE6-A6CD-FCD7EEC9B42D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B5EA86B9-4F86-4ADA-BC6A-4F6E261848F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"CA6523AC-ECC9-4A79-9387-18308FCF9A68"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"BDCBCF0F-63FB-4A03-92F8-FF121083CD85"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"4363C07C-179B-4797-947F-7440AD1F2D00"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"0AB1AA4A-DF05-445A-858F-39A9CC2892A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"AB26F3B0-04F8-43C1-9136-B85932F1C2F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"28EC1F94-04F3-490A-8324-1EB60EEBAD4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"30D94958-0D13-4076-B6F0-61D505136789"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B22DA22E-54DA-46CF-B3AE-4B0900D8086A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F90F496A-5D57-448F-A46F-E15F06CBFD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"89B58983-633F-4D20-80AE-8E7EB865CF83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.7:*:dev:*:*:*:*:*","matchCriteriaId":"34FD94C9-2352-4147-9BF2-A3CF841A159B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"19C8989C-D8A6-4AE9-99B6-F2DAE5999EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"7B6EE0E2-D608-4E72-A0E5-F407511405C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"33FD6791-3B84-40CA-BCF4-B5637B172F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"6DDD2F69-CFD4-4DEA-B43A-1337EEFA95A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"0A80B17D-FD66-40BD-9ADC-FE7A3944A696"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*","matchCriteriaId":"713ADED4-CBE5-40C3-A128-99CFABF24560"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"70FA0B8E-1A90-4939-871A-38B9E93BCCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*","matchCriteriaId":"83BDEAE5-29B9-48E3-93FA-F30832044C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.22:*:*:*:*:*:*:*","matchCriteriaId":"A2720E06-1B0E-4BFE-8C85-A17E597BB151"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.23:*:*:*:*:*:*:*","matchCriteriaId":"3EE1DECF-36C7-4968-8B7A-7A2034C2A957"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.24:*:*:*:*:*:*:*","matchCriteriaId":"B67BD173-8517-4E97-BC65-D9657C63601A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.25:*:*:*:*:*:*:*","matchCriteriaId":"B392A96F-FD2F-4073-8EED-EB31E1F20FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.26:*:*:*:*:*:*:*","matchCriteriaId":"E130104B-86F5-411E-8AC0-9B4B780BCA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.27:*:*:*:*:*:*:*","matchCriteriaId":"0E62E621-74DA-4D99-A79C-AD2B85896A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.28:*:*:*:*:*:*:*","matchCriteriaId":"2C577188-BD56-4571-A61A-1684DC9E9DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.29:*:*:*:*:*:*:*","matchCriteriaId":"5B3A4CD9-1E96-4D3B-938D-F2D15855B0DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"163A6EF6-7D3F-4B1F-9E03-A8C86562CC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"154566FB-0D1A-4DC2-AFE6-49DE93850951"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*","matchCriteriaId":"EB477AFB-EA39-4892-B772-586CF6D2D235"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*","matchCriteriaId":"5C4962BB-0E61-4788-B582-21F05CD33AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*","matchCriteriaId":"B35906CD-038E-4243-8A95-F0A3A43F06F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"B940BB85-03F5-46D7-8DC9-2E1E228D3D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*","matchCriteriaId":"82139FFA-2779-4732-AFA5-4E6E19775899"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*","matchCriteriaId":"B7F717E6-BACD-4C8A-A9C5-516ADA6FEE6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*","matchCriteriaId":"08AB120B-2FEC-4EB3-9777-135D81E809AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*","matchCriteriaId":"1C7FF669-12E0-4A73-BBA7-250D109148C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*","matchCriteriaId":"5AB7B1F1-7202-445D-9F96-135DC0AFB1E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*","matchCriteriaId":"BCB7EE53-187E-40A9-9865-0F3EDA2B5A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*","matchCriteriaId":"9D06AE8A-9BA8-4AA8-ACEA-326CD001E879"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:*","matchCriteriaId":"2FC1A04B-0466-48AD-89F3-1F2EF1DEBE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:*","matchCriteriaId":"19F34D08-430E-4331-A27D-667149425176"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.45:*:*:*:*:*:*:*","matchCriteriaId":"248BDF2C-3E78-49D1-BD9C-60C09A441724"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.46:*:*:*:*:*:*:*","matchCriteriaId":"BB0FDE3D-1509-4375-8703-0D174D70B22E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.47:*:*:*:*:*:*:*","matchCriteriaId":"AFE732B5-00C9-4443-97E0-1DF21475C26B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.48:*:*:*:*:*:*:*","matchCriteriaId":"C79C41D3-6894-4F2D-B8F8-82AB4780A824"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"E5C3A030-EF04-4C82-BFD5-CF6459099B15"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200402-01.xml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3878","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9599","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15072","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200402-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15072","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0264","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"palmhttpd for PalmOS allows remote attackers to cause a denial of service (crash) by establishing two simultaneous HTTP connections, which exceeds the PalmOS accept queue."},{"lang":"es","value":"palmhttpd de PalmOS permite a atacantes remotos causar una denegación de servicio (caída) estableciendo dos conexiones HTTP simultáneas, lo que excede la cola de aceptaciones de PalmOS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jim_rees:jim_rees_httpd:palmos:*:*:*:*:*:*:*","matchCriteriaId":"321A60D4-CCE4-49A5-B59E-C051A3330CC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:shaun2k2:palmhttpd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"39826982-BCBD-4E21-B756-CB373217D2BB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107634638201570&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9608","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15090","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107634638201570&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15090","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0265","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote attackers to execute arbitrary script as other users via URL-encoded (1) title or (2) fname parameters in the News or Reviews modules."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en modules.php de Php-Nuke 6.x- 7.1.0 permite a atacantes remotos ejecutar scripts de su elección como otros usuarios mediante parámetros (1) título o (2) fname codifacidos en URL en los módulos News o Reviews."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107634727520936&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9605","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9613","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15076","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107634727520936&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0266","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the \"public message\" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote attackers to obtain the administrator password via the c_mid parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en la capacidad \"mensaje público\" (public_message) de php-nuke 6.x a 7.1.0 permite a atacantes remotos obtener la contraseña de administrador mediante el parámetro cmid."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107635110327066&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9615","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15080","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107635110327066&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15080","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0267","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) inoregupdate, (2) uniftest, or (3) unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to overwrite arbitrary files via a symlink attack on files in /tmp."},{"lang":"es","value":"Los scripts (1) inorgupdate, (2) uniftest, o (3) unimove de eTrust InoculateIT 6.0 para Linux permiten a usuarios locales sobreescribir ficheros de su elección mediante un ataque de enlaces simbólicos en /tmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:inoculateit:6.0:*:*:*:*:*:*:*","matchCriteriaId":"3CAE9329-AA34-4F56-B4BE-B028F021173B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107635584431518&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10833","source":"cve@mitre.org"},{"url":"http://www.excluded.org/advisories/advisory10.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/4735","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4855","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4856","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9616","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15102","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107635584431518&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.excluded.org/advisories/advisory10.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/4735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0268","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in EvolutionX 3921 and 3935 allow remote attackers to cause a denial of service (hang) via (1) a long cd command to the FTP server, or (2) a long dir command to the telnet server."},{"lang":"es","value":"Múltiples desbordamientos de búfer en EvolutionX 3921 y 3935 permiten a atacantes remotos causar una denegación de servicio (cuelgue) mediante (1) un comando cd largo al servidor FTP, o (2) un comando dir largo al servidor telnet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:evolutionx:evolutionx:build_3921:*:*:*:*:*:*:*","matchCriteriaId":"6BAE01D2-D50B-41E2-B3F2-B0B409F1B731"},{"vulnerable":true,"criteria":"cpe:2.3:a:evolutionx:evolutionx:build_3935:*:*:*:*:*:*:*","matchCriteriaId":"0BD24C68-ABEA-4974-BED9-15A87852996F"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016988.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107643394724891&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9631","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15104","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016988.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107643394724891&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0269","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en PHP-Nuke 6.9 y anteriores, y posiblemente 6.x, permite a atacantes remotos inyectar código SQL de su elección y obtener información sensible mediante (1) la variable category en el módulo Search. o (2) la variable admin en el módulo Web_Links."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A9E1DB3-F0A2-4BD8-9D9D-53CA07B50ACB"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:2.5:*:*:*:*:*:*:*","matchCriteriaId":"A7200662-F3B7-4755-8887-3BEEEDB469F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4CB52E20-9A87-4CE4-9E75-B0833F083845"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4E87A3E6-935F-4569-8B5F-70A88442FD4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D7E4C570-648F-48EF-B965-16C5878A0CBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.4:*:*:*:*:*:*:*","matchCriteriaId":"EC3CBB92-6A11-4B5B-A910-B0287AB12846"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:4.4.1a:*:*:*:*:*:*:*","matchCriteriaId":"4C17255B-64E1-4DFF-8C21-8BB1D78A5256"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.0:*:*:*:*:*:*:*","matchCriteriaId":"93B755A9-694E-49FA-9068-353203AF9965"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CA0B88AD-CACF-4E48-A4B1-313FFE32D058"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.1:*:*:*:*:*:*:*","matchCriteriaId":"FF4C3F85-A23C-40B9-9B0F-564E7C254AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.2:*:*:*:*:*:*:*","matchCriteriaId":"4EAF55C4-F0A7-4A36-B203-83670D58483F"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.2a:*:*:*:*:*:*:*","matchCriteriaId":"E3ED3BFC-C8CF-4537-832C-0D00400AC064"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C94B62CA-8D34-4B37-8748-1FE64F0299DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.4:*:*:*:*:*:*:*","matchCriteriaId":"8720AE61-41C7-4EA8-8C01-81AC0BFACBCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.5:*:*:*:*:*:*:*","matchCriteriaId":"2F6E1577-6E50-49E2-B968-8C2AA924142F"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA9AE983-B6FF-4686-BDB3-E6B12D4E853E"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107643348117646&w=2","source":"cve@mitre.org"},{"url":"http://www.scan-associates.net/papers/phpnuke69.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9630","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15115","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107643348117646&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.scan-associates.net/papers/phpnuke69.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0270","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program."},{"lang":"es","value":"libclamav de Clam AntiVirus 0.65 permite a atacantes remotos causar una denegación de servicio (caída) mediante un mensaje de correo electrónico con codificación uu con una longitud de línea inválida (por ejemplo, un carácter en minúsculas), lo que causa un error de asercíón en clamd que termina al programa llamante."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*","matchCriteriaId":"395AACCC-C20A-4BC1-BF62-D40FF71B7360"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107634700823822&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200402-07.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.freebsd.org/cgi/query-pr.cgi?pr=62586","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3894","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9610","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15077","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107634700823822&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200402-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.freebsd.org/cgi/query-pr.cgi?pr=62586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9610","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0271","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is addressed in the following product release:\r\nMaxWebPortal, MaxWebPortal, 1.32","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbitrary web script as other users via (1) the sub_name parameter of dl_showall.asp, (2) the SendTo parameter in Personal Messages, (3) the HTTP_REFERER for down.asp, or (4) the image name of an Avatar in the register form."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en MaxWebPortal permite a atacantes remotos ejecutar script de su elección como otros usuarios mediante (1) el parámetro sub_name de dl_showall.asp, (2) el parámetro SentTo en Mensajes Personales, (3) el HTTP_REFERER  de down.asp, o (4) en nombre de imagen de un avatar en el formulario de registro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxwebportal:maxwebportal:1.30:*:*:*:*:*:*:*","matchCriteriaId":"B22E55F5-AA5E-4F68-ACC2-F170D811FA08"},{"vulnerable":true,"criteria":"cpe:2.3:a:maxwebportal:maxwebportal:1.31:*:*:*:*:*:*:*","matchCriteriaId":"4CC20472-1004-43E0-8F91-4697824FA769"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107643014606515&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9625","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15120","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15122","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107643014606515&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15122","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0272","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in MaxWebPortal allows remote attackers to inject arbitrary SQL code and gain sensitive information via the SendTo parameter in Personal Messages."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en MaxWebPortal permite a atacantes remotos inyectar código SQL arbitrario de su elección y obtener información sensible mediante el parámetro SendTo en Mensajes Personales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:maxwebportal:maxwebportal:1.30:*:*:*:*:*:*:*","matchCriteriaId":"B22E55F5-AA5E-4F68-ACC2-F170D811FA08"},{"vulnerable":true,"criteria":"cpe:2.3:a:maxwebportal:maxwebportal:1.31:*:*:*:*:*:*:*","matchCriteriaId":"4CC20472-1004-43E0-8F91-4697824FA769"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107643014606515&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9625","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15121","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107643014606515&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15121","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0273","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that contains .. (dot dot) sequences in a .rjs skin file."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en  RealOne Player, RealOne Player 2.0, y  RealOne Enterprise Desktop permite a atacantes remotos subir ficheros arbitrarios mediante un fichero RMP que contenga secuencias .. (punto punto) en fichero de piel .rjs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_desktop_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"C9200BD8-6D2F-49D4-B85B-C17D2C0F400E"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_enterprise_desktop:6.0.11.774:*:*:*:*:*:*:*","matchCriteriaId":"27DDB6F2-9EAF-4A77-BB3B-D3989E1D9458"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CF6535A6-6647-4E60-B5AA-24DFC06360AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:2.0:*:win:*:*:*:*:*","matchCriteriaId":"B49F1421-2C52-4B67-BE04-A62E553E1819"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.11.818:*:*:*:*:*:*:*","matchCriteriaId":"0C6BB6A9-B0CE-4C04-8481-53B7CB195264"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.11.830:*:*:*:*:*:*:*","matchCriteriaId":"41688192-70B7-4C35-AE4F-FE116104137A"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.11.841:*:*:*:*:*:*:*","matchCriteriaId":"FA11D9CD-113B-4977-B150-D6500552222A"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.11.853:*:*:*:*:*:*:*","matchCriteriaId":"BF391DD1-2912-49BF-BC9F-B9FA3771737F"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.11.868:*:*:*:*:*:*:*","matchCriteriaId":"3908DB26-D8C4-4368-A1B6-C067085CE4B7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107642978524321&w=2","source":"cve@mitre.org"},{"url":"http://service.real.com/help/faq/security/040123_player/EN/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/514734","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9580","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15123","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107642978524321&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://service.real.com/help/faq/security/040123_player/EN/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/514734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0274","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT_OFFERED status to a bot that is not a sharebot, which allows remote attackers to use STAT_OFFERED to promote a bot to a sharebot and conduct unauthorized activities."},{"lang":"es","value":"Share.mdo en Eggheads Eggdrop IRC bot 1.6.10 a 1.6.15 puede asignar erróneamente el estado STAT_OFFERED a un bot que no es un sharebot. lo que permite a atacantes remotos usar STAT_OFFERED para promocionar una bot a sharebot y llevar a cabo actividades no autorizadas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.10:*:*:*:*:*:*:*","matchCriteriaId":"56E3D334-933E-4C1B-A4CE-A6D2B72E9F73"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.11:*:*:*:*:*:*:*","matchCriteriaId":"D1425BC4-3B84-4209-96AE-FD26BB38DBCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.12:*:*:*:*:*:*:*","matchCriteriaId":"46D8FE0F-5A80-4EFB-A657-2EAE671D1209"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.13:*:*:*:*:*:*:*","matchCriteriaId":"919799F4-3309-474F-B720-D777D6509746"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.14:*:*:*:*:*:*:*","matchCriteriaId":"7D819A53-CBF0-4A94-B66C-413EAD469454"},{"vulnerable":true,"criteria":"cpe:2.3:a:eggheads:eggdrop_irc_bot:1.6.15:*:*:*:*:*:*:*","matchCriteriaId":"1B286986-0FD3-4992-B344-48E1AFC8E260"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107634593827102&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107643315623958&w=2","source":"cve@mitre.org"},{"url":"http://mogan.nonsoloirc.com/egg_advisory.txt","source":"cve@mitre.org"},{"url":"http://www.eggheads.org/news/2004/04/10/26","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3928","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9606","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15084","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107634593827102&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107643315623958&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mogan.nonsoloirc.com/egg_advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eggheads.org/news/2004/04/10/26","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15084","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0275","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via the calendar parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en calendar_download.php de BosDates 3.2 y anteriores permite a atacantes remotos obtener información sensible y ganar acceso mediante el parámetro calendar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bosdev:bosdates:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0D797B5A-D235-4CDD-8E90-51BCA4B62173"},{"vulnerable":true,"criteria":"cpe:2.3:a:bosdev:bosdates:3.1:*:*:*:*:*:*:*","matchCriteriaId":"EFBF0B76-1C90-4B98-A92E-628AEE74A7E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bosdev:bosdates:3.2:*:*:*:*:*:*:*","matchCriteriaId":"E77A19F9-4400-4AE1-B163-6F49A040570F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107651618613575&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9639","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zone-h.org/en/advisories/read/id=3925/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15133","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107651618613575&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zone-h.org/en/advisories/read/id=3925/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15133","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0276","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request with a sequence of \"%\" characters and a missing Host field."},{"lang":"es","value":"La función get_real_string de Monkey HTTPD Daemon (monkeyd) 0.8.1 y anteriores permite a atacantes remotos causar una denegación de servicio (caída) mediante una petición HTTP con una secuencia de caractéres \"%\" y un campo Host no presente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:monkey-project:monkey:*:*:*:*:*:*:*:*","versionEndIncluding":"0.8.1","matchCriteriaId":"302C2CE4-E5B9-402D-B890-43F61052C0B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:monkey-project:monkey:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"84373192-14CC-44E3-BEC5-60D10C15E286"},{"vulnerable":true,"criteria":"cpe:2.3:a:monkey-project:monkey:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"9BF12CBB-9196-4E04-800A-1C00F23D122E"},{"vulnerable":true,"criteria":"cpe:2.3:a:monkey-project:monkey:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"52C164D0-C8E8-42A4-A32F-703DCFBE143C"},{"vulnerable":true,"criteria":"cpe:2.3:a:monkey-project:monkey:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"10D5B8BF-43EB-4D50-9791-B22B77651787"},{"vulnerable":true,"criteria":"cpe:2.3:a:monkey-project:monkey:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"C877910B-52A8-4B0F-9306-B7BED762B97F"},{"vulnerable":true,"criteria":"cpe:2.3:a:monkey-project:monkey:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"5CE29F0D-7E7C-4A02-98AC-673E2E96ED6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:monkey-project:monkey:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"F87631C2-ED8C-446E-B3C6-72A2DF672397"},{"vulnerable":true,"criteria":"cpe:2.3:a:monkey-project:monkey:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"98FE8E88-383E-403C-9FE0-B303FD8DA937"},{"vulnerable":true,"criteria":"cpe:2.3:a:monkey-project:monkey:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"E27D9B36-43BD-4573-9E1C-3D65D458BD88"},{"vulnerable":true,"criteria":"cpe:2.3:a:monkey-project:monkey:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"CAE9AD22-98BA-4780-904A-765A1E331B38"}]}]}],"references":[{"url":"http://aluigi.altervista.org/poc/monkeydos.zip","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107652610506968&w=2","source":"cve@mitre.org"},{"url":"http://monkeyd.sourceforge.net/","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3921","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9642","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15187","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/poc/monkeydos.zip","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107652610506968&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://monkeyd.sourceforge.net/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15187","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0277","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the username."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en Dream FTP 1.02 permite a atacantes remotos causar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante especificadores de cadena de formato en el nombre del usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bolintech:dream_ftp_server:1.02:*:*:*:*:*:*:*","matchCriteriaId":"26D763A2-E3D5-46E2-BAF9-AAD891F5FAA3"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016871.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107656166402882&w=2","source":"cve@mitre.org"},{"url":"http://www.security-protocols.com/modules.php?name=News&file=article&sid=1722","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9600","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15070","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016871.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107656166402882&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-protocols.com/modules.php?name=News&file=article&sid=1722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15070","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0278","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data than specified, which causes Ratbag to repeatedly check the socket for more data."},{"lang":"es","value":"El motor de juegos Ratbag, usado en productos como Dirt Track Racing, Leadfoot, y World of Outlaws Spring Cars, permite a atacantes remotos causar una denegación de servicio (consumición de CPU) mediante un paquete TCP que especifica la longitud de los datos para leer y otro paquete TCP enviado a continuación que contiene menos datos de los especificados, lo que hace que Ratbag compruebe el socket repetidamente esperando más datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ratbag:dirt_track_racing:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A32183BA-B42D-4AEA-A047-AA81447BC028"},{"vulnerable":true,"criteria":"cpe:2.3:a:ratbag:dirt_track_racing:2.0:*:*:*:*:*:*:*","matchCriteriaId":"43672CF5-63F0-481A-B790-C9511D97630E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ratbag:dirt_track_racing_australia:*:*:*:*:*:*:*:*","matchCriteriaId":"77913F99-C04B-40C4-8620-915584A03B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ratbag:dirt_track_racing_sprint_cars:*:*:*:*:*:*:*:*","matchCriteriaId":"3CDAD983-2248-44C4-B2E7-C784D235B027"},{"vulnerable":true,"criteria":"cpe:2.3:a:ratbag:leadfoot:*:*:*:*:*:*:*:*","matchCriteriaId":"678651DC-07B2-4F60-B411-9C6ED926C1A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ratbag:world_of_outlaws_sprint_cars:*:*:*:*:*:*:*:*","matchCriteriaId":"9BE240FF-0A9E-444D-9A08-02DCDCC118B2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107655269820530&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9644","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15188","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107655269820530&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15188","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0279","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AIM Sniff (aimSniff.pl) 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log."},{"lang":"es","value":"AIM Sniff (aimSniff.pl) 0.9b permite a usuarios locales sobreescribir ficheros de su elección mediante un ataque en /tmp/AS.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aim_sniff:aim_sniff:0.6:*:*:*:*:*:*:*","matchCriteriaId":"C8984316-3648-498F-A50F-16AD2FB46571"},{"vulnerable":true,"criteria":"cpe:2.3:a:aim_sniff:aim_sniff:0.7:*:*:*:*:*:*:*","matchCriteriaId":"360031A0-659B-4E19-B2B5-164E786EE9D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:aim_sniff:aim_sniff:0.8:*:*:*:*:*:*:*","matchCriteriaId":"404E580A-3526-4964-BEA2-711FFAD32B87"},{"vulnerable":true,"criteria":"cpe:2.3:a:aim_sniff:aim_sniff:0.9:*:*:*:*:*:*:*","matchCriteriaId":"B37E0573-B278-4384-8A1C-FDF7A3951326"},{"vulnerable":true,"criteria":"cpe:2.3:a:aim_sniff:aim_sniff:0.9b:*:*:*:*:*:*:*","matchCriteriaId":"D24154A2-0303-41FF-8979-40A2B29B2BE5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107662243303439&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9653","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15199","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107662243303439&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0280","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a \"%20\" (encoded space character), e.g. index.jsp%20."},{"lang":"es","value":"Caucho Technology Resin 2.1.21 permite a atacantes remotos ver la fuente JSP mediante una petición a un fichero .jsp que acaba en un carácter \"%20\" (espacio codificado en URL), por ejemplo index.jsp%20."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caucho_technology:resin:2.1.12:*:*:*:*:*:*:*","matchCriteriaId":"9D68E1FC-13B8-4718-BA4E-F747840F7798"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107635084830547&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9614","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15085","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107635084830547&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0281","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for \"WEB-INF..\", which is equivalent to \"WEB-INF\" in Windows."},{"lang":"es","value":"Caucho Technology Resin 2.1.12 permite a atacantes remotos obtener información sensible y ver los contenidos del directorio /WEB-INF/ mediante una petición HTTP de \"WEB-INF..\", que es equivalente a \"WEB-INF\" en Windows."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:caucho:resin:2.1.12:*:*:*:*:*:*:*","matchCriteriaId":"DD14F784-48E0-4F84-8F81-6AEC1A112249"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107635084830547&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/9617","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15087","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=107635084830547&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/9617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0282","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Crob FTP daemon 3.5.2 allows remote attackers to cause a denial of service (crash) by repeatedly connecting to and disconnecting from the server."},{"lang":"es","value":"El demonio FTP Crob 2.5.2 permite atacantes remotos causar una denegación de servicio (caída) conectándose y desconectándose repetidamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crob:crob_ftp_server:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"75974D5F-FA1C-4739-93FD-A2BE8682FA66"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107665920909374&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10882","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6621","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9651","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15201","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107665920909374&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6621","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15201","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0283","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mailmgr 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/mailmgr.unsort, (2) /tmp/mailmgr.tmp, or (3) /tmp/mailmgr.sort."},{"lang":"es","value":"Mailmgr 1.2.3 permite a usuarios locales sobreescribir ficheros de su elección mediane un ataque de enlaces simbólicos en (1) /tmp/mailmgr.unsort, (2) /tmp/mailmgr.tmp, o (3) /tmp/mailmgr.sort."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailmgr:mailmgr:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"89FAEB51-86AF-4021-AA29-A3A253B5AF2B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107665013714517&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9654","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15203","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107665013714517&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15203","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0284","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if \"Do not save encrypted pages to disk\" is disabled, via a web site or HTML e-mail that contains two null characters (%00) after the host name."},{"lang":"es","value":"Microsoft Internet Explorer 6.0, Outlook 2002, y Outlook 2003 permiten a atacantes remotos causar una denegación de servicio (consumición de CPU) si está desactivado \"No guardar las páginas cifradas en el disco), mediante un sitio web o un mensaje de correo electrónico que contenga dos caractéres nulos (%00) después del nombre de máquina."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2002:*:*:*:*:*:*:*","matchCriteriaId":"3FE6EAE0-5A8F-4A97-950B-879379A3C0F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"D3A4D9C5-A698-4523-8756-5D7EBAA47951"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0E20E02-43B2-499B-ADDD-B5B7003894D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*","matchCriteriaId":"C3189982-F780-4AC2-9663-E6D4DF9DD319"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107643134712133&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9629","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15127","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107643134712133&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15127","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0285","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMyGuests allow remote attackers to execute arbitrary PHP code via a URL in the _AMVconfig[cfg_serverpath] parameter."},{"lang":"es","value":"Vulnerabilidades de inyección remota de código PHP en  (1) AllMyVisitors, (2) AllMyLinks, y  (3) AllMyGuests permite a atacantes remotos ejecutar código PHP arbitrario modificando el parámetro _AMVconfig[cfg_serverpath] para hacer referencia a una URL en un servidor remoto que contenga template.inc.php"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-829"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allmyguests_project:allmyguests:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"150C15C9-E00B-4036-A7FC-86744751B596"},{"vulnerable":true,"criteria":"cpe:2.3:a:allmyguests_project:allmyguests:0.3:*:*:*:*:*:*:*","matchCriteriaId":"019F3A73-9303-4334-A542-29BF131BA145"},{"vulnerable":true,"criteria":"cpe:2.3:a:allmyguests_project:allmyguests:0.4:*:*:*:*:*:*:*","matchCriteriaId":"06392BCF-C5B2-42C8-8207-DB24C5AF51CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:allmyguests_project:allmyguests:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"16E01D6D-FC5E-4357-8AEE-16C9379A2717"},{"vulnerable":true,"criteria":"cpe:2.3:a:allmylinks_project:allmylinks:0.3:*:*:*:*:*:*:*","matchCriteriaId":"E889F41E-DE82-4CC6-B002-1397B2D9B4A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:allmylinks_project:allmylinks:0.4:*:*:*:*:*:*:*","matchCriteriaId":"DEB00D9B-B151-4B5A-8340-62C66A8D1474"},{"vulnerable":true,"criteria":"cpe:2.3:a:allmylinks_project:allmylinks:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FD4E88E-916D-4D55-8325-2D717A0EBD12"},{"vulnerable":true,"criteria":"cpe:2.3:a:allmylinks_project:allmylinks:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9795C144-FE57-4227-9F2D-7F019F63FD7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:allmylinks_project:allmylinks:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"5B86F765-5F8C-4FBC-B8D9-5F466D00F855"},{"vulnerable":true,"criteria":"cpe:2.3:a:allmylinks_project:allmylinks:0.4.9:*:*:*:*:*:*:*","matchCriteriaId":"DE67189F-E90F-47FD-B457-A0D761FBDE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:allmylinks_project:allmylinks:0.5:*:*:*:*:*:*:*","matchCriteriaId":"CF5B81E1-5579-44F8-B0F0-1E457EAA7A30"},{"vulnerable":true,"criteria":"cpe:2.3:a:allmyvisitors_project:allmyvisitors:0.3:*:*:*:*:*:*:*","matchCriteriaId":"1FAD2ADE-A8DA-47ED-957A-29E80ED15B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:allmyvisitors_project:allmyvisitors:0.4:*:*:*:*:*:*:*","matchCriteriaId":"A5EC815D-6510-4188-8D62-76385D6D5B4B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107696209514155&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107696235424865&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107696291728750&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.osvdb.org/6721","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9664","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15226","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15227","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15228","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=107696209514155&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107696235424865&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107696291728750&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.osvdb.org/6721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0286","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in RobotFTP 1.0 and 2.0 beta 1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long username."},{"lang":"es","value":"Desbordamiento de búfer en RoboFTP 1.0 y 2.0 beta 1 permite a atacantes remotos causar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante un nombre de usuario largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:robotftp:robotftp_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4FE54FB8-0967-4011-B936-65D196DC0027"},{"vulnerable":true,"criteria":"cpe:2.3:a:robotftp:robotftp_server:2.0_beta_1:*:*:*:*:*:*:*","matchCriteriaId":"4637993D-3E0F-40F5-A6BD-A15230D9CE15"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107696194306878&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9672","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15225","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107696194306878&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15225","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0287","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service (crash) via a RETR command with a long argument containing a large number of / (slash) characters, possibly triggering a buffer overflow."},{"lang":"es","value":"El servidor FTP Xlight 1.52 permite a usuarios remotos autenticados causar una denegación de servicio (caída) mediante un comando RETR con un argumento largo, posiblemente disparando un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xlight_ftp_server:xlight_ftp_server:1.52:*:*:*:*:*:*:*","matchCriteriaId":"190EDA56-3CE8-452E-BD25-4DC89EFEC62F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107695172917263&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9668","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15220","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107695172917263&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0288","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document."},{"lang":"es","value":"Desbordamiento de búfer en la función UdmDocTextBuf de mnoGoSearch 3.2.13 a 3.2.15 podría permitir a un atacante remoto ejecutar código de su elección indexando un documento grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.1.19:*:*:*:*:*:*:*","matchCriteriaId":"4E0B5216-258D-4BBA-B913-165CB40778D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.1.20:*:*:*:*:*:*:*","matchCriteriaId":"B8634099-098D-4EFE-BC5F-D27ED33B1DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.10:*:*:*:*:*:*:*","matchCriteriaId":"3E28A4BE-4345-45E0-954C-A6A38E99C1E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.13:*:*:*:*:*:*:*","matchCriteriaId":"07F268F1-379F-4462-86EC-F2161249E23F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.14:*:*:*:*:*:*:*","matchCriteriaId":"630B6DAB-787C-49E7-AD48-3CF7AB372541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.15:*:*:*:*:*:*:*","matchCriteriaId":"DC0B97DE-941B-468A-8B32-424C6B6CCA73"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107695139930726&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9667","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15209","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107695139930726&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15209","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0289","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in sdbscan in SignatureDB 0.1.1 allows local users to cause a denial of service (segmentation fault) via a database file that contains a large key parameter."},{"lang":"es","value":"Desbordamiento de búfer en sdbscan en SignatureDB 0.1.1 permite a usuarios locales causar una denegación de servicio (fallo de segmentación) mediante un fichero de base de datos que contiene un parámetro clave grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:signaturedb:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2ABF9264-28AC-4B91-8392-E630E8D5C29D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107695113832648&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9661","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15217","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107695113832648&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15217","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0290","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an information packet that contains large (1) battle type and (2) map name fields."},{"lang":"es","value":"Desbordamiento de búfer en Purge Jihad 2.0.1 y anteriores permite a servidores de juegos remotos ejecutar código de su elección mediane un paquete de información que contien campos de tipo de batalla y nombre de mapa grandes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freeform_interactive:purge:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"DE9FBFCC-E198-4EC8-954D-CEF762B9ABED"},{"vulnerable":true,"criteria":"cpe:2.3:a:freeform_interactive:purge_jihad:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"45850B59-9AC8-460B-AFAC-ABD093D2D76E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107695064204362&w=2","source":"cve@mitre.org"},{"url":"http://purge.worthplaying.com/phpbb/viewtopic.php?t=1167","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9671","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15216","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107695064204362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://purge.worthplaying.com/phpbb/viewtopic.php?t=1167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15216","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0291","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in post.php for YaBB SE 1.5.4 and 1.5.5 allows remote attackers to obtain hashed passwords via the quote parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en post.php de YaBB SE 1.5.4 y 1.5.5 permite a atacantes remotos obtener el resumen digital (hash) de contraseñas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1.5.4:*:second_edition:*:*:*:*:*","matchCriteriaId":"7B26D66C-05CC-4A25-98CD-B2C055EB0518"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1.5.5:*:second_edition:*:*:*:*:*","matchCriteriaId":"92385523-C1C9-4F93-A850-B8CE2D9B9AEB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107696318522985&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9674","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15224","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107696318522985&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15224","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0292","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in KarjaSoft Sami HTTP Server 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request."},{"lang":"es","value":"Desbordamiento de búfer en KarjaSoft Sami HTTP Server 1.0.4 permite a atacantes remotos causar una denegación de servicio (caída) y posiblemente ejectuar código de su elección mediante una petición HTTP GET larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:karjasoft:sami_http_server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"4E9AC817-E922-4741-BD30-03BAE53334BD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107703630913205&w=2","source":"cve@mitre.org"},{"url":"http://www.security-protocols.com/modules.php?name=News&file=article&sid=1746","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9679","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15237","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107703630913205&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security-protocols.com/modules.php?name=News&file=article&sid=1746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15237","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0293","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. (dot dot) in a HTTP request to (1) gotopage.cgi or (2) genindexpage.cgi."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directoros en ShopCartCGI 2.3 permite a atacantes remotos obtener ficheros de su elección mediante un .. (punto punto) en una petición HTTP a (1) gotopage.cgi, o (2) genindexpage.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shopcartcgi:shopcartcgi:2.3:*:*:*:*:*:*:*","matchCriteriaId":"5AF53DE4-6D71-4844-9ABB-D30B59DDBFEF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107703602707450&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9670","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zone-h.org/en/advisories/read/id=3962/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14982","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107703602707450&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zone-h.org/en/advisories/read/id=3962/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0294","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers to identify valid users and conduct a brute force password guessing attack."},{"lang":"es","value":"YaBB SP 1.3.1 muestra mensajes de erro diferentes cuando un usuario existe o no, lo que hace más fácil para atacantes remotos identificar usuarios válidos y llevar a cabo ataques de adivinación de contraseñas por fuerza bruta."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabbforumsoftware:yet_another_bulletin_board:1.0:sp1.3.1:*:*:*:*:*:*","matchCriteriaId":"C3A32E68-1840-4D96-BD69-7312A4DD49DD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107703591314745&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/9677","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15236","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=107703591314745&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/9677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0295","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a denial of service (CPU consumption) via an open idle connection."},{"lang":"es","value":"TsFtpSrv.exe de Broker FTP 6.1.0.0 permite a atacantes remotos causar una denegación de servicio mediante una conexión abierta inactiva."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:6.1_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BBF2FCE1-1202-4CA5-89FD-91CACCE94073"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107705346817241&w=2","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5IP0B0AC1I.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9680","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15242","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107705346817241&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5IP0B0AC1I.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15242","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0296","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a TsFtpSrv.exe to exit with an exception by opening and immediately closing a connection."},{"lang":"es","value":"TsFtpSrv.exe en Broker FTP 6.1.0 permite a atacantes remotos causar que TsFtpSrv.exe termine con una excepción abriendo y cerrando inmediatamente una conexión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:transsoft:broker_ftp_server:6.1_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BBF2FCE1-1202-4CA5-89FD-91CACCE94073"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107705346817241&w=2","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5IP0B0AC1I.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9680","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15241","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107705346817241&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5IP0B0AC1I.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15241","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0297","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length."},{"lang":"es","value":"Desbordamiento de búfer en el demonio Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) de Ipswitch IMail Server 8.03 permite a atacantes remotos causar una denegación de servicio (caída) y ejecutar código de su elección mediante un mensaje LDAP con una etiqueta de longitud larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3138FF2C-2D8A-4270-9A55-85FCA3622DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8A1F768F-1974-4612-BED3-A608CFCC019F"}]}]}],"references":[{"url":"http://www.idefense.com/application/poi/display?id=74","source":"cve@mitre.org"},{"url":"http://www.ipswitch.com/support/imail/releases/imail_professional/im805HF2.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/972334","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3984","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9682","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15243","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=74","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ipswitch.com/support/imail/releases/imail_professional/im805HF2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/972334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3984","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15243","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0298","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CesarFTP 0.99e allows remote attackers to cause a denial of service (CPU consumption) via a long RETR parameter."},{"lang":"es","value":"CesarFTP 0.99e permite a atacantes remotos causar una denegación de servicio (consumicion de CPU) mediante un parámetro RETR largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aclogic:cesarftp:0.99e:*:*:*:*:*:*:*","matchCriteriaId":"723AD56B-AB33-4328-AC1C-C75153C889F7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107712057628250&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9666","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15252","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107712057628250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15252","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0299","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in smallftpd 0.99 allows local users to cause a denial of service (crash) via an FTP request with a large number of \"/\" (slash) characters."},{"lang":"es","value":"Desbordamiento de búfer en smallftpd 0.99 permite a usuarios locales causar una denegación de servicio (caída) mediante una petición FTP con un gran número de caractéres \"/\" (barra)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smallftpd:smallftpd:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5740ECF8-7C18-4708-93B3-56FECDA9A97D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107714207708375&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9684","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15262","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107714207708375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15262","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0300","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via (1) the cat parameter in shop.php, (2) the id parameter in more.php, (3) the cat_manufacturer parameter in shop_by_brand.php, or (4) the id parameter in listing.php."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en Online Store Kit 3.0 permite a atacantes remotos inyectar SQL arbitrario y ganar acceso no autorizado mediante (1) el parámetro cat en shop.php, (2) el parámetro id en more.php, y (3) el parámetro cat_manufacturer en shop_by_brand.php, o (4) el parámetro id en listing.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecommerce_corporation_online:store_kit:3.0_lite:*:*:*:*:*:*:*","matchCriteriaId":"3A4E7003-79F8-41F7-83C7-213842CD8F7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecommerce_corporation_online:store_kit:3.0_pro:*:*:*:*:*:*:*","matchCriteriaId":"ECE2A17C-E33D-4527-AA90-0B1C39F63DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecommerce_corporation_online:store_kit:3.0_standard:*:*:*:*:*:*:*","matchCriteriaId":"50876CBB-538F-4AC0-AA89-7E5119F1A6E4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107712117913185&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10902/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Feb/1009092.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3973","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9676","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9687","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.systemsecure.org/advisories/ssadvisory16022004.php","source":"cve@mitre.org"},{"url":"http://www.zone-h.org/en/advisories/read/id=3972/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15232","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107712117913185&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10902/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2004/Feb/1009092.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.systemsecure.org/advisories/ssadvisory16022004.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zone-h.org/en/advisories/read/id=3972/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0301","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en more.php de Online Store Kit 3.0 permite a atacantes remotos inyectar código HTML arbitrario mediante el parámetro id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecommerce_corporation_online:store_kit:3.0_lite:*:*:*:*:*:*:*","matchCriteriaId":"3A4E7003-79F8-41F7-83C7-213842CD8F7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecommerce_corporation_online:store_kit:3.0_pro:*:*:*:*:*:*:*","matchCriteriaId":"ECE2A17C-E33D-4527-AA90-0B1C39F63DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecommerce_corporation_online:store_kit:3.0_standard:*:*:*:*:*:*:*","matchCriteriaId":"50876CBB-538F-4AC0-AA89-7E5119F1A6E4"}]}]}],"references":[{"url":"http://secunia.com/advisories/10902/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Feb/1009079.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9676","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.systemsecure.org/advisories/ssadvisory16022004.php","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15235","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10902/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Feb/1009079.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9676","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.systemsecure.org/advisories/ssadvisory16022004.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15235","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0302","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter in index.php, (2) editfile in glossary.php, or (3) editfile in newmultiplechoice.php."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en OWLS 1.0 permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en los parámetros (1) file en index.php, (2) editfile en glossary.php, o (3) editfile en newmultiplechoice.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fools_workshop:owls_workshop:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4A3FEA72-3492-4503-87EC-8E7C76455E04"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107712123305706&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9689","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zone-h.org/en/advisories/read/id=3973/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15249","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107712123305706&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zone-h.org/en/advisories/read/id=3973/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15249","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0303","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossaries/index.php, (2) the filename parameter in /readings/index.php, or (3) the filename parameter in /multiplechoice/resultsignore.php, as demonstrated using /etc/passwd."},{"lang":"es","value":"OWLS 1.0 permite a atacantes remotos obtener ficheros arbitrarios mediante rutas absolutas en (1) el parámetro file en /glossaries/index.php, o (2) el parámetro filename en /readings/index.php, o (3) el parámetro filename en /multiplechoice/resultsignore.php, como se ha demostradro usando /etc/passwd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:fools_workshop:owls_workshop:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4A3FEA72-3492-4503-87EC-8E7C76455E04"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107712123305706&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9689","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zone-h.org/en/advisories/read/id=3973/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15249","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107712123305706&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zone-h.org/en/advisories/read/id=3973/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15249","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0304","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unauthorized access and execute arbitrary commands via the Search_Text parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQLen browse_items.asp en WebCortex WebStores 2000 6.0 permite a atacantes remotos ganar acceso no autorizado y ejecutar comandos de su elección mediante el parámetro Search_Text."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcortex:webstores_2000:6.0:*:*:*:*:*:*:*","matchCriteriaId":"59EFA9DD-30D2-4557-BB6F-821E2FA186BD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107712159425226&w=2","source":"cve@mitre.org"},{"url":"http://www.s-quadra.com/advisories/Adv-20040218.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/7766","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15253","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107712159425226&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s-quadra.com/advisories/Adv-20040218.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/7766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15253","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0305","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as other users and steal session IDs via the Message_id parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comados en sitios cruzados (XSS) en error.asp de WebCortex WebStores 2000 6.0 permite a atacantes remotos ejecutar scritp de su elección como otros usuarios y robar IDs de sesión mediante el parámetro Message_id."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcortex:webstores_2000:6.0:*:*:*:*:*:*:*","matchCriteriaId":"59EFA9DD-30D2-4557-BB6F-821E2FA186BD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107712159425226&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9693","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15254","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107712159425226&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0306","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories."},{"lang":"es","value":"Cisco ONS 15327 anteriores a 4.1(3), ONS 15454 anteriores a 4.6(1), ONS 15454 SD anteriores a 4.1(3), y Cisco ONS 15600 anteriores a 1.3(0) tienen activo el servicio TFTP en el puerto UDP 69 por defecto, lo que permite a atacantes remotos obtener (GET) o poner (PUT ON) ficheros de sistema en TCC activo acual en los directorios /flash0 y /flash1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4D1888FF-6126-4F40-A7EA-1ED5123FA729"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"10988AA9-A807-4E70-8197-6F9EFC13AE86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"C8951276-CDEF-4F54-93DF-B96DB10E6530"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5D886A75-5A73-4B1C-8B2A-45D589267B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"D5A594C2-98BB-4AC5-9CC5-89FE97D63323"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"9B35325A-98F6-41DF-ADD8-91ED992A3ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"F0B06C5B-73C2-47F1-9ED6-B59F9C1C5AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"D9758019-F6EA-4552-B070-5A9EBE73BB86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E75DB3F4-94A8-4341-9C01-1F0DC25A3402"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.5:*:*:*:*:*:*:*","matchCriteriaId":"BA524BE1-6B13-455A-96EA-17C1A71BD0F2"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9699","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15264","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15264","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0307","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), and ONS 15454 SD before 4.1(3) allows remote attackers to cause a denial of service (reset) by not sending the ACK portion of the TCP three-way handshake and sending an invalid response instead."},{"lang":"es","value":"Cisco ONS 15327 anteriores a  4.1(3), ONS 15454 anteriores a 4.6(1), y ONS 15454 SD anteriores a 4.1(3) permiten a atacantes remotos causar una denegación de servicio (caída) no enviando la porción ACK del establecimiento de conexión en TCP 3 pasos, y enviando en su lugar una respuesta no válida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4D1888FF-6126-4F40-A7EA-1ED5123FA729"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"10988AA9-A807-4E70-8197-6F9EFC13AE86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"C8951276-CDEF-4F54-93DF-B96DB10E6530"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5D886A75-5A73-4B1C-8B2A-45D589267B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"D5A594C2-98BB-4AC5-9CC5-89FE97D63323"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"9B35325A-98F6-41DF-ADD8-91ED992A3ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"F0B06C5B-73C2-47F1-9ED6-B59F9C1C5AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"D9758019-F6EA-4552-B070-5A9EBE73BB86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E75DB3F4-94A8-4341-9C01-1F0DC25A3402"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.5:*:*:*:*:*:*:*","matchCriteriaId":"BA524BE1-6B13-455A-96EA-17C1A71BD0F2"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4009","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9699","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15265","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15265","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0308","sourceIdentifier":"cve@mitre.org","published":"2004-11-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS15600 before 1.3(0) allows a superuser whose account is locked out, disabled, or suspended to gain unauthorized access via a Telnet connection to the VxWorks shell."},{"lang":"es","value":"Vulnerabilidad desconocida en Cisco ONS 15327 anteriores a 4.1(3), ONS 15454 anteriores a 4.6(1), ONS 15454 SD anteriores a  4.1(3), y Cisco ONS15600 anteriores a 1.3(0) permiten a un superusuario cuya cuenta está bloquada, deshabilitada o suspendida ganar acceso no autorizado mediante una conexión Telnet al interfaz VxWorks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4D1888FF-6126-4F40-A7EA-1ED5123FA729"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"10988AA9-A807-4E70-8197-6F9EFC13AE86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"C8951276-CDEF-4F54-93DF-B96DB10E6530"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5D886A75-5A73-4B1C-8B2A-45D589267B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"D5A594C2-98BB-4AC5-9CC5-89FE97D63323"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"9B35325A-98F6-41DF-ADD8-91ED992A3ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"F0B06C5B-73C2-47F1-9ED6-B59F9C1C5AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"D9758019-F6EA-4552-B070-5A9EBE73BB86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E75DB3F4-94A8-4341-9C01-1F0DC25A3402"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.5:*:*:*:*:*:*:*","matchCriteriaId":"BA524BE1-6B13-455A-96EA-17C1A71BD0F2"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4010","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9699","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15266","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0309","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:integrity:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9963B823-D70B-4B3D-ABFE-14C4AC64E5D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:4.0:*:*:*:*:*:*:*","matchCriteriaId":"2A0C79EE-6E92-4DE9-BD94-135A9FB14F2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:4.0:*:plus:*:*:*:*:*","matchCriteriaId":"1A125DEF-6DE6-41FE-BD43-DA464DB14389"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:4.0:*:pro:*:*:*:*:*","matchCriteriaId":"721EFD0A-145F-440C-A9FC-D72AE6FA126A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:4.5:*:pro:*:*:*:*:*","matchCriteriaId":"C5DE7D02-A778-47EF-9D3E-871C3EB09370"}]}]}],"references":[{"url":"http://download.zonelabs.com/bin/free/securityAlert/8.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107722656827427&w=2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-084.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/619982","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3991","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9696","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14991","source":"cve@mitre.org"},{"url":"http://download.zonelabs.com/bin/free/securityAlert/8.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107722656827427&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-084.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/619982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14991","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0310","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in LiveJournal 1.0 and 1.1 allows remote attackers to execute Javascript as other users via the stylesheet, which does not strip the semicolon or parentheses, as demonstrated using a background:url."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:livejournal:livejournal:*:*:*:*:*:*:*:*","matchCriteriaId":"8E3EEE8D-BFBD-4DFF-B540-993E62093381"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107722627800820&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9700","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15268","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107722627800820&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15268","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0311","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"American Power Conversion (APC) Web/SNMP Management SmartSlot Card 3.0 through 3.0.3 and 3.21 are shipped with a default password of TENmanUFactOryPOWER, which allows remote attackers to gain unauthorized access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:apc:ap9606:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DF5F4859-0693-4827-B035-8FE9DF820B0B"},{"vulnerable":true,"criteria":"cpe:2.3:h:apc:ap9606:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0E954DCC-0556-400C-AEA4-9B303908A0F4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107703696631367&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107721020803565&w=2","source":"cve@mitre.org"},{"url":"http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=3131&p_created=1077139129","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9681","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15238","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107703696631367&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107721020803565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=3131&p_created=1077139129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9681","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15238","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0312","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linksys WAP55AG 1.07 allows remote attackers with access to an SNMP read only community string to gain access to read/write communtiy strings via a query for OID 1.3.6.1.4.1.3955.2.1.13.1.2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wap55ag:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"935294D7-41A5-4E47-A168-A908E61CADCD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107712101324233&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107730681012131&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9688","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15257","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107712101324233&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107730681012131&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15257","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0313","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as demonstrated using a long (1) GET argument or (2) method name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:psoproxy:psoproxy_server:0.91:*:*:*:*:*:*:*","matchCriteriaId":"D09A359E-E45C-47D7-9C10-831E420E268C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107730731900261&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9706","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15275","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107730731900261&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15275","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0314","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in done.jsp in WebzEdit 1.9 and earlier allows remote attackers to execute arbitrary script as other users via the message parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freewebs:webzedit:*:*:*:*:*:*:*:*","versionEndIncluding":"1.9","matchCriteriaId":"A8F177F3-4FAD-40CF-82DB-A434C1E45C47"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107757029514146&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15289","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107757029514146&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15289","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0315","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Avirt Voice 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long GET request on port 1080."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avirt:voice:4.0:*:*:*:*:*:*:*","matchCriteriaId":"688C4866-F9E0-4621-A70C-4EF251D7D52E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107756584609841&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9721","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15288","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107756584609841&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15288","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0316","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Avirt Soho 4.3 allows remote attackers to cause a denial of service (crash) via (1) a large GET request to port 1080 or (2) a large GET request of % characters to port 8080."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avirt:avirt_soho:4.3:*:*:*:*:*:*:*","matchCriteriaId":"77570786-465D-4BE0-814F-6C03EC3F54E0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107756666701194&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9722","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9723","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15286","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107756666701194&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15286","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0317","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in eauth in Load Sharing Facility 4.x, 5.x, and 6.x allows local users or remote attackers within the LSF cluster to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long LSF_From_PC parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:platform:lsf:4.0:*:*:*:*:*:*:*","matchCriteriaId":"1E817C7D-F24D-4EF4-AF3A-8C583A94FFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:platform:lsf:4.2:*:*:*:*:*:*:*","matchCriteriaId":"30E97C6F-3786-4B56-BA11-17022DEEB2D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:platform:lsf:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EC84ED9D-22A9-44E4-ACB2-94C6CE953168"},{"vulnerable":true,"criteria":"cpe:2.3:a:platform:lsf:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4578F4B0-50AF-4159-BBB3-60FD86AEF150"},{"vulnerable":true,"criteria":"cpe:2.3:a:platform:lsf:6.0:*:*:*:*:*:*:*","matchCriteriaId":"46875936-5421-47BB-8D14-B05A71FE3AFF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107756611501236&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9719","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15282","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107756611501236&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0318","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Load Sharing Facility (LSF) 4.x, 5.x, and 6.x uses the LSF_EAUTH_UID environment variable, if it exists, instead of the real UID of the user, which could allow remote attackers within the local cluster to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:platform:lsf:4.0:*:*:*:*:*:*:*","matchCriteriaId":"1E817C7D-F24D-4EF4-AF3A-8C583A94FFAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:platform:lsf:4.2:*:*:*:*:*:*:*","matchCriteriaId":"30E97C6F-3786-4B56-BA11-17022DEEB2D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:platform:lsf:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EC84ED9D-22A9-44E4-ACB2-94C6CE953168"},{"vulnerable":true,"criteria":"cpe:2.3:a:platform:lsf:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4578F4B0-50AF-4159-BBB3-60FD86AEF150"},{"vulnerable":true,"criteria":"cpe:2.3:a:platform:lsf:6.0:*:*:*:*:*:*:*","matchCriteriaId":"46875936-5421-47BB-8D14-B05A71FE3AFF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107756600403557&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9724","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15278","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107756600403557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0319","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the font tag in ezBoard 7.3u allows remote attackers to execute arbitrary script as other users, as demonstrated using the background:url in a (1) font color or (2) font face argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ezboard:ezboard:7.3u:*:*:*:*:*:*:*","matchCriteriaId":"475FFDC7-D9C3-434C-945F-18384A877522"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107756639427140&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9725","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15287","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107756639427140&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15287","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0320","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through 1.99.x allows local users to access secrets stored in the module's run-time memory via certain sequences of commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ncipher:nshield:1.71.11:*:*:*:*:*:*:*","matchCriteriaId":"0D404D97-8CC6-42C1-8CBC-B66661FFB397"},{"vulnerable":true,"criteria":"cpe:2.3:h:ncipher:nshield:1.71.15:*:*:*:*:*:*:*","matchCriteriaId":"1C3C568E-D377-4605-8136-C1CC8588E7F0"},{"vulnerable":true,"criteria":"cpe:2.3:h:ncipher:nshield:1.71.90:*:*:*:*:*:*:*","matchCriteriaId":"71ED8F00-D042-4F40-9EA7-5C065AB7859C"},{"vulnerable":true,"criteria":"cpe:2.3:h:ncipher:nshield:1.75.15:*:*:*:*:*:*:*","matchCriteriaId":"14152DDC-93C1-4B95-8151-D13BA7E61F58"},{"vulnerable":true,"criteria":"cpe:2.3:h:ncipher:nshield:1.77.9:*:*:*:*:*:*:*","matchCriteriaId":"DDBC2454-7DFA-464C-B9A3-806D83F4A68A"},{"vulnerable":true,"criteria":"cpe:2.3:h:ncipher:nshield:1.77.93:*:*:*:*:*:*:*","matchCriteriaId":"C62A424A-236C-4EDF-8BBB-39178365C6D2"},{"vulnerable":true,"criteria":"cpe:2.3:h:ncipher:nshield:1.77.97:*:*:*:*:*:*:*","matchCriteriaId":"33124B47-4A08-44E6-BE5D-303570BE0742"},{"vulnerable":true,"criteria":"cpe:2.3:h:ncipher:nshield:1.79.12:*:*:*:*:*:*:*","matchCriteriaId":"E1D491BC-88CF-423A-AF6C-02ABAF1D6684"},{"vulnerable":true,"criteria":"cpe:2.3:h:ncipher:nshield:1.79.80:*:*:*:*:*:*:*","matchCriteriaId":"5518689E-8388-47A4-B602-335EE6DB2D9A"},{"vulnerable":true,"criteria":"cpe:2.3:h:ncipher:nshield:1.79.81:*:*:*:*:*:*:*","matchCriteriaId":"C5650AFD-57AC-4481-8905-0BFDEA96F8FF"},{"vulnerable":true,"criteria":"cpe:2.3:h:ncipher:nshield:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6FA1319A-352D-4E60-90D2-03D13010E328"},{"vulnerable":true,"criteria":"cpe:2.3:h:ncipher:nshield:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D3A5387D-8546-4745-A369-A805EF6118DA"},{"vulnerable":true,"criteria":"cpe:2.3:h:ncipher:nshield:2.12:*:*:*:*:*:*:*","matchCriteriaId":"89FD75A1-7D5E-4BB0-8134-E270A58E2B0D"},{"vulnerable":true,"criteria":"cpe:2.3:h:ncipher:nshield:2.12.2:*:*:*:*:*:*:*","matchCriteriaId":"23ED050D-8C50-44E1-B7EC-51BE8D09E8FD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107755899018249&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4055","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9717","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15281","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107755899018249&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4055","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0321","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Team Factor 1.25 and earlier allows remote attackers to cause a denial of service (crash) via a packet that uses a negative number to specify the size of the data block that follows, which causes Team Factor to read unallocated memory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:singularity_software:team_factor:1.25:*:*:*:*:*:*:*","matchCriteriaId":"E16D9408-7AA2-437D-856E-1961BD92CBBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:singularity_software:team_factor:1.25m:*:*:*:*:*:*:*","matchCriteriaId":"D5E89ADB-3066-4333-A5D8-B2A708890CD2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107756001412888&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9708","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zone-h.org/advisories/read/id=4006","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15274","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107756001412888&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zone-h.org/advisories/read/id=4006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15274","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0322","sourceIdentifier":"cve@mitre.org","published":"2004-02-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user parameter in editprofile.php, (4) an onmouseover event in an align tag when bbcode is allowed, or (5) img tag where bbcode is allowed."}],"vendorComments":[{"organization":"XMB","comment":"XMB versions 1.9.8 SP2 and later were checked and are not vulnerable. Upgrades are available at https://www.xmbforum2.com/","lastModified":"2021-04-23T12:36:53.810"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_forum:xmb:1.8:*:*:*:*:*:*:*","matchCriteriaId":"368C1906-D897-46D8-A47E-D321311EE393"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_forum:xmb:1.8_sp1:*:*:*:*:*:*:*","matchCriteriaId":"A1A6D868-8DB9-40AF-82C5-D9697876F91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_forum:xmb:1.8_sp2:*:*:*:*:*:*:*","matchCriteriaId":"5016F4A0-C50A-4B27-B0E3-4FAA4D1645EF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0645.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107756526625179&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9726","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.xmbforum.com/community/boards/viewthread.php?tid=746859","source":"cve@mitre.org"},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15292","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15294","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0645.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107756526625179&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.xmbforum.com/community/boards/viewthread.php?tid=746859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15294","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0323","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via the (1) ppp parameter in viewthread.php, (2) desc parameter in misc.php, (3) tpp parameter in forumdisplay.php, (4) ascdesc parameter in forumdisplay.php, or (5) the addon parameter in stats.php.  NOTE: it has also been shown that item (3) is also in XMB 1.9 beta."}],"vendorComments":[{"organization":"XMB","comment":"XMB versions 1.9.8 SP2 and later were checked and are not vulnerable.","lastModified":"2008-12-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_forum:xmb:1.8:*:*:*:*:*:*:*","matchCriteriaId":"368C1906-D897-46D8-A47E-D321311EE393"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_forum:xmb:1.8_sp1:*:*:*:*:*:*:*","matchCriteriaId":"A1A6D868-8DB9-40AF-82C5-D9697876F91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_forum:xmb:1.8_sp2:*:*:*:*:*:*:*","matchCriteriaId":"5016F4A0-C50A-4B27-B0E3-4FAA4D1645EF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0645.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0265.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107756526625179&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9726","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.xmbforum.com/community/boards/viewthread.php?tid=746859","source":"cve@mitre.org"},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15295","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0645.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0265.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107756526625179&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.xmbforum.com/community/boards/viewthread.php?tid=746859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15295","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0324","sourceIdentifier":"cve@mitre.org","published":"2004-02-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as \", `, |, ;, or $."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:confirm:confirm:0.50:*:*:*:*:*:*:*","matchCriteriaId":"7ECF9ED2-1A53-4A74-A0A1-19D9D9976225"},{"vulnerable":true,"criteria":"cpe:2.3:a:confirm:confirm:0.51:*:*:*:*:*:*:*","matchCriteriaId":"E42170EE-6184-4BE0-A013-65C0584D300F"},{"vulnerable":true,"criteria":"cpe:2.3:a:confirm:confirm:0.52:*:*:*:*:*:*:*","matchCriteriaId":"FC258CE0-3DA8-4BD4-86D9-8B327604F4AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:confirm:confirm:0.53:*:*:*:*:*:*:*","matchCriteriaId":"DA893BB6-AF65-4A12-90B8-E7FB0241F548"},{"vulnerable":true,"criteria":"cpe:2.3:a:confirm:confirm:0.54:*:*:*:*:*:*:*","matchCriteriaId":"CC3561AB-3943-470B-9937-A2B1A198551F"},{"vulnerable":true,"criteria":"cpe:2.3:a:confirm:confirm:0.55:*:*:*:*:*:*:*","matchCriteriaId":"70AC18BC-52B0-47BC-97EA-33127E9F0104"},{"vulnerable":true,"criteria":"cpe:2.3:a:confirm:confirm:0.60:*:*:*:*:*:*:*","matchCriteriaId":"35D6C612-7986-4958-B9E6-7931A26E3BA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:confirm:confirm:0.61:*:*:*:*:*:*:*","matchCriteriaId":"5C7B4204-183D-40E8-91F4-80AAF4C42D0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:confirm:confirm:0.62:*:*:*:*:*:*:*","matchCriteriaId":"D29034D9-6F55-4DDC-94BD-2CB23258145C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107757320401858&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9728","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15290","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107757320401858&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0325","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via \"//../\" arguments to (1) mkd, (2) xmkd, (3) dele, (4) size, (5) retr, (6) stor, (7) appe, (8) rnfr, (9) rnto, (10) rmd, or (11) xrmd, as demonstrated using \"//../qwerty\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:typsoft:typsoft_ftp_server:1.10:*:*:*:*:*:*:*","matchCriteriaId":"A2A97A23-4606-427B-B2C0-0D3B2F8EDD68"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107764173821905&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9702","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15306","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107764173821905&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15306","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0326","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proxy-pro:professional_gatekeeper:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B10A11C0-053F-40B3-97C6-B8F08295E49B"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017703.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107755692400728&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9716","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15277","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017703.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107755692400728&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9716","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0327","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via ..  (dot dot) sequences in the clang parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skintech:phpnewsmanager:1.36:*:*:*:*:*:*:*","matchCriteriaId":"03B63339-BD58-4537-AE26-4A756A38A3DF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107772470111000&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9720","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zone-h.org/advisories/read/id=4024","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15283","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107772470111000&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zone-h.org/advisories/read/id=4024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15283","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0328","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the same local network as the router to bypass authentication by using a copy of the router's html menu on a separate system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:gigabyte:gn-b46b:1.003.00:*:*:*:*:*:*:*","matchCriteriaId":"33D343F1-5AE5-4EE9-B1D9-20DD1338C190"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107766719227942&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9740","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15313","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107766719227942&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15313","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0329","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeChat 1.1.1a allows remote attackers to cause a denial of service (crash) via certain unexpected strings, as demonstrated using \"aaaaa\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freechat:freechat:0.1.1a:*:*:*:*:*:*:*","matchCriteriaId":"11C048AB-D45B-4956-BF51-D9CF0E0C02FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:freechat:freechat:1.1.1a:*:*:*:*:*:*:*","matchCriteriaId":"D7BA81C5-9B91-4A86-880E-DF23296F35ED"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107781043621074&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9744","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15321","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107781043621074&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15321","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0330","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.0.0","matchCriteriaId":"9171B0CE-E4CF-4515-8E14-28001B164044"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0CB703F7-4806-4E3F-850E-ACC127892899"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"D6E3F784-86CB-46FC-97FB-1F43F140C9ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"022E0AF9-48FA-41C4-A109-4A3284A721BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"397E88A4-9E82-4818-B176-1C049993F1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D7DD649F-E290-4E8E-B61F-3950A2157938"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:4.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"51BE6EDE-C7BC-4730-9602-160A027D8F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:4.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7DE0A612-CF94-4DBE-808C-AE4CA9DD2C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:4.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F20066E0-BAE8-462F-86B5-A39DDB5D11C4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107781164214399&w=2","source":"cve@mitre.org"},{"url":"http://www.cnhonker.com/advisory/serv-u.mdtm.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9751","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15323","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107781164214399&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cnhonker.com/advisory/serv-u.mdtm.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15323","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0331","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (crash) via a HTTP POST with a long application variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dell:openmanage:3.2:*:*:*:*:*:*:*","matchCriteriaId":"C35443AC-9BDC-4EEE-8518-FD255D0489F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:openmanage:3.4:*:*:*:*:*:*:*","matchCriteriaId":"08A1BA40-B71D-4375-98DB-DF52D67C37A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:openmanage:3.7:*:*:*:*:*:*:*","matchCriteriaId":"6491E7DD-C188-4EE5-9C11-67FF81C94222"},{"vulnerable":true,"criteria":"cpe:2.3:a:dell:openmanage:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2B218A85-D248-4AF9-AE34-B932E0F0071B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107781539829143&w=2","source":"cve@mitre.org"},{"url":"http://sh0dan.org/files/domadv.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9750","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15325","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107781539829143&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sh0dan.org/files/domadv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15325","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0332","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.0:*:*:*:*:*:*:*","matchCriteriaId":"72FC40F9-E186-43CA-8C85-EA91A8E91ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F395FF0F-8CD2-4653-9C27-5329A37DCC40"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"37AD1A31-7763-4540-9785-FDC168D7E62E"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"20BDB6DF-6570-4AB1-8ACF-D2262C767EFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1:*:*:*:*:*:*:*","matchCriteriaId":"24C2B718-0D43-4305-9937-705696B6BEFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C48091F8-7F0D-4FA6-9FC4-2DCC121B368E"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E60F2FCF-E439-4321-ABE3-21DAC3ABED3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3F168C99-99C5-4039-A6EB-15D2D094CBA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"FD5059DA-D66C-43F5-9DF0-5E9728AB8F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"10300F83-95C3-4FAB-8918-B72E4AB1B2FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"A0D80F5F-767D-4E01-84BE-3F8418189819"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"CEF46411-F100-40B5-A021-09A5292B45F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"5B40D6E2-4B84-49D6-AC75-E1FBA9E607B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.9:*:*:*:*:*:*:*","matchCriteriaId":"10617FD8-536F-4CA8-996D-7B8746822EF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"CA626C56-249A-4A9C-AC53-1DFEEDD9E68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.5:*:*:*:*:*:*:*","matchCriteriaId":"0348B02A-ED79-472C-BF1C-095D23049099"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"28F522C4-309C-49DF-B355-D51984ED21FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.5.8:*:*:*:*:*:*:*","matchCriteriaId":"C97F601A-7259-4B7C-B9F2-A4BA4BB343ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:extremail:extremail:1.5.9:*:*:*:*:*:*:*","matchCriteriaId":"C4C05AA5-4346-4F03-B875-7A010A53B4E9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107783767517850&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9754","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15329","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107783767517850&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0333","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This was fixed in WinZip 8.1 SR-2 in March of 2004. You can find more information on the subject on the following pages of the winzip site:\r\nhttp://www.winzip.com/wz81sr2.htm\r\nhttp://www.winzip.com/fmwz90.htm","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:*:*:*:*:*:*:*:*","matchCriteriaId":"F74941A0-97CA-44D4-B55B-9224F051D40F"},{"vulnerable":true,"criteria":"cpe:2.3:a:uudeview:uudeview:0.5.18:*:*:*:*:*:*:*","matchCriteriaId":"B6C944B6-112F-4914-8FAB-412C292776AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:uudeview:uudeview:0.5.19:*:*:*:*:*:*:*","matchCriteriaId":"F6CFEE2D-B4A2-4F63-8AC0-304A556FFD82"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2ACBE01-B77A-4D09-8FB3-D6365786C44F"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:8.0:*:*:*:*:*:*:*","matchCriteriaId":"FDE7DCD6-90B3-4259-9BE6-B9F7A30A64AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4088C545-249E-47AD-8BF8-A6A2E5B2BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:8.1:sr1:*:*:*:*:*:*","matchCriteriaId":"3533CE02-6CC0-4E64-B604-BAA131042C7A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D1FD0EB4-E744-4465-AFEE-A3C807C9C993"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*","matchCriteriaId":"1D866A7D-F0B9-4EA3-93C6-1E7C2C2A861F"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*","matchCriteriaId":"57772E3B-893C-408A-AA3B-78C972ED4D5E"}]}]}],"references":[{"url":"http://secunia.com/advisories/10995","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11019","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-092.shtml","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=76&type=vulnerabiliti&flashstatus=true","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/116182","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.openpkg.org/security/OpenPKG-SA-2004.006-uudeview.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4119","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9758","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.winzip.com/fmwz90.htm","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15336","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15490","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10995","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-092.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=76&type=vulnerabiliti&flashstatus=true","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/116182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.openpkg.org/security/OpenPKG-SA-2004.006-uudeview.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.winzip.com/fmwz90.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0334","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) videophone_admindetail.asp, (2) videophone_syscfg.asp, (3) videophone_upgrade.asp, or (4) videophone_sysctrl.asp that contains a trailing / (slash).  NOTE: the original report mentioned AXIS 2100 Network Camera, but this was likely a cut-and-paste error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:innomedia:innomedia_videophone:au75200xvi04010x:*:*:*:*:*:*:*","matchCriteriaId":"A3B40087-8BEF-4E99-8FB7-4E8DA3AC5ED8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107799556111784&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Mar/1009522.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4809","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15636","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107799556111784&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2004/Mar/1009522.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0335","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LAN SUITE Web Mail 602Pro, when configured to use the \"Directory browsing\" feature, allows remote attackers to obtain a directory listing via an HTTP request to (1) index.html, (2) cgi-bin/, or (3) users/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:software602:602pro_lan_suite:*:*:*:*:*:*:*:*","matchCriteriaId":"E31E371C-F41A-4C9E-8FE1-B1CA6FA68B0E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0096.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107799540630302&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9780","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15349","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107799540630302&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15349","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0336","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive information via the mail login form, which contains the path to the mail directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:software602:602pro_lan_suite:2002:*:*:*:*:*:*:*","matchCriteriaId":"087BBF48-CED1-4BC7-B4F9-1F62D0AFCB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:software602:602pro_lan_suite:2003:*:*:*:*:*:*:*","matchCriteriaId":"F4F511B2-B52E-40FD-9C14-B30363664CE6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0096.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107799540630302&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9781","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15350","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107799540630302&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0337","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / (slash) and the desired script.  NOTE: the vendor states that this bug could not be reproduced, so this issue may be REJECTed in the future."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:software602:602pro_lan_suite:2002:*:*:*:*:*:*:*","matchCriteriaId":"087BBF48-CED1-4BC7-B4F9-1F62D0AFCB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:software602:602pro_lan_suite:2003:*:*:*:*:*:*:*","matchCriteriaId":"F4F511B2-B52E-40FD-9C14-B30363664CE6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0096.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107799540630302&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9777","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15351","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0096.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107799540630302&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15351","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0338","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7AC7F0E6-7DA6-41E3-9F73-4FFF699195C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EAA35A95-B8FD-4ED8-95E0-409E50BF13AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D4066556-F0CE-4E8B-B88D-C3BA03D98D95"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"5E25D5B0-082C-41AF-A3BA-5B35E54BCCAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB93242B-85AD-451E-BC0A-D8561C292430"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.3:*:*:*:*:*:*:*","matchCriteriaId":"52954D4B-72E9-434C-991A-7B3D6C71183C"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:2.0_alpha_3:*:*:*:*:*:*:*","matchCriteriaId":"0B8C2DB4-06C3-4400-B0F3-2025FD829788"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:2.0_pdr3:*:*:*:*:*:*:*","matchCriteriaId":"053B554A-AC3D-496F-9E3D-D357D14B87E7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107799527428834&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9766","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15343","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107799527428834&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15343","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0339","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is addressed in the following product release:\r\nphpBB Group, phpBB, 2.0.7","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0:*:*:*:*:*:*:*","matchCriteriaId":"BE04D5FE-021A-4E97-9166-8F7484F4C5F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C74C78D-EEE0-48DF-9721-2A43B996EBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"054EFBD3-2252-4173-B37A-B8CA0218CE0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"00EB368F-5471-42E3-BBBE-EF9E623A7259"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F65406CF-59F1-48DC-8ABC-501F210A8B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03AC5144-140D-48E9-87FD-96F2E248D4E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A8F12660-10A7-4B66-94B0-954C9CD7D36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*","matchCriteriaId":"D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"894A26BD-2D8B-4DE7-BEE3-940A0498DB74"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107799508130700&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9765","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15348","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107799508130700&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15348","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0340","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"82BD6A19-CDF4-4873-9D1A-BD071DB16540"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.0:*:pro:*:*:*:*:*","matchCriteriaId":"48834DE9-009F-4ADF-882C-731AAE13216C"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r3:*:*:*:*:*:*:*","matchCriteriaId":"24891A6D-A378-4598-BD99-2EB36166EC61"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r4:*:*:*:*:*:*:*","matchCriteriaId":"EA997791-D567-4F7F-86B2-C17C9DF846B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r4:*:pro:*:*:*:*:*","matchCriteriaId":"02CE0404-0A9F-4D9B-BED8-175B91BD43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r5:*:*:*:*:*:*:*","matchCriteriaId":"76D31E58-1956-4462-9808-7C46807B2CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r5:*:pro:*:*:*:*:*","matchCriteriaId":"EDF7F8CF-6679-4F18-9D35-CA5063FC29EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.10_r1:*:*:*:*:*:*:*","matchCriteriaId":"583AA9AF-279A-4855-B61F-436F2885FEC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.20:*:*:*:*:*:*:*","matchCriteriaId":"25383662-444A-42D7-827C-A3F7B0C53B21"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.21:*:*:*:*:*:*:*","matchCriteriaId":"B0F19F32-622D-4C1A-932B-B78C4C012530"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:pro_3.10_r1:*:*:*:*:*:*:*","matchCriteriaId":"D50F437C-091B-4D4B-8D20-C1607520B6E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:pro_3.20:*:*:*:*:*:*:*","matchCriteriaId":"9C67B50B-8D68-4BF8-B321-A04456FA0DDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:pro_3.21:*:*:*:*:*:*:*","matchCriteriaId":"80212243-DB14-489C-A381-4915FC3C0B28"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107801208004699&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11001","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9767","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15340","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107801208004699&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15340","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0341","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte (newline) is sent, which allows local users to cause a denial of service (CPU consumption) by continuing to send a long command that does not contain a newline."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"82BD6A19-CDF4-4873-9D1A-BD071DB16540"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.0:*:pro:*:*:*:*:*","matchCriteriaId":"48834DE9-009F-4ADF-882C-731AAE13216C"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r3:*:*:*:*:*:*:*","matchCriteriaId":"24891A6D-A378-4598-BD99-2EB36166EC61"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r4:*:*:*:*:*:*:*","matchCriteriaId":"EA997791-D567-4F7F-86B2-C17C9DF846B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r4:*:pro:*:*:*:*:*","matchCriteriaId":"02CE0404-0A9F-4D9B-BED8-175B91BD43D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r5:*:*:*:*:*:*:*","matchCriteriaId":"76D31E58-1956-4462-9808-7C46807B2CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.0_0r5:*:pro:*:*:*:*:*","matchCriteriaId":"EDF7F8CF-6679-4F18-9D35-CA5063FC29EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.10_r1:*:*:*:*:*:*:*","matchCriteriaId":"583AA9AF-279A-4855-B61F-436F2885FEC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.20:*:*:*:*:*:*:*","matchCriteriaId":"25383662-444A-42D7-827C-A3F7B0C53B21"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.21:*:*:*:*:*:*:*","matchCriteriaId":"B0F19F32-622D-4C1A-932B-B78C4C012530"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:pro_3.10_r1:*:*:*:*:*:*:*","matchCriteriaId":"D50F437C-091B-4D4B-8D20-C1607520B6E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:pro_3.20:*:*:*:*:*:*:*","matchCriteriaId":"9C67B50B-8D68-4BF8-B321-A04456FA0DDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:pro_3.21:*:*:*:*:*:*:*","matchCriteriaId":"80212243-DB14-489C-A381-4915FC3C0B28"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107801142924976&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11001","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4115","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9767","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15341","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107801142924976&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15341","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0342","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service (crash) via a (1) MKD or (2) XMKD command that causes an absolute path of 260 characters to be used, which overwrites a cookie with a null character, possibly due to an off-by-one error."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wftpd_pro_server_project:wftpd_pro_server:3.21:r1:*:*:*:*:*:*","matchCriteriaId":"CD90BF85-41E3-4C2D-969A-DDA5DB4D7506"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107801142924976&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11001","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/4116","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9767","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15342","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=107801142924976&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/4116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9767","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0343","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in YaBB SE 1.5.4 through 1.5.5b allow remote attackers to execute arbitrary SQL via (1) the msg parameter in ModifyMessage.php or (2) the postid parameter in ModifyMessage.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1.5.4:*:second_edition:*:*:*:*:*","matchCriteriaId":"7B26D66C-05CC-4A25-98CD-B2C055EB0518"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1.5.5:*:second_edition:*:*:*:*:*","matchCriteriaId":"92385523-C1C9-4F93-A850-B8CE2D9B9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1.5.5b:*:second_edition:*:*:*:*:*","matchCriteriaId":"6B6EF213-89E6-4755-A039-D0B300C54BE1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107816202813083&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9774","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15354","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107816202813083&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15354","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0344","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delete arbitrary files via a .. (dot dot) in the attachOld parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1.5.5:*:second_edition:*:*:*:*:*","matchCriteriaId":"92385523-C1C9-4F93-A850-B8CE2D9B9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1.5.5b:*:second_edition:*:*:*:*:*","matchCriteriaId":"6B6EF213-89E6-4755-A039-D0B300C54BE1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107816202813083&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9774","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107816202813083&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9774","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-0345","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary code via a long server name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:volition:red_faction:1.0:*:*:*:*:*:*:*","matchCriteriaId":"979A918F-9D95-460F-8196-2A4F6C3EDD73"},{"vulnerable":true,"criteria":"cpe:2.3:a:volition:red_faction:1.1:*:*:*:*:*:*:*","matchCriteriaId":"729A7E73-2CE6-4BBD-9200-CE2A0E5EE83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:volition:red_faction:1.20:*:*:*:*:*:*:*","matchCriteriaId":"498D618A-EF54-45DB-8E4B-06FDB0311D2C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107816217901923&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9775","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15353","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107816217901923&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0346","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows local users to gain privileges via a 1024 byte RETR command."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-193"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.7","versionEndExcluding":"1.2.9","matchCriteriaId":"2C0C66FF-D0E0-48D9-9181-F403D503E040"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"8EC036C6-445D-4A6E-8B22-799CE611C05C"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.2.9:rc1:*:*:*:*:*:*","matchCriteriaId":"44670EA1-33E7-486B-80C0-743C09632F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:1.2.9:rc2:*:*:*:*:*:*","matchCriteriaId":"777FBAE6-3BA4-436A-85FC-B59DCFB89160"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107824679817240&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/9782","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15387","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=107824679817240&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/9782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0347","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 (build 4797) allows remote authenticated users to execute arbitrary script as other users via the row parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netscreen:netscreen-sa_5000_series:*:*:*:*:*:*:*:*","matchCriteriaId":"FA34EB36-E5E9-43B6-ABB8-B292BC7B0CBA"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018120.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107826362024112&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107850564102190&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/114070","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9791","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15368","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018120.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107826362024112&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107850564102190&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/114070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15368","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0348","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spidersales:spidersales:2.0:*:*:*:*:*:*:*","matchCriteriaId":"44FF4D08-1C7D-4DAA-A6EF-563BF5508A7E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107833097705486&w=2","source":"cve@mitre.org"},{"url":"http://www.s-quadra.com/advisories/Adv-20040303.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9799","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15371","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107833097705486&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s-quadra.com/advisories/Adv-20040303.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15371","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0349","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gweb:gweb_http_server:0.5:*:*:*:*:*:*:*","matchCriteriaId":"75FE3E1B-3BBD-4561-9B61-0C7E90FD079E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gweb:gweb_http_server:0.6:*:*:*:*:*:*:*","matchCriteriaId":"C633576B-643C-4FD5-ACF3-A2D18C2BA0C0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107833161617397&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9742","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15381","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107833161617397&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15381","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0350","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spidersales:spidersales:2.0:*:*:*:*:*:*:*","matchCriteriaId":"44FF4D08-1C7D-4DAA-A6EF-563BF5508A7E"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107833097705486&w=2","source":"cve@mitre.org"},{"url":"http://www.s-quadra.com/advisories/Adv-20040303.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9799","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15370","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107833097705486&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s-quadra.com/advisories/Adv-20040303.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0351","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local users with access to the database to decrypt data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spidersales:spidersales:2.0:*:*:*:*:*:*:*","matchCriteriaId":"44FF4D08-1C7D-4DAA-A6EF-563BF5508A7E"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107833097705486&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9799","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15370","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107833097705486&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0352","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco 11000 Series Content Services Switches (CSS) running WebNS 5.0(x) before 05.0(04.07)S, and 6.10(x) before 06.10(02.05)S allow remote attackers to cause a denial of service (device reset) via a malformed packet to UDP port 5002."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11000:*:*:*:*:*:*:*:*","matchCriteriaId":"98FC94DE-BBD2-43C6-9435-0242BA5DCC8C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11050:*:*:*:*:*:*:*:*","matchCriteriaId":"B327940A-8884-4B45-8981-D1F19A318DCA"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11150:*:*:*:*:*:*:*:*","matchCriteriaId":"E3D01950-FFD4-4491-9C95-59AE911722F9"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:content_services_switch_11800:*:*:*:*:*:*:*:*","matchCriteriaId":"3B4A3675-9561-434E-A2C0-AF56CBD30560"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040304-css.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/363374","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9806","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15388","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040304-css.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/363374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15388","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0353","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to gain privileges via a long string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:anubis:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"7230ED9A-70BF-42E7-A78A-19C5F93F8370"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:anubis:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"0B10657B-056D-4E78-98B5-0FB71F6FCE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:anubis:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"6BDADFEE-8F14-4CE1-9BD6-FB3BA338D35F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:anubis:3.9.92:*:*:*:*:*:*:*","matchCriteriaId":"F3B0AC2E-2177-4783-80E1-4C9A6E364D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:anubis:3.9.93:*:*:*:*:*:*:*","matchCriteriaId":"B2EB87D6-C702-40BC-ADA4-EA1D6C418311"}]}]}],"references":[{"url":"http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107843915424588&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107894315012081&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9772","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15345","source":"cve@mitre.org"},{"url":"http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107843915424588&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107894315012081&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15345","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0354","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string specifiers in strings passed to (1) the info function in log.c, (2) the anubis_error function in errs.c, or (3) the ssl_error function in ssl.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:anubis:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"7230ED9A-70BF-42E7-A78A-19C5F93F8370"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:anubis:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"0B10657B-056D-4E78-98B5-0FB71F6FCE97"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:anubis:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"6BDADFEE-8F14-4CE1-9BD6-FB3BA338D35F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:anubis:3.9.92:*:*:*:*:*:*:*","matchCriteriaId":"F3B0AC2E-2177-4783-80E1-4C9A6E364D65"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:anubis:3.9.93:*:*:*:*:*:*:*","matchCriteriaId":"B2EB87D6-C702-40BC-ADA4-EA1D6C418311"}]}]}],"references":[{"url":"http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107843915424588&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9772","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15346","source":"cve@mitre.org"},{"url":"http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107843915424588&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15346","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0355","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for \"Personal Photo\" that is not an image file, which displays the installation path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.3:*:*:*:*:*:*:*","matchCriteriaId":"52954D4B-72E9-434C-991A-7B3D6C71183C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107850510428567&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9810","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15400","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107850510428567&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0356","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6E20C120-FD38-4B60-9568-E3460BB357F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"31F81437-91F9-4301-B65D-A4864621CADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C94FAC6E-6631-48AF-A52A-ABCC4C4C405E"},{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"040A4541-31E7-4B38-BA86-5A58D6C95B91"},{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1C04FB6B-F9E1-4FF3-AA0D-93E75FD8D084"},{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2EDCF0D9-21F8-489B-BC58-62B191446E1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"9E7A9D96-05E3-49E2-B091-F081CC5A3CBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"9355DAB1-0682-4A87-B650-0FFA2B9A6D10"},{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7A22DB74-5B1B-4E36-86A0-72A6E5CFED5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"0DAF431C-4D87-4789-B9AD-723854FF506A"}]}]}],"references":[{"url":"http://216.26.170.92/Download/webfiles/Patches/SLMPPatch-2.0.14.pdf","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107850488326232&w=2","source":"cve@mitre.org"},{"url":"http://www.nextgenss.com/advisories/slmailsrc.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9809","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15398","source":"cve@mitre.org"},{"url":"http://216.26.170.92/Download/webfiles/Patches/SLMPPatch-2.0.14.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107850488326232&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nextgenss.com/advisories/slmailsrc.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0357","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflows in SL Mail Pro 2.0.9 allow remote attackers to execute arbitrary code via (1) user.dll, (2) loadpageadmin.dll or (3) loadpageuser.dll."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:seattle_lab_software:slmail_pro:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"0DAF431C-4D87-4789-B9AD-723854FF506A"}]}]}],"references":[{"url":"http://216.26.170.92/Download/webfiles/Patches/SLMPPatch-2.0.14.pdf","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107850432827699&w=2","source":"cve@mitre.org"},{"url":"http://www.nextgenss.com/advisories/slmailwm.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9808","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15399","source":"cve@mitre.org"},{"url":"http://216.26.170.92/Download/webfiles/Patches/SLMPPatch-2.0.14.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107850432827699&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nextgenss.com/advisories/slmailwm.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9808","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15399","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0358","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in VirtuaNews Admin Panel Pro 1.0.3 allows remote attackers to execute arbitrary script as other users via (1) the mainnews parameter in admin.php, (2) the expand parameter in admin.php, (3) the id parameter in admin.php, (4) the catid parameter in admin.php, or (5) an unnamed parameter during the newslogo_upload action in admin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtuasystems:virtuanews_pro:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A71DCE88-F015-4F92-AE97-01B72B11AE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuasystems:virtuanews_pro:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30DEDB56-8215-4B2D-B1EA-18FA1334A82B"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuasystems:virtuanews_pro:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D3FF05F-4EC8-4E83-A047-E8A7B4374501"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtuasystems:virtuanews_pro:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"B39E1563-6F89-4B39-80C6-FA95A07EE886"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0069.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=107851556116088&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9812","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9819","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15402","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0069.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=107851556116088&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0359","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to execute arbitrary script as other users via the (1) c, (2) f, (3) showtopic, (4) showuser, or (5) username parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.3.1_final:*:*:*:*:*:*:*","matchCriteriaId":"6B42A0B9-628F-4173-8F94-3EACDE1D57AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.3_final:*:*:*:*:*:*:*","matchCriteriaId":"13A127C8-803E-44A5-BB30-09C351CF3ACD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107851589701916&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11053","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/4154","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9768","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15403","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107851589701916&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/4154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9768","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0360","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in passwd(1) in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107852274423414&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57454","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-088.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/694782","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9757","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15327","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107852274423414&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-088.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/694782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15327","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0361","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation fault) by creating a new Array object with a large size value, then writing into that array."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":false,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":false,"criteria":"cpe:2.3:a:apple:safari:beta2:*:*:*:*:*:*:*","matchCriteriaId":"04C977D9-26B7-4731-B8E1-CA44EB387B9A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107861828510106&w=2","source":"cve@mitre.org"},{"url":"http://www.insecure.ws/article.php?story=2004021918172533","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9815","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15413","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107861828510106&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.insecure.ws/article.php?story=2004021918172533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9815","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0362","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm."},{"lang":"es","value":"Múltiples desbordamientos de búfer basado en la pila en las rutinas de análisis de ICQ en el componente ISS Protocol Analysis Module (PAM), utilizado en varios productos RealSecure, Proventia y BlackICE, permite a atacantes remotos ejecutar código arbitrario mediante un respuesta SRV_MULTI conteniendo un paquete de respuesta SRV_USER_ONLINE y un paquete de respuesta SRV_META_USER con campos 1) nickname, (2) firstname, (3) lastname, o (4) email largos, como son explotados por el gusanto 'Witty'."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_agent_server:3.6ebz:*:*:*:*:*:*:*","matchCriteriaId":"711158F0-20A5-4F74-9F2B-E1D48085CEA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_agent_server:3.6eca:*:*:*:*:*:*:*","matchCriteriaId":"68D71B50-D280-4735-BFFE-2548C3117D70"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_agent_server:3.6ecb:*:*:*:*:*:*:*","matchCriteriaId":"083BFA17-FFE4-45AA-A4D1-9543921FB1A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_agent_server:3.6ecc:*:*:*:*:*:*:*","matchCriteriaId":"F13B990F-CBDC-4007-A85D-D1F320A7DB58"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_agent_server:3.6ecd:*:*:*:*:*:*:*","matchCriteriaId":"DBE8DE53-5DA3-423C-977C-61AFF207C9F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_agent_server:3.6ece:*:*:*:*:*:*:*","matchCriteriaId":"1CB70D11-262D-4017-9C80-D39DD2C6E1F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_agent_server:3.6ecf:*:*:*:*:*:*:*","matchCriteriaId":"01136FF6-3F16-47F2-9125-94B59BD6759D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6cbz:*:*:*:*:*:*:*","matchCriteriaId":"44D1258B-70B0-4B20-9992-1E5DDD899935"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6cca:*:*:*:*:*:*:*","matchCriteriaId":"8FFB331C-EA1C-4DC6-B699-A4F6AB8FFB7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6ccb:*:*:*:*:*:*:*","matchCriteriaId":"2E52039E-728B-4028-AEB0-9F77EE75B245"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6ccc:*:*:*:*:*:*:*","matchCriteriaId":"F101B85F-C141-4977-885F-C29306BF1C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6ccd:*:*:*:*:*:*:*","matchCriteriaId":"5746C7F8-8560-4082-AD73-66DB9D16D619"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6cce:*:*:*:*:*:*:*","matchCriteriaId":"A76034E6-B3B8-4A6A-B6CA-16AA2A8CD854"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6ccf:*:*:*:*:*:*:*","matchCriteriaId":"7A02F0CF-E1C0-43FE-9971-966002A53679"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6cbz:*:*:*:*:*:*:*","matchCriteriaId":"E33242A8-7BE6-4A69-A7CC-81BAFC2ADD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6cca:*:*:*:*:*:*:*","matchCriteriaId":"21E08CB5-0C90-4AF2-814C-3B4333681575"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6ccb:*:*:*:*:*:*:*","matchCriteriaId":"8A52A4E2-281A-460C-BCCC-00A464BD6270"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6ccc:*:*:*:*:*:*:*","matchCriteriaId":"B7DB4F39-B3C9-4AA2-A047-709A5D9B7F84"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6ccd:*:*:*:*:*:*:*","matchCriteriaId":"4987E532-8729-4BC4-9997-962C32BC6CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6cce:*:*:*:*:*:*:*","matchCriteriaId":"B47779E2-7BC5-4A5D-AD90-AC226735C631"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6ccf:*:*:*:*:*:*:*","matchCriteriaId":"3BB1C793-85F6-48EB-8A53-DE8E91271A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:3.6ebz:*:*:*:*:*:*:*","matchCriteriaId":"E237D220-5C26-428C-9112-1BBF355292CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:3.6eca:*:*:*:*:*:*:*","matchCriteriaId":"CF2247F3-0287-40DC-8CE8-3D0E15910056"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:3.6ecb:*:*:*:*:*:*:*","matchCriteriaId":"102A8F85-B009-4217-9F6C-9B5988822B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:3.6ecd:*:*:*:*:*:*:*","matchCriteriaId":"CC8C6E4A-B4B6-4E78-992E-DB98256C39A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:3.6ece:*:*:*:*:*:*:*","matchCriteriaId":"BD4FD0C8-AC98-44F7-8914-57CE03120014"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:3.6ecf:*:*:*:*:*:*:*","matchCriteriaId":"23AE96AD-84D6-4C76-9197-AFCDCC6EA705"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:7.0eba:*:*:*:*:*:*:*","matchCriteriaId":"DC82898A-8EF8-4DAC-A6DB-2540D0214502"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:7.0ebf:*:*:*:*:*:*:*","matchCriteriaId":"57B54D56-7F1B-4390-835F-EF6B4B9BF297"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:7.0ebg:*:*:*:*:*:*:*","matchCriteriaId":"1F9233FA-D30A-4D0B-9605-CAA119C97CC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:7.0ebh:*:*:*:*:*:*:*","matchCriteriaId":"B3D6113C-1D2C-4502-A6DE-BF2904E535E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:7.0ebj:*:*:*:*:*:*:*","matchCriteriaId":"2FE8756F-6E96-4E03-88A4-595F166A991D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:7.0ebk:*:*:*:*:*:*:*","matchCriteriaId":"F8094437-D1DD-40BB-8572-10D77ADACE4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:7.0ebl:*:*:*:*:*:*:*","matchCriteriaId":"E16E3E8D-B79A-4747-9CBE-60DEE3634F68"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_guard:3.6ebz:*:*:*:*:*:*:*","matchCriteriaId":"377798C2-58E5-409E-AC74-7B343F8DB4C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_guard:3.6eca:*:*:*:*:*:*:*","matchCriteriaId":"44F87C5D-6785-48BF-95C3-0B369FA460B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_guard:3.6ecb:*:*:*:*:*:*:*","matchCriteriaId":"31FBC29D-CA61-44D8-A270-46A03A833B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_guard:3.6ecc:*:*:*:*:*:*:*","matchCriteriaId":"A86CD5F2-8C8D-425D-9F00-B3640C53383F"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_guard:3.6ecd:*:*:*:*:*:*:*","matchCriteriaId":"1A5DA13A-1070-4EF9-A9DE-92A7FA83DAB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_guard:3.6ece:*:*:*:*:*:*:*","matchCriteriaId":"577AEB0F-8644-4125-8A43-CBC82CF44853"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_guard:3.6ecf:*:*:*:*:*:*:*","matchCriteriaId":"B530CD88-6B32-480C-9603-A25C38D274C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_network_sensor:7.0:*:*:*:*:*:*:*","matchCriteriaId":"9A0F6286-EF98-44BD-8CA6-BAB33544EA64"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_network_sensor:7.0:xpu_20.11:*:*:*:*:*:*","matchCriteriaId":"7A504DCD-CF18-4539-A7CB-EA04BFA81619"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_network_sensor:7.0:xpu_22.10:*:*:*:*:*:*","matchCriteriaId":"9A191358-1459-4E71-9F12-99D12003E7B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_network_sensor:7.0:xpu_22.4:*:*:*:*:*:*","matchCriteriaId":"CC8E40A1-3249-41D5-8B0E-6BCD9DB233D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_network_sensor:7.0:xpu_22.9:*:*:*:*:*:*","matchCriteriaId":"A69442C9-948D-4A9B-9457-EB88264C01E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_sentry:3.6ebz:*:*:*:*:*:*:*","matchCriteriaId":"2F724DC4-27FB-4A03-821E-42950C29EED5"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_sentry:3.6eca:*:*:*:*:*:*:*","matchCriteriaId":"6F0A7A6F-1D77-4B9A-83D8-65EDA6C03520"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_sentry:3.6ecb:*:*:*:*:*:*:*","matchCriteriaId":"3E50FCC4-5C32-4F7E-A344-CAC2AFF8FA25"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_sentry:3.6ecc:*:*:*:*:*:*:*","matchCriteriaId":"A52E596F-5C78-4E50-9E47-FA2302338700"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_sentry:3.6ecd:*:*:*:*:*:*:*","matchCriteriaId":"E644AD11-6279-45D5-A66D-AA7B2308F698"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_sentry:3.6ece:*:*:*:*:*:*:*","matchCriteriaId":"B48FAF98-BFE6-4217-8C47-56BE3DA99BFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_sentry:3.6ecf:*:*:*:*:*:*:*","matchCriteriaId":"8983BE98-CC42-4B87-931B-31EF6B9AB840"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.0:*:windows:*:*:*:*:*","matchCriteriaId":"FDDE63D7-E55B-4835-8743-328F3030F4EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.0.1:*:windows:*:*:*:*:*","matchCriteriaId":"97C22F7D-EB60-4B78-87AA-1BFA2FA4E515"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.0.1_win_sr1.1:*:*:*:*:*:*:*","matchCriteriaId":"1447560D-A958-4BCC-8115-64F3D04B49D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.5:*:windows:*:*:*:*:*","matchCriteriaId":"D325FA2D-0369-4AA7-B71B-26C4045DE830"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.5:sr3.2:windows:*:*:*:*:*","matchCriteriaId":"63582601-9CF4-42B0-B020-DE545C6F6476"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.5:sr3.3:windows:*:*:*:*:*","matchCriteriaId":"E51BF25F-4C02-46FF-BB15-737AE101323A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.5_win_sr3.1:*:*:*:*:*:*:*","matchCriteriaId":"FF470B25-8035-40A4-BBCC-9CEF2D90B315"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.5_win_sr3.4:*:*:*:*:*:*:*","matchCriteriaId":"A07C2AA4-15C9-4145-8630-F2BDDD1ADAA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.5_win_sr3.5:*:*:*:*:*:*:*","matchCriteriaId":"95ADE273-2B32-45F8-A19A-2B3CF0E3C5E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.5_win_sr3.6:*:*:*:*:*:*:*","matchCriteriaId":"6F4A847C-73E3-4167-A701-5CFA34B41F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.5_win_sr3.7:*:*:*:*:*:*:*","matchCriteriaId":"9DE03A8A-0BBF-4A00-854E-E5D3AEEA3038"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.5_win_sr3.8:*:*:*:*:*:*:*","matchCriteriaId":"846E7E1C-D355-41A4-A5DF-0ED7D36CB606"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.5_win_sr3.9:*:*:*:*:*:*:*","matchCriteriaId":"B921BE08-18CB-410F-9FBF-378B345BB632"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:6.5_win_sr3.10:*:*:*:*:*:*:*","matchCriteriaId":"E9A0A43B-1C18-4865-81EC-94823FA327D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:7.0:xpu22.1:*:*:*:*:*:*","matchCriteriaId":"50DDAB1D-D84D-41B4-BE61-B031F85BAA7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:7.0:xpu22.10:*:*:*:*:*:*","matchCriteriaId":"345F0C75-D471-47AB-90B2-F0E6E08D65D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:7.0:xpu22.11:*:*:*:*:*:*","matchCriteriaId":"982C0194-9C25-4731-9EC2-F5292E596D8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:7.0:xpu22.2:*:*:*:*:*:*","matchCriteriaId":"AD295E17-E4EB-41FC-A8FA-E463EF2CB33A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:7.0:xpu22.3:*:*:*:*:*:*","matchCriteriaId":"3AE17062-3422-4684-B5B4-29410B03A16A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:7.0:xpu22.4:*:*:*:*:*:*","matchCriteriaId":"6E854CC4-B8A6-4565-BA20-307C4B598409"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:7.0:xpu22.5:*:*:*:*:*:*","matchCriteriaId":"CEC8903E-54DB-4AFF-98EB-50DD7E989685"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:7.0:xpu22.6:*:*:*:*:*:*","matchCriteriaId":"679594CC-1517-44C1-9A27-6D3041D94F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:7.0:xpu22.7:*:*:*:*:*:*","matchCriteriaId":"E86D698A-867A-49D2-81A0-E9001F7CAEA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:7.0:xpu22.8:*:*:*:*:*:*","matchCriteriaId":"8174C7C5-91E0-4A1F-9A4B-6BDABA04E76C"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_server_sensor:7.0:xpu22.9:*:*:*:*:*:*","matchCriteriaId":"38CA54FF-3A3F-4994-82C3-B07D316375D8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_a_series_xpu:20.11:*:*:*:*:*:*:*","matchCriteriaId":"539881F0-EBAC-46DC-9CFB-61EC25D5E081"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_a_series_xpu:22.1:*:*:*:*:*:*:*","matchCriteriaId":"3AB5CCAC-7E1E-4CCB-9233-9FBF0BC1CC9C"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_a_series_xpu:22.2:*:*:*:*:*:*:*","matchCriteriaId":"9316064A-EE65-4444-AEA7-9820CAA725CE"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_a_series_xpu:22.3:*:*:*:*:*:*:*","matchCriteriaId":"5B123819-8C67-4163-BB2B-EB25F85D9B63"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_a_series_xpu:22.4:*:*:*:*:*:*:*","matchCriteriaId":"64225CAB-B26C-42DB-B73E-D561AE98DE3B"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_a_series_xpu:22.5:*:*:*:*:*:*:*","matchCriteriaId":"CB5C9774-043D-40C7-B8A1-A054893CF32B"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_a_series_xpu:22.6:*:*:*:*:*:*:*","matchCriteriaId":"1F7036D0-11EC-4DF1-89C5-A4CAE1F2EADF"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_a_series_xpu:22.7:*:*:*:*:*:*:*","matchCriteriaId":"7851B0FE-865B-4B98-BC9A-0F9F33B919FF"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_a_series_xpu:22.8:*:*:*:*:*:*:*","matchCriteriaId":"FA8B4BFA-24A1-4912-BF8F-BC1B34B7CF23"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_a_series_xpu:22.9:*:*:*:*:*:*:*","matchCriteriaId":"8FF13B73-03B1-4293-BDD5-531D27194BB3"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_a_series_xpu:22.10:*:*:*:*:*:*:*","matchCriteriaId":"8FA1B66A-68FA-4D7B-9F84-2F246AF02BF7"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_g_series_xpu:22.1:*:*:*:*:*:*:*","matchCriteriaId":"34C4BE13-2464-4503-95B0-DAAB6456DE21"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_g_series_xpu:22.2:*:*:*:*:*:*:*","matchCriteriaId":"48849D08-AEFB-4803-8BBE-3B26DA3AA2AB"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_g_series_xpu:22.3:*:*:*:*:*:*:*","matchCriteriaId":"0C3D5C60-1E1C-4831-895A-7C28D279FFF8"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_g_series_xpu:22.4:*:*:*:*:*:*:*","matchCriteriaId":"5AC28B6F-D51D-45D6-8255-6B51E9AE3F7F"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_g_series_xpu:22.5:*:*:*:*:*:*:*","matchCriteriaId":"E7C23B03-7173-4548-926E-DADA3CCF5C71"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_g_series_xpu:22.6:*:*:*:*:*:*:*","matchCriteriaId":"0F2D006B-9F5B-40CC-991D-A7791D8ED195"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_g_series_xpu:22.7:*:*:*:*:*:*:*","matchCriteriaId":"AA2C7B52-9341-4F88-B4D6-751573AB7A3A"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_g_series_xpu:22.8:*:*:*:*:*:*:*","matchCriteriaId":"AC9EFA94-5658-4AB0-9F81-9B5ED9F2002C"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_g_series_xpu:22.9:*:*:*:*:*:*:*","matchCriteriaId":"40FFBAF4-558B-410E-A655-97B769656191"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_g_series_xpu:22.10:*:*:*:*:*:*:*","matchCriteriaId":"F9083295-15FE-4965-9C0D-3663FBA4E769"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_g_series_xpu:22.11:*:*:*:*:*:*:*","matchCriteriaId":"748C02A3-71AE-4E3F-9C60-981E01CEDD50"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_m_series_xpu:1.1:*:*:*:*:*:*:*","matchCriteriaId":"76485FF8-4187-4934-994C-440B252B2A8D"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_m_series_xpu:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A1D62AAB-5111-4C77-B1DE-B0EAB27EA8DB"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_m_series_xpu:1.3:*:*:*:*:*:*:*","matchCriteriaId":"D1CEE521-AF0A-4210-A1DD-DF988287F989"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_m_series_xpu:1.4:*:*:*:*:*:*:*","matchCriteriaId":"D704A967-4032-4C23-A63E-ADCC31BB6ED7"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_m_series_xpu:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E97E44BD-5424-48FD-A1BF-C5F616A045BC"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_m_series_xpu:1.6:*:*:*:*:*:*:*","matchCriteriaId":"9778EC91-CCD8-403E-BE74-50E19FF807B2"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_m_series_xpu:1.7:*:*:*:*:*:*:*","matchCriteriaId":"76715627-E34C-4F04-9174-C20E3218607C"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_m_series_xpu:1.8:*:*:*:*:*:*:*","matchCriteriaId":"DAC74BF9-531D-415F-915A-06423E4EB6FC"},{"vulnerable":true,"criteria":"cpe:2.3:h:iss:proventia_m_series_xpu:1.9:*:*:*:*:*:*:*","matchCriteriaId":"CBC5E128-9F84-4712-903A-3AEB347F3BF0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107965651712378&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11073","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-104.shtml","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20040318.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/947254","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/4355","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9913","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/xforce/alerts/id/166","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15442","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15543","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107965651712378&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-104.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eeye.com/html/Research/Advisories/AD20040318.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/947254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/4355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://xforce.iss.net/xforce/alerts/id/166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15442","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15543","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0363","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en el componente ActiveX SymSpamHelper (symspam.dll) en Norton AntiSpam 2004,  usado en Norton Internet Security 2004, permite a atacantes remotos ejecutar código arbitrario mediante un parámetro largo en el método LaunchCustomRuleWizard."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antispam:2004:*:*:*:*:*:*:*","matchCriteriaId":"EA28BC22-ABF0-4F1E-BA83-85B398775450"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107970870606638&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107980262324362&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11169","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/344718","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/advisories/antispam.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.sarc.com/avcenter/security/Content/2004.03.19.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9916","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15536","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107970870606638&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107980262324362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/344718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/advisories/antispam.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.sarc.com/avcenter/security/Content/2004.03.19.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15536","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0364","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method."},{"lang":"es","value":"El componente Activex WrWrapNISUM (WrapUM.dll) de Norton Internet Security 2004 está marcado como seguro para secuencias de comandos, lo que permite a atacantes remotos ejecutar programas arbitrarios mediante el método LaunchURL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2004:*:*:*:*:*:*:*","matchCriteriaId":"2ACBDE0C-91D2-4357-9724-B60BBFF5D2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2004:*:professional:*:*:*:*:*","matchCriteriaId":"09CA1AC8-E273-44C1-9D1C-19542EB57433"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107970885922442&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107980262324362&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11168","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/549054","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/advisories/nisrce.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.sarc.com/avcenter/security/Content/2004.03.19.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9915","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15538","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107970885922442&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107980262324362&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/549054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.nextgenss.com/advisories/nisrce.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.sarc.com/avcenter/security/Content/2004.03.19.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15538","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0365","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a malformed RADIUS packet that triggers a null dereference."},{"lang":"es","value":"La función dissect_attribue_value_pairs en packet-radius.c de Ethereal 0.8.13 a 0.10.2 permite a atacantes remotos causar una denegación de servicio (caída) mediante un paquete RADIUS malformado que dispara una desreferencia nula."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal:ethereal:*:*:*:*:*:*:*:*","versionStartIncluding":"0.8.13","versionEndExcluding":"0.10.3","matchCriteriaId":"6AE67AED-041A-4617-A33A-0DEEB6BE2428"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108058005324316&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=108213710306260&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=ethereal-dev&m=107962966700423&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11185","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200403-07.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00013.html","source":"cve@mitre.org","tags":["Broken Link","URL Repurposed"]},{"url":"http://www.kb.cert.org/vuls/id/124454","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:024","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-136.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-137.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15571","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A879","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A891","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9196","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108058005324316&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=108213710306260&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=ethereal-dev&m=107962966700423&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200403-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","URL Repurposed"]},{"url":"http://www.kb.cert.org/vuls/id/124454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-136.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-137.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0366","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statements."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en la librería libpam-pgsql anteriores a 0.5.2 permite a atacantes ejecutar sentencias SQL arbitrarias."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pam-pgsql:pam-pgsql:*:*:*:*:*:*:*:*","versionEndExcluding":"0.5.2","matchCriteriaId":"A5C6ACAE-C08D-48B3-8701-AAE917ABD719"}]}]}],"references":[{"url":"http://secunia.com/advisories/11237","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-469","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10266","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15651","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/11237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0367","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation protocol selector."},{"lang":"es","value":"Ethereal 0.8.13 a 0.10.2 permite a atacantes remotos causar una denegación de servicio (caída) mediante un seleccionador de protocolo de Presentación de longitud cero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*","matchCriteriaId":"3240376B-44CB-4BF3-9EA6-05841FE70AF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*","matchCriteriaId":"D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*","matchCriteriaId":"9DC35478-9276-4732-9F0D-13CA958C617C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*","matchCriteriaId":"77000951-EF3E-41D8-8545-497BA3E5C5E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*","matchCriteriaId":"83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CB461B6B-B731-4732-AAD0-191BE50189D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"19961880-D38A-4785-A7C5-879A061119BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"831705D2-C4DE-475F-B908-8859064AFB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"A4622585-20E2-46E9-B773-74729FF22EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E86ADCB6-0940-4CB9-85F1-A7694210FB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"042B6289-D2E2-4369-BB40-EA6EE7025D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"F0A48938-30B8-4403-B08A-177FFCB9054B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"67B81EFD-27C1-411C-AFF3-E5340627E3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"680934CF-7F9B-41E4-AA03-ECD96F477AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"DBCCE368-64E6-4CEC-B068-9B8BA2527289"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"CF5374A4-5194-45FD-895D-B04FDC7E853C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*","matchCriteriaId":"338CEFD7-EBC0-43FB-B482-9A3D0834447E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"136FF83B-2B03-4E5F-95C1-84195BE8392A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108058005324316&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11185","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200403-07.xml","source":"cve@mitre.org"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00013.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.ethereal.com/lists/ethereal-dev/200404/msg00296.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.kb.cert.org/vuls/id/792286","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:024","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-136.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-137.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15570","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11071","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A880","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A905","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108058005324316&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200403-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.ethereal.com/lists/ethereal-dev/200404/msg00296.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.kb.cert.org/vuls/id/792286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-136.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-137.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15570","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0368","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet."},{"lang":"es","value":"Vulnerabilidad de doble liberación de memora en dtlogin de CDE sobre Solaris, y posiblemente otros sistemas operativos, permite a atacantes remotos ejecutar código arbitrario mediante cierto paquete UDP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:cde_common_desktop_environment:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B1CF2E9D-CDA8-4131-93F3-7A2860A688C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:cde_common_desktop_environment:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"690A998B-EDDA-4247-96CC-318718C3F79F"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:cde_common_desktop_environment:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B7178A47-F7D9-44FC-A2D2-82504EA6F115"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:cde_common_desktop_environment:1.2:*:*:*:*:*:*:*","matchCriteriaId":"74C56D68-802D-46C7-ABB1-DA1D9BE00C21"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:cde_common_desktop_environment:2.0:*:*:*:*:*:*:*","matchCriteriaId":"706EEB12-AB99-4126-956F-B7253D51D0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:cde_common_desktop_environment:2.1:*:*:*:*:*:*:*","matchCriteriaId":"2F897B7F-2F0E-4D96-89EA-621D06B7D613"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:cde_common_desktop_environment:2.1.20:*:*:*:*:*:*:*","matchCriteriaId":"0884B675-4AA3-44B4-9BA4-1678070A6F6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xi_graphics:dextop:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BE1691F6-D053-42AA-925E-14C43308A30B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xi_graphics:dextop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"F07C1BEA-0C8B-4AF1-AC1B-46DB439EA3E4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040801-01-P","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0064.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2004-March/000402.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11210/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11214/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11495/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11614/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101478-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57539-1&searchclause=security","source":"cve@mitre.org"},{"url":"http://www.auscert.org.au/render.html?it=4103&cid=3734","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-129.shtml","source":"cve@mitre.org"},{"url":"http://www.immunitysec.com/downloads/dtlogin.sxw.pdf","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/179804","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9958","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15581","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1436","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040801-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0064.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2004-March/000402.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11210/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11214/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11495/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11614/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101478-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57539-1&searchclause=security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.auscert.org.au/render.html?it=4103&cid=3734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-129.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.immunitysec.com/downloads/dtlogin.sxw.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/179804","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0369","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:entrust:entrust_libkmp_isakmp_library:*:*:*:*:*:*:*:*","matchCriteriaId":"302E62EC-C81E-4BD5-A8E0-0CC55F34BE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:7.0:*:solaris:*:*:*:*:*","matchCriteriaId":"8656778B-9299-436B-AF8A-64C042273751"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:7.0.4:*:solaris:*:*:*:*:*","matchCriteriaId":"78A16B88-E49B-4C4C-A82E-03511C99872D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:7.0.4:*:windows_2000_nt:*:*:*:*:*","matchCriteriaId":"30BE919C-A7DF-46C3-BFF6-F0452F0FC434"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:8.0:*:solaris:*:*:*:*:*","matchCriteriaId":"F66D6BB6-2355-4644-8A18-725F9E970EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:8.0:*:windows_2000_nt:*:*:*:*:*","matchCriteriaId":"AD892E2E-E1C9-49A2-A42C-3B56F2B0BA4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:velociraptor:1.5:*:*:*:*:*:*:*","matchCriteriaId":"C260200D-60D2-41E2-8F5C-50796EBBF8E2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security_5300:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3EDDB133-A6C8-45B4-9988-3D3D2F3952E8"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security_5400:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C1B7CF42-F93E-48E6-BCD2-30B357F80DDA"}]}]}],"references":[{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4339","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-206.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11039","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/xforce/alerts/id/181","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15669","source":"cve@mitre.org"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-206.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/xforce/alerts/id/181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15669","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0370","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic."},{"lang":"es","value":"La llamada setsockopt en el Proyecto KAME de implementación de IPv6, usado en FreeBSD 5.2, no maneja adecuadamente ciertas opciones de sockets IPv6, lo que podría permitir a atacantes leer memoria del kernel y causar una excepción \"pánico del sistema\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:06.ipv6.asc","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11233","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9992","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15662","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:06.ipv6.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9992","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0371","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path."},{"lang":"es","value":"Heimdal 0.6.x anteriores a 0.6.1 y 0.5.x anteriores a 0.5.3 no realiza adecuadamente ciertas comprobaciones de consistencia de peticiones entre reinos, lo que permite a atacantes remotos con control de un reino impersonar a otros en la ruta de confianza entre reinos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.4a:*:*:*:*:*:*:*","matchCriteriaId":"10627869-B21D-4EC6-B574-D6433D169940"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.4b:*:*:*:*:*:*:*","matchCriteriaId":"81AA2047-51E1-4D8C-B6CA-B2DB05D37480"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.4c:*:*:*:*:*:*:*","matchCriteriaId":"434B4406-0B3A-4E7A-94D7-9E9ED63D7101"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.4d:*:*:*:*:*:*:*","matchCriteriaId":"C752AE86-36DE-47C9-8AA6-2242918228B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.4e:*:*:*:*:*:*:*","matchCriteriaId":"D034C52F-7D52-427B-A803-97ABD587306D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.5:*:*:*:*:*:*:*","matchCriteriaId":"449DDE8E-2C1D-423B-B66F-64DDFB1A61F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"9FBB280F-FD42-4B0F-9E40-2E21AB76EFAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"7C97EBE9-0A39-4EFE-B95C-C7813CE68389"},{"vulnerable":true,"criteria":"cpe:2.3:a:kth:heimdal:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"5803F2FB-7C3D-40E9-BC30-DC66A7A600F8"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:08.heimdal.asc","source":"cve@mitre.org"},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/009_kerberos.patch","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200404-09.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-476","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.pdc.kth.se/heimdal/advisory/2004-04-01/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15701","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:08.heimdal.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/009_kerberos.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200404-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.pdc.kth.se/heimdal/advisory/2004-04-01/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15701","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0372","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts."},{"lang":"es","value":"xine permite a usuarios locales sobreecribir ficheros arbitrarios mediante un ataque de enlaces simbólicos (symlink attack) aprovechando un correo electrónico de informe de errores que es generado por los scripts xine-bugreport o xine-check."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"56DE52C9-2381-483F-956D-C83503EBA664"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"BC260B04-C616-4A6A-9773-D535EA8A45AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"72DEB448-0F57-40FD-889E-6C8AC6920C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"DE750368-54FD-4CCD-AFF7-B26B3A4BA539"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"58476B06-9E48-4649-8761-B32FE01BA7C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"76CE8EF1-0578-4E12-A87D-832978ED484D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A0DF434D-3BE2-4BCF-A6FC-397475830FDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"AFA95FC2-2082-4367-AD3D-0F876972E5A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"005EA1B5-7717-4CBD-9D21-249A5A497D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"19A33FCB-47FE-4F2E-9043-1F13805F0F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"AE1A9A53-860B-41CF-8BFD-4792775765E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"5246E535-1B8F-4BC1-AD1D-9BFA7BF28D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta12:*:*:*:*:*:*:*","matchCriteriaId":"C247EF56-6E67-41DA-8C49-C9310C42B8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc0a:*:*:*:*:*:*:*","matchCriteriaId":"D4E5CCDF-3472-4994-A47A-5A94D10F1C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"BAFC4559-D7E3-4C75-8B79-85A79067E261"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"3544B231-8C98-42D1-A2B2-E62109BDD796"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc3:*:*:*:*:*:*:*","matchCriteriaId":"3C69FEB8-DFE6-4241-9341-D8A4929F0FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc3a:*:*:*:*:*:*:*","matchCriteriaId":"99D8D224-15C4-4D15-9A04-4A1F3E1F63B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc3b:*:*:*:*:*:*:*","matchCriteriaId":"F469DA5D-6020-4490-B671-2CEFB151C736"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107997911025558&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200404-20.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-477","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9939","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15564","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107997911025558&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200404-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15564","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0374","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Interchange before 5.0.1 allows remote attackers to \"expose the content of arbitrary variables\" and read or modify sensitive SQL information via an HTTP request ending with the \"__SQLUSER__\" string."},{"lang":"es","value":"Interchange anterior a 4.8.3 permite a atacantes remotos \"exponer el contenido de variables arbitrarias\" y leer o modificar información SQL sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3442CBE-86D6-4FA8-AC79-29F18BB6F2A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"50FA48BD-CAA7-40E3-8672-871CF61A3AFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.3:*:*:*:*:*:*:*","matchCriteriaId":"4B329F4D-9B47-41E0-979F-72DA04CFA90E"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.4:*:*:*:*:*:*:*","matchCriteriaId":"DE32376A-4A29-4510-938C-9CBE052CDFF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.5:*:*:*:*:*:*:*","matchCriteriaId":"3DE765B9-338F-4C32-99C8-C3F1BDD259A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.6:*:*:*:*:*:*:*","matchCriteriaId":"2AC3C90B-5058-460A-99AF-E79A80B116D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6166A6EA-551E-4E0E-AC38-53776D817207"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.8:*:*:*:*:*:*:*","matchCriteriaId":"C1AC40E4-2568-45FF-A857-61234C81E8A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.9:*:*:*:*:*:*:*","matchCriteriaId":"7815F8C9-2435-446A-B808-45CC91FA70FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:interchange_development_group:interchange:5.0:*:*:*:*:*:*:*","matchCriteriaId":"89CD71AD-539A-4529-B617-14E667D98F4C"}]}]}],"references":[{"url":"http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11234","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-471","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.icdevgroup.org/pipermail/interchange-announce/2004/000043.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10005","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15670","source":"cve@mitre.org"},{"url":"http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.icdevgroup.org/pipermail/interchange-announce/2004/000043.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15670","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0375","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero."},{"lang":"es","value":"SIMNDIS.SYS en Symantec Norton Internet Securiy 2003 y 2004, Norton Personal Firewall 2003 y 2004, Client Firewall 5.01 y 5.1.1, y Client Security 1.0 y 1.1 permite a atacantes remotos causar una denegación de servicio (bucle infinito) mediante un paquete TCP con (1) opción SACK o (2) opción Suma de Comprobación de Datos Alternativa seguida por una longitud cero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_firewall:5.01:*:*:*:*:*:*:*","matchCriteriaId":"4AEFBAEB-18D4-4082-9F19-C47113841C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_firewall:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6EA9657C-14D2-418A-AABD-96392E87F4B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C1DFD4CB-40A1-4D70-97AC-0941826F28CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7483F6DD-EDC0-497E-A5A9-B186E02CCCEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2003:*:*:*:*:*:*:*","matchCriteriaId":"AEF97C5F-3A80-4973-85FD-5BCE43B32AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2003:*:pro:*:*:*:*:*","matchCriteriaId":"1F0BF645-7C56-4ED6-91C0-AE4CFAB62EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2004:*:*:*:*:*:*:*","matchCriteriaId":"2ACBDE0C-91D2-4357-9724-B60BBFF5D2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2004:*:pro:*:*:*:*:*","matchCriteriaId":"D7875372-44D7-47AB-8F8C-4A3AB98FB3B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_personal_firewall:2003:*:*:*:*:*:*:*","matchCriteriaId":"74E5CAF7-C305-4FAF-8DA7-627D83F65185"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_personal_firewall:2004:*:*:*:*:*:*:*","matchCriteriaId":"36C0FF0C-EB6E-479B-BFF9-E55CBC0D6500"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108275582432246&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009379","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009380","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/Research/Upcoming/20040309.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9912","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.symantec.com/avcenter/security/Content/2004.04.20.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15433","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15936","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108275582432246&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009379","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eeye.com/html/Research/Upcoming/20040309.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9912","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.symantec.com/avcenter/security/Content/2004.04.20.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0376","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"oftpd 0.3.6 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command with a large value."},{"lang":"es","value":"oftpd 0.3.6 y anteriores permiten a atacantes remotos causar una denegación de servicio (caída) mediante un comando PORT con un valor muy grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oftpd:oftpd:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.6","matchCriteriaId":"4F1F2A9C-D38E-4BF5-ADCA-A441438B20DE"}]}]}],"references":[{"url":"http://secunia.com/advisories/11220","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200403-08.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-473","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9980","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.time-travellers.org/oftpd/oftpd-dos.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15622","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200403-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.time-travellers.org/oftpd/oftpd-dos.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0377","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character."},{"lang":"es","value":"Desbordamiento de búfer en la función win32_stat de \r\n\r\nActivePerl de ActiveState, y \r\nPerl de Larry Wall anterior a 5.8.3\r\n\r\npermite a atacantes remotos ejecutar comandos arbitrarios mediante nombres de fichero que terminan en un carácter \"\" (barra invertida)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:*:*:*:*:*:*:*:*","matchCriteriaId":"86BADAC0-8A7B-4348-A78C-BAAFD8A784FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:*:*:*:*:*:*:*:*","versionEndIncluding":"5.8.3","matchCriteriaId":"6851ACEC-141C-40B2-B6E1-CD52D979CE37"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019794.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108118694327979&w=2","source":"cve@mitre.org"},{"url":"http://public.activestate.com/cgi-bin/perlbrowse?patch=22552","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=93&type=vulnerabilities","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/722414","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15732","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019794.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108118694327979&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://public.activestate.com/cgi-bin/perlbrowse?patch=22552","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=93&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/722414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15732","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0379","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Microsoft SharePoint Portal Server 2001 permite a atacantes remotos procesar contenido web elegido arbitrariamente y robar galletitas (cookies) mediante ciertos scripts de servidor."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_portal_server:2001:*:*:*:*:*:*:*","matchCriteriaId":"730A573C-F287-4A45-BDCC-B8C1FC3EBD12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_portal_server:2001:sp1:*:*:*:*:*:*","matchCriteriaId":"3D1893F4-DE07-488B-B656-1DAB034F7318"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_portal_server:2001:sp2:*:*:*:*:*:*","matchCriteriaId":"B166F877-BDE9-4943-875C-D1A6082668A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sharepoint_portal_server:2001:sp2a:*:*:*:*:*:*","matchCriteriaId":"451C0D23-26F9-4662-B6E6-747CDC72ABAB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108118352303273&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15729","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108118352303273&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15729","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0380","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the \"MHTML URL Processing Vulnerability.\""},{"lang":"es","value":"El Manejador del protocolo MHTML en Microsoft Outlook Express 5.5 SP2 a Outlook Express 6 SP1 permite a atacantes remotos eludir restricciones de dominio y ejecutar código arbitrario, como se ha demostrado en Internet Explorer usando código script en un archivo de ayuda compilada (CHM) te hace referencia a manejadores de protocolo InfoTech Storage (ITS) como\r\n\r\nms-its\r\nits\r\nmk:@MSITStore\r\n\r\ntambién llamada \"Vulnerabilidad en Procesamiento de URL MHTML\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.5:*:*:*:*:*:*:*","matchCriteriaId":"57C8ACA2-A3C6-4435-9C0C-B316879FE1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*","matchCriteriaId":"85FD3557-956D-4A96-8AA5-5FD9DB87FD11"}]}]}],"references":[{"url":"http://secunia.com/advisories/10523","source":"cve@mitre.org"},{"url":"http://www.k-otik.net/bugtraq/02.18.InternetExplorer.php","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/323070","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/354447","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/358913","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9105","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9658","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-013","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15705","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1010","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1028","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A882","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A990","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.k-otik.net/bugtraq/02.18.InternetExplorer.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/323070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/354447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/358913","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9658","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-104A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1010","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1028","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A990","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0381","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file."},{"lang":"es","value":"mysqlbug de MySQL pemite a usuarios locales sobreescribir  ficheros elgidos arbitrariamente mediante un ataque de enlaces simbólicos sobre el fichero temporal failed-mysql-bugreport"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CFEDB808-A8D8-403E-9103-AB486C793EF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.20.32a:*:*:*:*:*:*:*","matchCriteriaId":"B270BC3E-FCB8-4E85-A069-A6AA3D348E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.26:*:*:*:*:*:*:*","matchCriteriaId":"C883DB55-0CAC-462A-912B-69E9E7E1C79C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.27:*:*:*:*:*:*:*","matchCriteriaId":"45AD5549-07DC-43DA-B277-D7BF16ABE4E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.28:*:*:*:*:*:*:*","matchCriteriaId":"787CB28C-74C6-4356-8AB3-4183CD941EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.29:*:*:*:*:*:*:*","matchCriteriaId":"C30459B9-0FAC-48DF-9601-AAD1A028846F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.30:*:*:*:*:*:*:*","matchCriteriaId":"86DC48D3-09F1-48BD-A783-0549D4D5E8B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.22.32:*:*:*:*:*:*:*","matchCriteriaId":"209E0C63-FC71-4E19-B3D5-BCB71A758252"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.2:*:*:*:*:*:*:*","matchCriteriaId":"268CDE97-C837-482A-BB16-77662C45074C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.3:*:*:*:*:*:*:*","matchCriteriaId":"0E04B7CC-9E17-47AB-8923-A4DBD24119FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.5:*:*:*:*:*:*:*","matchCriteriaId":"B0BE4B79-BF2A-4323-B337-62B388FCF9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.8:*:*:*:*:*:*:*","matchCriteriaId":"18E35942-7E70-468E-BA15-97CA5086C1B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.9:*:*:*:*:*:*:*","matchCriteriaId":"CCB886BB-EA7C-4618-9029-BB16A45A4301"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.10:*:*:*:*:*:*:*","matchCriteriaId":"56EC4832-82D1-4E57-86DA-8918CA006723"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.22:*:*:*:*:*:*:*","matchCriteriaId":"92A42D3C-2539-469A-81BD-8306CD7E1A12"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.23:*:*:*:*:*:*:*","matchCriteriaId":"8060F90A-968A-45EB-9CA2-E83E8D8F7BC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.24:*:*:*:*:*:*:*","matchCriteriaId":"D3BCEB43-67D4-4711-8C30-4D2D93159EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.25:*:*:*:*:*:*:*","matchCriteriaId":"362893B4-9BC1-4584-ACD5-08878A19E3C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.26:*:*:*:*:*:*:*","matchCriteriaId":"FD940715-318E-44C1-8613-FEBFB8F1741A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.27:*:*:*:*:*:*:*","matchCriteriaId":"167130D3-2AD2-4B82-B805-6A0BA45C4DCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.28:*:*:*:*:*:*:*","matchCriteriaId":"17187451-7715-464D-9C7B-3F949345CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.28:gamma:*:*:*:*:*:*","matchCriteriaId":"1BFFFBBE-E604-4BCB-A143-E26CD91C0B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.29:*:*:*:*:*:*:*","matchCriteriaId":"CE3658E1-B451-4B8B-A21A-3D66359D21DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.30:*:*:*:*:*:*:*","matchCriteriaId":"81F0E7D8-0713-4E9C-B91A-DA5EB314DEBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.31:*:*:*:*:*:*:*","matchCriteriaId":"041AD718-39A7-4B13-90C5-680743B1C982"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.32:*:*:*:*:*:*:*","matchCriteriaId":"EA2F4EA8-64A3-4E11-A6A3-5179738157D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.33:*:*:*:*:*:*:*","matchCriteriaId":"067774E4-0704-4F5D-9B46-4DE19FE51163"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.34:*:*:*:*:*:*:*","matchCriteriaId":"AD26FA75-C3C5-434C-9A82-E5F798A8E47C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.36:*:*:*:*:*:*:*","matchCriteriaId":"C406CBD9-2656-4EC8-87FB-5E8A7F1D690F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.37:*:*:*:*:*:*:*","matchCriteriaId":"DA0C0EE5-B2AA-4862-B144-24733CC86A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.38:*:*:*:*:*:*:*","matchCriteriaId":"536F109A-7932-4424-889E-02922D8B783D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.39:*:*:*:*:*:*:*","matchCriteriaId":"036AE068-C061-49B1-95D1-98A09A79EE25"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.40:*:*:*:*:*:*:*","matchCriteriaId":"E7A83184-F554-42C0-8162-B484CBAD09D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.41:*:*:*:*:*:*:*","matchCriteriaId":"DC229C7C-BF4F-473B-BB01-BBD96CD06D4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:*","matchCriteriaId":"A9244622-781A-46AE-866D-0EDDE5323048"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.43:*:*:*:*:*:*:*","matchCriteriaId":"6B99D1B4-9C0F-4303-A00C-50D88CCB8D3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.44:*:*:*:*:*:*:*","matchCriteriaId":"FA85DD18-19D9-4BF8-8420-DEA24AE44046"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.45:*:*:*:*:*:*:*","matchCriteriaId":"670C3F10-A811-43D0-B762-5791D41C8B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.46:*:*:*:*:*:*:*","matchCriteriaId":"7F379312-B95D-4C9B-918F-6A57B12EB5A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.47:*:*:*:*:*:*:*","matchCriteriaId":"C36F606D-59B6-4FA0-8785-3B14592FE9CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.48:*:*:*:*:*:*:*","matchCriteriaId":"2681F9FF-5899-4EFA-85A3-CEAB4402C786"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.49:*:*:*:*:*:*:*","matchCriteriaId":"9B13E0D9-0868-493F-A7EA-4A9E93CC4FBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.50:*:*:*:*:*:*:*","matchCriteriaId":"11A503C5-F2B8-4AFF-80F9-E035BAA68F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.51:*:*:*:*:*:*:*","matchCriteriaId":"64B5AA62-1AFC-45E4-BC47-91BC852B3F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.52:*:*:*:*:*:*:*","matchCriteriaId":"50FC2146-5BC0-4CA6-8700-5877C01B777D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.53:*:*:*:*:*:*:*","matchCriteriaId":"F79AFBCE-FFF7-4348-BE17-42A7978E17E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.53a:*:*:*:*:*:*:*","matchCriteriaId":"6A3C056E-EEB9-4B95-A155-F71B80B9695D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.54:*:*:*:*:*:*:*","matchCriteriaId":"C1AB3865-4ABC-4B5A-8C4F-65C6E5B2E956"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.54a:*:*:*:*:*:*:*","matchCriteriaId":"2EFB2D10-E255-4DD3-BF03-217803CDED24"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.55:*:*:*:*:*:*:*","matchCriteriaId":"436D90B0-C839-4B9F-853D-51C34459A11F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.56:*:*:*:*:*:*:*","matchCriteriaId":"F3535453-E7DC-4561-BB35-32DFF78E451C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:3.23.58:*:*:*:*:*:*:*","matchCriteriaId":"37512B4B-C428-4D30-AAF3-9557C7257967"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"41BEAD26-ADDC-4FC6-A493-584315183936"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"153E8DFB-4197-4117-87C6-C0FBE3C05600"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"765BF98E-7AB1-45EA-9935-2C311E621211"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCDCB80C-60B8-468E-A689-2C9DFF1F51C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"22408224-0634-4CC6-888F-892E9D932CE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2B2646B4-593E-4AC9-8292-1AD805632DC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"CD959AEC-EE71-4E86-9AD0-ED6FF45AC848"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E30EC061-A04C-4402-91A0-B7E8DA9DBA5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"EB5E12B3-F6CA-48CE-96C9-9B63EDB91C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.7:gamma:*:*:*:*:*:*","matchCriteriaId":"4D57E557-7F6D-4618-86AC-B10C08341900"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"3ECE1A40-0603-421E-BCCF-111EC3C2BCE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.8:gamma:*:*:*:*:*:*","matchCriteriaId":"B657610A-8EDB-407B-A81F-C3CDF2EF6ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"8EC10CD2-B9A3-46DD-839E-C7FB6647155F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.9:gamma:*:*:*:*:*:*","matchCriteriaId":"E4D5D4B9-B831-4DDD-8FDD-3D14F167822A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"5EC21395-4C78-4343-9452-578B24C2656D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.11:*:*:*:*:*:*:*","matchCriteriaId":"21BC82AF-5E80-4AE4-A765-9D3725D9E5F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.11:gamma:*:*:*:*:*:*","matchCriteriaId":"8CF2E25B-8689-4396-9C2B-99EEF4AB02BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.12:*:*:*:*:*:*:*","matchCriteriaId":"5032D74E-CC8D-4217-AEF0-98DCD1820AE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.13:*:*:*:*:*:*:*","matchCriteriaId":"A46FEF7C-18DD-4C64-AFA3-0626A8CE2B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.14:*:*:*:*:*:*:*","matchCriteriaId":"B3340604-0D38-4494-847B-E9E8B0026A28"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.15:*:*:*:*:*:*:*","matchCriteriaId":"EC117BF1-3127-477A-9500-C9A32596ED8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.0.18:*:*:*:*:*:*:*","matchCriteriaId":"FED5BA55-FF4F-4F89-89B1-554624DDA1AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.0:alpha:*:*:*:*:*:*","matchCriteriaId":"1D3D4850-19F0-4FAF-B0DE-09ECBE6DCF92"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108023246916294&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108206802810402&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200405-20.xml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/p-018.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-483","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:034","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-569.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-597.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9976","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15617","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11557","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108023246916294&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108206802810402&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200405-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/p-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-569.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-597.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9976","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11557","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0382","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration file setting."},{"lang":"es","value":"Vulnerabiliad desconocida en el sistema de impresión CUPS en Mac OS X 10.3.3 y Mac OS X 10.2.8, con impacto desconocido, posiblemente relacionado con una entrada en un fichero de configuración."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"cve@mitre.org"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00047.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15769","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15769","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0383","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to \"the handling of HTML-formatted email.\""},{"lang":"es","value":"Vulnerabilidad desconocida en Mail de Mac OS X 10.3.3 y 10.2.8, con impacto desconocido, relacionado con el \"manejo de correo electrónico en formato HTML\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"cve@mitre.org"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00047.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15768","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=61798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15768","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0385","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener.  NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, although the advisory alludes to multiple \"vulnerabilities.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:9.0.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"61FE71CE-F0F5-4D31-9E89-5A8F02D5042B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:9.0.2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4A525557-C85F-46C9-9E3A-37D678E398A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:9.0.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"223CADC9-C7ED-4AAE-9878-84F3261957C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_web_cache:9.0.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5D499C92-2D65-4318-AC37-46834B2474C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11i:*:*:*:*:*:*:*","matchCriteriaId":"9835D257-9664-4FBC-889D-C3465BC2D7D3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0078.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107945649127635&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108144419001770&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/2004alert66.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11118","source":"cve@mitre.org"},{"url":"http://www.inaccessnetworks.com/ian/services/secadv01.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/413006","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/4249","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9868","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15463","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0078.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107945649127635&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108144419001770&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/2004alert66.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.inaccessnetworks.com/ian/services/secadv01.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/413006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/4249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15463","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0386","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header."},{"lang":"es","value":"Desbordamiento de búfer en el procesador HTTP de MPlayer 1.0pre3 y anteriores, 0.90 y 0.91 permite a atacantes ejecutar código arbitrario mediante una cabecera Location larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90:*:*:*:*:*:*:*","matchCriteriaId":"2AD73BA0-D315-4ADA-A942-8DCC2A920B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_pre:*:*:*:*:*:*:*","matchCriteriaId":"710ACCE6-B3E3-474A-B78B-5A123EC24DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_rc:*:*:*:*:*:*:*","matchCriteriaId":"55D3C3E6-862E-470E-8CEA-4B333B906172"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.91:*:*:*:*:*:*:*","matchCriteriaId":"CA841B0B-8FA9-45F9-9B60-7C9BD1A92E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre1:*:*:*:*:*:*:*","matchCriteriaId":"500E5BD7-3F17-455F-8463-50B145128873"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre2:*:*:*:*:*:*:*","matchCriteriaId":"3BE4C532-1756-4B2E-94EE-8F8253281F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre3:*:*:*:*:*:*:*","matchCriteriaId":"0E6875BE-67F1-4E0E-A610-7B6EDBAB6431"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:0.5:*:*:*:*:*:*:*","matchCriteriaId":"980553F2-8662-47CF-95F0-645141746AEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:0.7:*:*:*:*:*:*:*","matchCriteriaId":"40EBF1CD-B392-4262-8F06-2C784ADAF0F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.1a:*:*:*:*:*:*:*","matchCriteriaId":"9C00F84A-FCD4-4935-B7DE-ECBA6AE9B074"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"960DC6C2-B285-41D4-96F7-ED97F8BD5482"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D1FD0EB4-E744-4465-AFEE-A3C807C9C993"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*","matchCriteriaId":"1D866A7D-F0B9-4EA3-93C6-1E7C2C2A861F"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*","matchCriteriaId":"57772E3B-893C-408A-AA3B-78C972ED4D5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108067020624076&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11259","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200403-13.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/723910","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:026","source":"cve@mitre.org"},{"url":"http://www.mplayerhq.hu/homepage/design6/news.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/359025","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10008","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15675","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108067020624076&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200403-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/723910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mplayerhq.hu/homepage/design6/news.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/359025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15675","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0387","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:*:*:*:*:*:*:*:*","matchCriteriaId":"D5695A49-561F-434E-92AE-AEF13162BD78"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:*:*:enterprise:*:*:*:*:*","matchCriteriaId":"552506F9-8030-4924-84EE-59830878C466"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:10_beta:*:*:*:*:*:*:*","matchCriteriaId":"AE413C6D-0195-44BF-A49F-2D3C4749A1E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4E6051B4-1B15-44C0-B2CD-5504E68C60F2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0077.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108135350810135&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11314","source":"cve@mitre.org"},{"url":"http://www.ngssoftware.com/advisories/realr3t.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=4977","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10070","source":"cve@mitre.org"},{"url":"http://www.service.real.com/help/faq/security/040406_r3t/en/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15774","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0077.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108135350810135&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ngssoftware.com/advisories/realr3t.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=4977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.service.real.com/help/faq/security/040406_r3t/en/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15774","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0388","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:5.0.33:*:*:*:*:*:*:*","matchCriteriaId":"5965032E-5BC0-4E69-B097-F9EE2B24C861"}]}]}],"references":[{"url":"http://dev.mysql.com/doc/mysql/en/news-4-1-2.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108206802810402&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11223/","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200405-20.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009784","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/p-018.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-483","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:034","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6421","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-569.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-597.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10142","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15883","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10559","source":"cve@mitre.org"},{"url":"http://dev.mysql.com/doc/mysql/en/news-4-1-2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108206802810402&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11223/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200405-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/p-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6421","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-569.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-597.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15883","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10559","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0389","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_universal_server:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F2889AC7-3CD6-4DB8-B359-754091572351"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_universal_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6971157F-B1A5-4565-A90B-29FC3F74DD2C"}]}]}],"references":[{"url":"http://secunia.com/advisories/11395","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=102&type=vulnerabilities","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10157","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15880","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/11395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=102&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0390","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B8BA72B4-C4AF-41C6-92ED-30B286E00EF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D9D76A8D-832B-411E-A458-186733C66010"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0424.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/6684","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16113","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0424.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/6684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0391","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_solution_engine:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5E89560E-5A06-44F5-82AB-AEB9AD7B97DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_solution_engine:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D54C89F2-D5F5-412D-85C6-1CD76E03BE26"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_solution_engine:2.2:*:*:*:*:*:*:*","matchCriteriaId":"E013901C-1B1E-4839-867B-D647A996BF60"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_solution_engine:2.3:*:*:*:*:*:*:*","matchCriteriaId":"B228B395-6964-449D-9B09-D7BFE31E9851"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_solution_engine:2.4:*:*:*:*:*:*:*","matchCriteriaId":"25B36A82-33BE-4BA4-9B4A-36D685607A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wireless_lan_solution_engine:2.5:*:*:*:*:*:*:*","matchCriteriaId":"C3D72DCA-130D-4507-BDAC-A6183D08BC2E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:hosting_solution_engine:1.7:*:*:*:*:*:*:*","matchCriteriaId":"9405E712-6682-4DCE-AA18-311A2D6AA958"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:hosting_solution_engine:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"EDA1DA2E-FD49-46B1-96E0-1129B16A8DD6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:hosting_solution_engine:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"D44C3E02-A17C-48A2-8173-358570C2ACAB"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:hosting_solution_engine:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"8DA04953-EBE5-482D-83F9-30F10F739C31"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:hosting_solution_engine:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"ADE85A5A-2CF3-49FB-A15C-49EA56338FBB"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/o-111.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040407-username.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/659228","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10076","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15773","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-111.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040407-username.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/659228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15773","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0392","sourceIdentifier":"cve@mitre.org","published":"2004-06-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) \"Security Association Next Payload\" and (2) \"RESERVED\" fields."},{"lang":"es","value":"racoon anteriores a 20040407b permite a atacantes remotos causar una denegación de servicio (bucle infinito y conexiones descartadas) mediante un mensaje IKE con una cabecera de carga útil (paiload) genérica malformada, conteniendo campos (1) \"Security Association Next Payload\" y (2) \"RESERVED\" no válidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kame:racoon:*:*:*:*:*:*:*:*","versionEndIncluding":"2004-04-07a","matchCriteriaId":"608EEF27-B71C-4B46-A039-526A847AB777"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt","source":"cve@mitre.org"},{"url":"http://orange.kame.net/dev/query-pr.cgi?pr=555","source":"cve@mitre.org"},{"url":"http://www.vuxml.org/freebsd/40fcf20f-8891-11d8-90d1-0020ed76ef5a.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15893","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://orange.kame.net/dev/query-pr.cgi?pr=555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vuxml.org/freebsd/40fcf20f-8891-11d8-90d1-0020ed76ef5a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0393","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la función msg de rlpr daemon (rlprd) 2.0.4 permite a atacantes remotos ejecutar código de su elección mediante especificadores de cadenas de formato en un búfer que no puede ser resuelto, que es provisto a la función syslog."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rlpr:rlpr:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DFAC3D37-8D71-4762-9978-D352D7FA2046"},{"vulnerable":true,"criteria":"cpe:2.3:a:rlpr:rlpr:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"91F7F830-F7DB-45F3-83B5-D98F5CAA8C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:rlpr:rlpr:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2AE8328-BBCF-40BF-B99E-DDA55E3EF7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rlpr:rlpr:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EB2B8487-E86E-404E-A6A0-40D569C13F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:rlpr:rlpr:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8210438D-F087-4FE1-889C-CB9BBC1A0C73"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108810992313652&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-524","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10578","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16453","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108810992313652&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16453","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0394","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A \"potential\" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic."},{"lang":"es","value":"Un desbordamiento de búfer \"potencial\" existe en la función panic() de Linux 2.4.x, aunque puede no ser explotable debido a la funcionalidad de panic()"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*","matchCriteriaId":"1E3313D5-52E8-49B3-B145-170D9A26DA43"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040505-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lwn.net/Articles/81773/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20162","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20163","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20202","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20338","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:037","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_10_kernel.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10233","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15953","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040505-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lwn.net/Articles/81773/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_10_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15953","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0395","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute arbitrary commands via shell metacharacters in a system call."},{"lang":"es","value":"El programa xatitv del paquete gatos no se quita  adecuadamento privilegios de root cuando el fichero de configuración no existe, lo que permite a usuarios locales ejecutar comandos de su elección mediante metacaractéres de shell en una llamada al sistema."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gatos:gatos:.5:*:*:*:*:*:*:*","matchCriteriaId":"A029E5F6-3365-4694-8789-C9C368FCA286"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-509","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10437","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16273","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16273","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0396","sourceIdentifier":"cve@mitre.org","published":"2004-06-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines."},{"lang":"es","value":"Desbordamiento basado en la pila en CVS 1.11.X a 1.11.5 y 1.12. a 1.12.7, cuando se usa el mecanismo pserver, permite a atacantes remotos ejecutar código arbitrario mediante lineas de Entradas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*","matchCriteriaId":"D92B456C-5F8E-4DC2-940C-AE06B42DD3A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12:*:*:*:*:*:*:*","matchCriteriaId":"36BFAB00-58EA-43B7-93FB-874EF4104C5B"}]}]}],"references":[{"url":"ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2004-008.txt.asc","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:10.cvs.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0980.html","source":"cve@mitre.org"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2004/05/msg00219.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021742.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108498454829020&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108500040719512&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108636445031613&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=openbsd-security-announce&m=108508894405639&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11641","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11647","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11651","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11652","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11674","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/072004.html","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200405-12.xml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-147.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-505","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/192038","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:048","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6305","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-190.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10384","source":"cve@mitre.org"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.395865","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-147A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16193","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9058","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A970","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2004-008.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:10.cvs.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0980.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2004/05/msg00219.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021742.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108498454829020&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108500040719512&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108636445031613&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=openbsd-security-announce&m=108508894405639&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11641","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11647","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/072004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200405-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-147.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/192038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6305","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-190.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.395865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-147A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0397","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command."},{"lang":"es","value":"Desbordamiento basado en la pila durante la conversión de datos apr_time en Subversion 1.0.2 y anteriores permite a atacantes remotos ejecutar código arbitrairo mediante:\r\n(1) una consulta DAV2 REPORT o\r\n(2) una orden get-dated-rev svn-protocol"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4F10E314-3897-4A63-AE40-F4E34C3F0BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"47B95A69-2535-4844-B819-082D4349708C"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"930953B4-E972-48FB-913B-169E91F93FD6"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021737.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108498676517697&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11642","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11675","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/082004.html","source":"cve@mitre.org"},{"url":"http://subversion.tigris.org/svn-sscanf-advisory.txt","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200405-14.xml","source":"cve@mitre.org"},{"url":"http://www.linuxsecurity.com/advisories/fedora_advisory-4373.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6301","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/363814","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10386","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1748","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16191","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021737.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108498676517697&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/082004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://subversion.tigris.org/svn-sscanf-advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200405-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linuxsecurity.com/advisories/fedora_advisory-4373.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/363814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16191","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0398","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client."},{"lang":"es","value":"Desbordamiento de búfer en la función de proceso de de fecha ne_rfc1036_parse de la librería neon (libneon) 0.24.5 y anteriores, usada en cadaver 0.22 permite a servidores WebDAV ejecutar código arbitrario en el cliente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webdav:cadaver:*:*:*:*:*:*:*:*","versionEndExcluding":"0.22.0","matchCriteriaId":"3A262680-7A00-429A-A0C0-5A3847BBDD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webdav:neon:*:*:*:*:*:*:*:*","versionEndIncluding":"0.24.5","matchCriteriaId":"64DC17A7-B0B3-496F-A7FC-8B2769DF550D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0982.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000841","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108498433632333&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108500057108022&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/11638","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/11650","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/11673","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-13.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-15.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-148.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-506","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-507","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:049","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/6302","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-191.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/10385","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1552","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16192","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0982.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108498433632333&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108500057108022&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/11638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/11650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/11673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-148.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/6302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-191.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/10385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0399","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification."},{"lang":"es","value":"Desbordamiento de búfer basado en la plia en Exim 3.35, y otras versiones anteriores a 4, cuando la opción sender_verify está activada, permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario durante la verificación del remitente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_cambridge:exim:*:*:*:*:*:*:*:*","matchCriteriaId":"FBA925D2-FF77-4C14-B2D9-B161BCD7D33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_cambridge:exim:3.35:*:*:*:*:*:*:*","matchCriteriaId":"0EBF5A2F-942A-4EA2-857F-713D841056CB"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11558","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-501","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-502","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.guninski.com/exim1.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16079","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.guninski.com/exim1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0400","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code during the header check."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en Exim 4 anteriores a 4.33, cuando la opción headers_check_syntax está activada, permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código de su elección durante la comprobación de cabeceras."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_cambridge:exim:*:*:*:*:*:*:*:*","versionEndIncluding":"4.32","matchCriteriaId":"78EB937D-1902-4C1A-BFFF-EC8CC53CEF9F"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-501","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-502","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.guninski.com/exim1.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16077","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.guninski.com/exim1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0401","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions."},{"lang":"es","value":"Vulnerabilidad en libtasn1 0.1.x anteriors a 0.1.2 y 0.2.x anteriores a 0.2.7, relacionada con las funciones de procesamiento sintáctico DER."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.1:*:*:*:*:*:*:*","matchCriteriaId":"2D129855-841E-4D5D-8A7C-F824152CE957"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"D499D565-3346-470E-BA08-B894C85B0312"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"03BD64EF-3350-4C9B-AC99-FF920D469749"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1D263ACB-5F52-4E89-A2C2-2D34603221D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D8D228B3-3B1D-49B0-A6E2-047D10F26297"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"27DD62D0-E4C8-4198-A00E-3F9061029A26"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"2E9C3DA5-B783-4295-B5FA-7C5EAEEAD302"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"DAF60A33-0EAD-4A76-B863-80A3B033705D"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1F145DEE-054A-45BB-B4FB-6421F99150BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:free_software_foundation_inc.:libtasn1:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"FE3FD24E-DCE0-4228-B94D-9EE2DF151BC3"}]}]}],"references":[{"url":"http://packages.debian.org/changelogs/pool/main/libt/libtasn1-2/libtasn1-2_0.2.13-1/changelog","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010159","source":"cve@mitre.org"},{"url":"http://www.backports.org/changelog.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/15126","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10360","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16157","source":"cve@mitre.org"},{"url":"http://packages.debian.org/changelogs/pool/main/libt/libtasn1-2/libtasn1-2_0.2.13-1/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.backports.org/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/15126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16157","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0402","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execute arbitrary code."},{"lang":"es","value":"Desbordamiento de búfer en xpcd-svga en xpcd anteriores a 2.08, y posiblemente otras versiones, puede permitir a usuarios locales ejecutar código de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xpcd:xpcd:2.08:*:*:*:*:*:*:*","matchCriteriaId":"0D2911CA-5CFE-4DD2-8D1E-F0ADEAC8B2CD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-508","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:053","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10403","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16236","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10403","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0403","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kame:racoon:*:*:*:*:*:*:*:*","versionEndIncluding":"2004-04-08a","matchCriteriaId":"052A6780-7CD2-4BBE-94D0-C63B06620822"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040506-01-U.asc","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108369640424244&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11410","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11877","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200404-17.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009937","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=232288","source":"cve@mitre.org"},{"url":"http://www.kame.net/dev/cvsweb2.cgi/kame/kame/kame/racoon/isakmp.c.diff?r1=1.180&r2=1.181","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:069","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5491","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-165.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10172","source":"cve@mitre.org"},{"url":"http://www.vuxml.org/freebsd/ccd698df-8e20-11d8-90d1-0020ed76ef5a.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15893","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11220","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A984","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040506-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108369640424244&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11410","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200404-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=232288","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kame.net/dev/cvsweb2.cgi/kame/kame/kame/racoon/isakmp.c.diff?r1=1.180&r2=1.181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5491","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-165.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vuxml.org/freebsd/ccd698df-8e20-11d8-90d1-0020ed76ef5a.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A984","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0404","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp."},{"lang":"es","value":"logcheck anteriores a 1.1.1 permite a usuarios locales sobreescribir ficheros de su eleccíón, posiblemente mediante un ataque de enlaces simbólicos (symlink) un directorio temporal en /var/tmp"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:psionic:logcheck:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.0","matchCriteriaId":"9E195AD3-6B34-4928-BCF8-9C8D32456611"}]}]}],"references":[{"url":"http://secunia.com/advisories/11399","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-488","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:155","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10162","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15888","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15888","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0405","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:*:*:*:*:*:*:*:*","versionEndIncluding":"1.10","matchCriteriaId":"3F6FCAEE-A0CB-4D8C-A160-F7A1247E9A64"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:07.cvs.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108636445031613&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200404-13.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-486","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.400181","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15891","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1060","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10818","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:07.cvs.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108636445031613&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200404-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.400181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15891","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10818","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0407","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:*:*:*:*:*:*","matchCriteriaId":"B2C65BE0-32FA-4D51-AA2B-E7D630470D19"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108213782629001&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11392","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009825","source":"cve@mitre.org"},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-06.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5402","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10158","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15882","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108213782629001&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009825","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15882","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0408","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the child_service function in the ident2 ident daemon allows remote attackers to execute arbitrary code."},{"lang":"es","value":"Desbordamiento de búfer en la función child_service del demonio ident ident2 permite a atacantes remotos ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_bacarella:ident2:.999c:*:*:*:*:*:*:*","matchCriteriaId":"E25A2C3C-3043-4AE4-9BDE-70F0B20ED6D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_bacarella:ident2:1.3:*:*:*:*:*:*:*","matchCriteriaId":"0F5CB0C0-060F-4206-8DFC-292A4382FF3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_bacarella:ident2:1.3_1:*:*:*:*:*:*:*","matchCriteriaId":"55B555CE-3BE8-4B0B-B489-E6DB83CDF28D"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_bacarella:ident2:1.4:*:*:*:*:*:*:*","matchCriteriaId":"6B1419F8-0CB2-4E48-B263-6F25CF09D4B9"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-494","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10192","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15938","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15938","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0409","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.8.0:*:*:*:*:*:*:*","matchCriteriaId":"06627FAB-2A5B-428D-A081-9628DC55E4AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"655D162F-1944-4D88-A2C0-825F7EED0BAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"5C5454B5-AC2F-4B8E-BC20-2273472D0401"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.8.3:*:*:*:*:*:*:*","matchCriteriaId":"B4BEFD40-62D5-4007-9D35-6865D6482D89"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.8.4:*:*:*:*:*:*:*","matchCriteriaId":"A0F904EA-16E1-401B-BD5A-1A9B5B32E6A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.8.5:*:*:*:*:*:*:*","matchCriteriaId":"D02490BD-4B30-4213-A03E-443CAEE6C3DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.8.6:*:*:*:*:*:*:*","matchCriteriaId":"55162523-7648-4F94-BE7B-0B7E2EE598FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.8.7:*:*:*:*:*:*:*","matchCriteriaId":"83CC33D0-37D8-4C9C-BD89-560DFFF77F0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.8.8:*:*:*:*:*:*:*","matchCriteriaId":"64EE28DD-21CB-4DC3-91CE-E74B3D3F0F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.8.9:*:*:*:*:*:*:*","matchCriteriaId":"BC2A5D0A-9C46-4631-BE22-472B0E748FB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"62820427-7013-4C10-AC31-BE11764F782F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"E19C5E12-5A0B-4225-8409-BEA5BD2CD31B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"90D3F7D0-36F9-42DF-AA2F-658C767F9CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"90006D01-8C0D-45DA-BF65-901E95C149BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"7767D8F8-0AC6-473F-BEFA-0FA3EB88E7CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"6EB78C64-BA92-4B41-83F0-22AF8F26F930"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"9E2D2DE3-1278-44F9-996D-A2102690D88F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.9.7:*:*:*:*:*:*:*","matchCriteriaId":"1E571CEA-967E-4A99-B742-80E96C3275B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.9.8:*:*:*:*:*:*:*","matchCriteriaId":"DFEE0D77-576D-4A80-BD29-39EA6602C2AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:1.9.9:*:*:*:*:*:*:*","matchCriteriaId":"D3221D9F-F47B-4DD5-8328-EBFC27549F98"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C6109751-01D8-4585-A19C-F4F0D03FB82A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"10CFC601-73D7-4341-9606-D02128B86F8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"14124429-8DF7-44BB-8CBB-C4E04DB4FD99"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"08F7D59F-A504-45B7-B8D8-6F3AB799788A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"72AF16EE-1B98-448F-8575-1EABFCD7CBEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"AB08B68B-C557-4285-9AAD-226EADD84DC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"2191D045-A2A9-47E0-A5CB-A4FF7C7D7179"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"638F3791-6343-498F-9BE2-73175606F6F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xchat:xchat:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6EFB0F36-CFF1-41F8-AC43-D00165639DBE"}]}]}],"references":[{"url":"http://mail.nl.linux.org/xchat-announce/2004-04/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200404-15.xml","source":"cve@mitre.org"},{"url":"http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_123013","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-177.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-585.html","source":"cve@mitre.org"},{"url":"http://www.xchat.org/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11312","source":"cve@mitre.org"},{"url":"https://www.debian.org/security/2004/dsa-493","source":"cve@mitre.org"},{"url":"http://mail.nl.linux.org/xchat-announce/2004-04/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200404-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_123013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-177.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-585.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xchat.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.debian.org/security/2004/dsa-493","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0410","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:40.680","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-0411","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter \"-\" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code."},{"lang":"es","value":"Los manejadores de URI en Konqueror de KDE 3.2.2 y anteriores no filtran adecuadamente caractéres \"-\" en el inicio de un nombre de máquina en URIs (1) telnet, (2) rlogin, (3) ssh, o (4) mailto, lo que permite a atacantes remotos manipular las opciones que son pasadas a los programas asociados, posiblemente permitiendo leer ficheros o ejecutar código de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-88"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.2","matchCriteriaId":"AC40F7C2-BF1F-4A4B-BF42-57039B3B1D4A"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000843","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108481412427344&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11602","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-11.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-146.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-518","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20040517-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_14_kdelibs.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/6107","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-222.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/advisories/6717","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/advisories/6743","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/363225","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10358","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.362635","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16163","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A954","source":"cve@mitre.org","tags":["Broken Link","Tool Signature"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108481412427344&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-146.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20040517-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_14_kdelibs.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/6107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-222.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/advisories/6717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/advisories/6743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/363225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.362635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Tool Signature"]}]}},{"cve":{"id":"CVE-2004-0412","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server."},{"lang":"es","value":"Mailman anteriores a 2.1.5 permiten a atacantes remotos obtener contraseñas de usuario mediante peticiones de correo electronico especialmente elaboradas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D6A976-FFEA-4DB6-B002-8036E778C78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B8894855-E303-4B55-B3BC-DCBE3A0AB703"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0B1500D8-952A-46C6-920C-096760C36A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"503D7346-4891-40B1-A0CD-0FACC5359431"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"643610C6-99A9-43C9-A8FC-463A244C08DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.1b1:*:*:*:*:*:*:*","matchCriteriaId":"085C333C-E2E7-4ACD-9CC8-C37C67725954"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://mail.python.org/pipermail/mailman-announce/2004-May/000072.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109034869927955&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11701","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200406-04.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:051","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10412","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=123559","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16256","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://mail.python.org/pipermail/mailman-announce/2004-May/000072.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109034869927955&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200406-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=123559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16256","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0413","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via an integer overflow that leads to a heap-based buffer overflow."},{"lang":"es","value":"libsvn_ra_svn en Subversion 1.0.4 confía en el campo de longitud de (1) svn://, (2) svn+ssh://, y (3) otras cadenas de protocolo svn, lo que permite a atacantes remotos causar una denegación de servicio (consumición de memoria) y posiblemente ejecutar código de su elección mediante un desbordamiento de enteros que conduce a un desbordamiento basado en la pila."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:*:*:*:*:*:*:*:*","matchCriteriaId":"F74941A0-97CA-44D4-B55B-9224F051D40F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:*","matchCriteriaId":"48A4B336-2D5B-4D9B-AA87-E5266FED05BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4F10E314-3897-4A63-AE40-F4E34C3F0BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"47B95A69-2535-4844-B819-082D4349708C"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"930953B4-E972-48FB-913B-169E91F93FD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6B41D875-F515-4A3F-9AA5-79BD09F74C30"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3A8CCC20-8986-4028-B125-66F371A4A1D1"}]}]}],"references":[{"url":"http://subversion.tigris.org/security/CAN-2004-0413-advisory.txt","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-07.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_18_subversion.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/6847","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/365836","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10519","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1748","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16396","source":"cve@mitre.org"},{"url":"http://subversion.tigris.org/security/CAN-2004-0413-advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_18_subversion.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/6847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/365836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16396","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0414","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed \"Entry\" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution."},{"lang":"es","value":"CVS 1.12.z a 1.12.8, y 1.11.x a 1.11.16, no maneja adecuadamente líneas \"Entry\" malformadas, lo que impide que un terminador NULL sea usado y puede conducir a una denegación de servicio (caída), modificación de datos de programa críticos, o ejecución de código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.7:*:*:*:*:*:*:*","matchCriteriaId":"C9F7CA6E-7D45-46C9-A437-0D0C4D3F25CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*","matchCriteriaId":"62135DD0-140D-42C2-9302-31B5E2DE1A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*","matchCriteriaId":"D92B456C-5F8E-4DC2-940C-AE06B42DD3A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"37B53C85-AA0E-40DD-B477-058586197714"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.1_p1:*:*:*:*:*:*:*","matchCriteriaId":"D1D1234F-1BB0-432B-B7B7-A97E3ADD5561"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"6D472B97-F7C2-4973-9D71-AB3CF1F8774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.3:*:*:*:*:*:*:*","matchCriteriaId":"9D0DCF26-59A8-46AC-99D7-97C203A0D702"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.4:*:*:*:*:*:*:*","matchCriteriaId":"B31BAACA-7518-48D2-ADEE-F59F4569D3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.5:*:*:*:*:*:*:*","matchCriteriaId":"9D2748A8-5047-4338-A08E-986497AE4B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.6:*:*:*:*:*:*:*","matchCriteriaId":"525C4E91-2186-4D3A-9DF0-1C6A75A3F919"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.10:*:*:*:*:*:*:*","matchCriteriaId":"EB231E7F-1A6F-4A79-8ED2-F6CAD311A5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.11:*:*:*:*:*:*:*","matchCriteriaId":"FF7105E4-25F8-4AE3-9EDD-D44BF3E17145"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.14:*:*:*:*:*:*:*","matchCriteriaId":"7C22BAF3-7B9C-4B2E-B5C6-1F37B896C301"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.15:*:*:*:*:*:*:*","matchCriteriaId":"4AFFAE96-873A-4253-BCC7-1049DA81D9CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.16:*:*:*:*:*:*:*","matchCriteriaId":"D1163535-583A-4504-BE7B-8919143CDF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"766053F7-A174-4716-BF49-76B50FC79FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"C7D2623F-167A-4976-B757-DAC4CCFAFE64"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"FAEC4477-D040-450E-A850-8B03C937A600"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"2848AA51-9AF1-448D-955F-50B5203F7229"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"7B66BE64-E340-4777-B877-483FEAA66988"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:*:*:*:*:*:*:*:*","matchCriteriaId":"F74941A0-97CA-44D4-B55B-9224F051D40F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:1.3:*:*:*:*:*:*:*","matchCriteriaId":"46B96764-9241-4586-9FA5-77D8D8EBE3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:*","matchCriteriaId":"48A4B336-2D5B-4D9B-AA87-E5266FED05BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"CA3CDD3C-DBA6-4BA2-967D-AD746822F3CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108716553923643&w=2","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/092004.html","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200406-06.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-517","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:058","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-233.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10575","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A993","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108716553923643&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/092004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200406-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-233.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0415","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A0934C49-5F88-4189-BD88-2F32C39C2F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*","matchCriteriaId":"14B0A230-4054-4483-A3A7-9A5A286C7552"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000879","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml","source":"cve@mitre.org"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:087","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-413.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-418.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16877","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9965","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000879","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-413.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-418.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0416","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code."},{"lang":"es","value":"Vulnerabilidad de doble liberación en la cadena error_prog_name en CVS 1.12.x a 1.12.8, y 1.11.x a 1.11.16, puede permitir a atacantes remotos ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.7:*:*:*:*:*:*:*","matchCriteriaId":"C9F7CA6E-7D45-46C9-A437-0D0C4D3F25CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*","matchCriteriaId":"62135DD0-140D-42C2-9302-31B5E2DE1A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*","matchCriteriaId":"D92B456C-5F8E-4DC2-940C-AE06B42DD3A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"37B53C85-AA0E-40DD-B477-058586197714"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.1_p1:*:*:*:*:*:*:*","matchCriteriaId":"D1D1234F-1BB0-432B-B7B7-A97E3ADD5561"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"6D472B97-F7C2-4973-9D71-AB3CF1F8774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.3:*:*:*:*:*:*:*","matchCriteriaId":"9D0DCF26-59A8-46AC-99D7-97C203A0D702"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.4:*:*:*:*:*:*:*","matchCriteriaId":"B31BAACA-7518-48D2-ADEE-F59F4569D3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.5:*:*:*:*:*:*:*","matchCriteriaId":"9D2748A8-5047-4338-A08E-986497AE4B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.6:*:*:*:*:*:*:*","matchCriteriaId":"525C4E91-2186-4D3A-9DF0-1C6A75A3F919"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.10:*:*:*:*:*:*:*","matchCriteriaId":"EB231E7F-1A6F-4A79-8ED2-F6CAD311A5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.11:*:*:*:*:*:*:*","matchCriteriaId":"FF7105E4-25F8-4AE3-9EDD-D44BF3E17145"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.14:*:*:*:*:*:*:*","matchCriteriaId":"7C22BAF3-7B9C-4B2E-B5C6-1F37B896C301"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.15:*:*:*:*:*:*:*","matchCriteriaId":"4AFFAE96-873A-4253-BCC7-1049DA81D9CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.16:*:*:*:*:*:*:*","matchCriteriaId":"D1163535-583A-4504-BE7B-8919143CDF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"766053F7-A174-4716-BF49-76B50FC79FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"C7D2623F-167A-4976-B757-DAC4CCFAFE64"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"FAEC4477-D040-450E-A850-8B03C937A600"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"2848AA51-9AF1-448D-955F-50B5203F7229"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"7B66BE64-E340-4777-B877-483FEAA66988"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:*:*:*:*:*:*:*:*","matchCriteriaId":"F74941A0-97CA-44D4-B55B-9224F051D40F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:1.3:*:*:*:*:*:*:*","matchCriteriaId":"46B96764-9241-4586-9FA5-77D8D8EBE3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:*","matchCriteriaId":"48A4B336-2D5B-4D9B-AA87-E5266FED05BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"CA3CDD3C-DBA6-4BA2-967D-AD746822F3CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108716553923643&w=2","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/092004.html","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200406-06.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-519","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:058","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-233.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10070","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A994","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108716553923643&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/092004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200406-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-233.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A994","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0417","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the \"Max-dotdot\" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space."},{"lang":"es","value":"Desobordamiento de enteros en la orden de protocolo CVS \"Max-dotdot\" (serve_max_dotdot) en CVS 1.12.x a 1.12.8 y 1.11.x a 1.11.16 puede permitir a atacantes remotos causar una caída del servidor, lo que podría hacer que datos temporales permanezcan sin detectar y consumir espacio en disco."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.7:*:*:*:*:*:*:*","matchCriteriaId":"C9F7CA6E-7D45-46C9-A437-0D0C4D3F25CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*","matchCriteriaId":"62135DD0-140D-42C2-9302-31B5E2DE1A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*","matchCriteriaId":"D92B456C-5F8E-4DC2-940C-AE06B42DD3A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"37B53C85-AA0E-40DD-B477-058586197714"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.1_p1:*:*:*:*:*:*:*","matchCriteriaId":"D1D1234F-1BB0-432B-B7B7-A97E3ADD5561"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"6D472B97-F7C2-4973-9D71-AB3CF1F8774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.3:*:*:*:*:*:*:*","matchCriteriaId":"9D0DCF26-59A8-46AC-99D7-97C203A0D702"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.4:*:*:*:*:*:*:*","matchCriteriaId":"B31BAACA-7518-48D2-ADEE-F59F4569D3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.5:*:*:*:*:*:*:*","matchCriteriaId":"9D2748A8-5047-4338-A08E-986497AE4B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.6:*:*:*:*:*:*:*","matchCriteriaId":"525C4E91-2186-4D3A-9DF0-1C6A75A3F919"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.10:*:*:*:*:*:*:*","matchCriteriaId":"EB231E7F-1A6F-4A79-8ED2-F6CAD311A5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.11:*:*:*:*:*:*:*","matchCriteriaId":"FF7105E4-25F8-4AE3-9EDD-D44BF3E17145"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.14:*:*:*:*:*:*:*","matchCriteriaId":"7C22BAF3-7B9C-4B2E-B5C6-1F37B896C301"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.15:*:*:*:*:*:*:*","matchCriteriaId":"4AFFAE96-873A-4253-BCC7-1049DA81D9CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.16:*:*:*:*:*:*:*","matchCriteriaId":"D1163535-583A-4504-BE7B-8919143CDF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"766053F7-A174-4716-BF49-76B50FC79FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"C7D2623F-167A-4976-B757-DAC4CCFAFE64"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"FAEC4477-D040-450E-A850-8B03C937A600"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"2848AA51-9AF1-448D-955F-50B5203F7229"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"7B66BE64-E340-4777-B877-483FEAA66988"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:*:*:*:*:*:*:*:*","matchCriteriaId":"F74941A0-97CA-44D4-B55B-9224F051D40F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:1.3:*:*:*:*:*:*:*","matchCriteriaId":"46B96764-9241-4586-9FA5-77D8D8EBE3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:*","matchCriteriaId":"48A4B336-2D5B-4D9B-AA87-E5266FED05BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"CA3CDD3C-DBA6-4BA2-967D-AD746822F3CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108716553923643&w=2","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/092004.html","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200406-06.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-519","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:058","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-233.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1001","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11145","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108716553923643&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/092004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200406-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-233.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0418","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an \"out-of-bounds\" write for a single byte to execute arbitrary code or modify critical program data."},{"lang":"es","value":"serve_notify en CVS 1.12.x a 1.12.8 y 1.11.x a 1.11.16 no maneja adecuadamente líneas de datos vacías, lo que puede permitir a atacantes remotos realizar una escritura \"fuera de límites\" en un solo byte para ejecutar código arbitrario o modificar datos críticos del programa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.7:*:*:*:*:*:*:*","matchCriteriaId":"C9F7CA6E-7D45-46C9-A437-0D0C4D3F25CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*","matchCriteriaId":"62135DD0-140D-42C2-9302-31B5E2DE1A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*","matchCriteriaId":"D92B456C-5F8E-4DC2-940C-AE06B42DD3A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"37B53C85-AA0E-40DD-B477-058586197714"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.1_p1:*:*:*:*:*:*:*","matchCriteriaId":"D1D1234F-1BB0-432B-B7B7-A97E3ADD5561"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"6D472B97-F7C2-4973-9D71-AB3CF1F8774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.3:*:*:*:*:*:*:*","matchCriteriaId":"9D0DCF26-59A8-46AC-99D7-97C203A0D702"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.4:*:*:*:*:*:*:*","matchCriteriaId":"B31BAACA-7518-48D2-ADEE-F59F4569D3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.5:*:*:*:*:*:*:*","matchCriteriaId":"9D2748A8-5047-4338-A08E-986497AE4B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.6:*:*:*:*:*:*:*","matchCriteriaId":"525C4E91-2186-4D3A-9DF0-1C6A75A3F919"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.10:*:*:*:*:*:*:*","matchCriteriaId":"EB231E7F-1A6F-4A79-8ED2-F6CAD311A5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.11:*:*:*:*:*:*:*","matchCriteriaId":"FF7105E4-25F8-4AE3-9EDD-D44BF3E17145"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.14:*:*:*:*:*:*:*","matchCriteriaId":"7C22BAF3-7B9C-4B2E-B5C6-1F37B896C301"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.15:*:*:*:*:*:*:*","matchCriteriaId":"4AFFAE96-873A-4253-BCC7-1049DA81D9CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.16:*:*:*:*:*:*:*","matchCriteriaId":"D1163535-583A-4504-BE7B-8919143CDF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"766053F7-A174-4716-BF49-76B50FC79FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"C7D2623F-167A-4976-B757-DAC4CCFAFE64"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"FAEC4477-D040-450E-A850-8B03C937A600"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"2848AA51-9AF1-448D-955F-50B5203F7229"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"7B66BE64-E340-4777-B877-483FEAA66988"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:*:*:*:*:*:*:*:*","matchCriteriaId":"F74941A0-97CA-44D4-B55B-9224F051D40F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:1.3:*:*:*:*:*:*:*","matchCriteriaId":"46B96764-9241-4586-9FA5-77D8D8EBE3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:*","matchCriteriaId":"48A4B336-2D5B-4D9B-AA87-E5266FED05BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"CA3CDD3C-DBA6-4BA2-967D-AD746822F3CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108716553923643&w=2","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/092004.html","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200406-06.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-519","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:058","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-233.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1003","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11242","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108716553923643&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/092004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200406-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-233.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1003","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11242","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0419","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions."},{"lang":"es","value":"XDM en XFree86 abre una un socket TCP chooserFd incluso cuando DisplayManger.requestPort es 0, lo que podría permitir a atacantes remotos conectar al puerto, violando las restricciones pretendidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11r6:6.7.0:*:*:*:*:*:*:*","matchCriteriaId":"76FFBC43-2178-48DF-B61E-CCBA4682AC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:xdm:cvs:*:*:*:*:*:*:*","matchCriteriaId":"4EAA4897-E943-4125-B30E-2C671F6A9DF9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"}]}]}],"references":[{"url":"http://bugs.xfree86.org/show_bug.cgi?id=1376","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12019","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010306","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/p-001.shtml","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata.html#xdm","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-478.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10423","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16264","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161","source":"cve@mitre.org"},{"url":"http://bugs.xfree86.org/show_bug.cgi?id=1376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/p-001.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata.html#xdm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-478.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10161","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0420","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP."},{"lang":"es","value":"Internet Explorer 6.0.2800.1106 sobre Windows XP y posiblemente otras versiones, permite a atacantes remotos suplantar  el tipo de un de un fichero mediante un especificador CLSID en el nombre del fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*","matchCriteriaId":"F86E7189-CE21-4007-A3FA-39A6B51A5AB9"}]}]}],"references":[{"url":"http://secunia.com/advisories/10736/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/106324","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.security-express.com/archives/bugtraq/2004-01/0300.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/351379","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9510","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-196A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-024","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14964","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2245","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2381","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2894","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3386","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3533","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3604","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10736/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/106324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.security-express.com/archives/bugtraq/2004-01/0300.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/351379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-196A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14964","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2245","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3533","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0421","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message."},{"lang":"es","value":"La librería de Graficos de Red Portables (libpng) 1.0.15 y anteriores permiten a atacantes causar una denegación de servicio (caída) mediante un fichero de imagen PNG que dispara un error que causa un lectura fuera de límites cuando se crea el mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6D6B3DAF-DF99-48B2-8E7C-BE8E043D4C24"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0BF2C6F3-BFE7-4234-9975-DE7FCDA26A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5B79DC5F-5062-4031-BA11-746EE3C8E1CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"CAD6DE25-8B2F-4DB9-9969-8AAC23BC0AE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"35F2B503-1516-465D-A558-9932BDB3457D"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"BA94EAAA-A4D2-4E36-BC69-BBE9644FE970"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"F3A7C96C-8FBB-42B4-937E-3321C939CC87"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"94084356-D39B-41B2-AC24-0ADAD0BF5988"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"086C6335-7872-46A7-AEB1-9BE5AE5A788C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.13:*:*:*:*:*:*:*","matchCriteriaId":"FF8233B1-04A0-4E25-97EE-CF466B48A12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"FA714E7E-05EF-4598-9324-887BC66C675E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C036011A-9AE1-423C-8B73-188B9BA20FEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"663C6EE5-5B5E-4C0F-9E7F-D0E1DA9AF9EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8051459E-94D3-4D4A-9D40-CC9475DDB00C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"42056C63-69A7-43CF-828C-0C3E365702D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5B6A39A3-7F86-4DC3-B248-859630AFB9A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:libpng:libpng:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"58377AE3-1C13-4C3F-BC55-8336DAEEF97F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:1.3:*:*:*:*:*:*:*","matchCriteriaId":"46B96764-9241-4586-9FA5-77D8D8EBE3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:*","matchCriteriaId":"48A4B336-2D5B-4D9B-AA87-E5266FED05BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:libpng:1.2.2-16:*:*:*:*:*:*:*","matchCriteriaId":"4826B607-8DAB-44A4-B4FF-4BBFF9A05487"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:libpng:1.2.2-20:*:*:*:*:*:*:*","matchCriteriaId":"3701107A-C208-426B-9EA0-CD1794D0EDA3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A423B773-6B8B-4BA3-80A1-C8CAEF4D9BBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"40D8DAE0-8E75-435C-9BD6-FAEED2ACB47C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}]}]}],"references":[{"url":"http://lists.apple.com/mhonarc/security-announce/msg00056.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108334922320309&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=108335030208523&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=fedora-announce-list&m=108451350029261&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=fedora-announce-list&m=108451353608968&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/22957","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/22958","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-498","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:040","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:212","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:213","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-180.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-181.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10244","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16022","source":"cve@mitre.org","tags":["Broken Link","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11710","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A971","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108334922320309&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=108335030208523&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=fedora-announce-list&m=108451350029261&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=fedora-announce-list&m=108451353608968&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/22957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/22958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-180.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-181.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0422","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack."},{"lang":"es","value":"flim anteriores a 1.14.3 crea ficheros temporales de manera insegura, lo que permite a usuarios locales sobreescribir ficheros de su elección del usuario Emacs mediante un ataque de enlaces simbólicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:flim:*:*:*:*:*:*:*:*","versionEndIncluding":"1.14.2","matchCriteriaId":"7873380D-894C-4218-8E68-A44FF31C5F84"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-500","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-344.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16027","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-344.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0423","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file."},{"lang":"es","value":"La función log_event en ssmtp 2.50.6 y anteriores permite a usuarios locales sobreescribir ficheros de su elección mediante un ataque de enlaces simbólicos sobre el fichero de registro temporal ssmtp.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ssmtp:ssmtp:*:*:*:*:*:*:*:*","versionEndIncluding":"2.50.6","matchCriteriaId":"AC3D5B59-6BED-4F7A-AAAB-5AE9C010181D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108239608131119&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108239608131119&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0424","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option."},{"lang":"es","value":"Desbordamiento de enteros en la función ip_setsockopt en el kernel de Linux 2.4.22 a 2.4.25 y 2.6.1 a 2.6.3 permite a usuarios locales causar una denegación de servicio (caída) o ejecutar código arbitrario mediante la opción de socket MCAST_MSFILTER."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"AA3D53C9-3806-45E6-8AE9-7D41280EF64C"},{"vulnerable":true,"criteria":"cpe:2.3:o:slackware:slackware_linux:current:*:*:*:*:*:*:*","matchCriteriaId":"B1CB2DD9-E77F-46EE-A145-F87AD10EA8E4"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108253171301153&w=2","source":"cve@mitre.org"},{"url":"http://www.isec.pl/vulnerabilities/isec-0015-msfilter.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:037","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_10_kernel.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-183.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10179","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.659586","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15907","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11214","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A939","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108253171301153&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.isec.pl/vulnerabilities/isec-0015-msfilter.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linuxsecurity.com/advisories/engarde_advisory-4285.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_10_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-183.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.659586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A939","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0425","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie."},{"lang":"es","value":"Desbordamiento de búfer basado en el montón en SiteMinder Affilitate Agent 4.x permite a atacantes remotos ejecutar código de su elección mediante una cookie SMPROFILE grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netegrity:sideminder_affiliate_agent:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EA020611-B166-48B5-B173-7DBD7DCE371B"}]}]}],"references":[{"url":"http://www.atstake.com/research/advisories/2004/a042204-1.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10198","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15950","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2004/a042204-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15950","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0426","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path."},{"lang":"es","value":"rsync anteriores a 2.6.1 no limpia adecuadamente rutas cuando ejecuta un demonio de lectura y escritura sin usar chroot, lo que permite a atacantes remotos escribir ficheros fuera de la ruta del módulo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:*:*:*:*:*:*:*:*","versionEndIncluding":"2.6","matchCriteriaId":"28E82085-BA4C-4670-A837-8568FE1A1D58"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108515912212018&w=2","source":"cve@mitre.org"},{"url":"http://rsync.samba.org/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11514","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11515","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11523","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11537","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11583","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11669","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11688","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11993","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12054","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-134.shtml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-212.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-499","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-10.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:042","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-192.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10247","source":"cve@mitre.org"},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.403462","source":"cve@mitre.org"},{"url":"http://www.trustix.net/errata/misc/2004/TSL-2004-0024-rsync.asc.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16014","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9495","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A967","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108515912212018&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rsync.samba.org/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-134.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-212.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-192.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.org/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.403462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.net/errata/misc/2004/TSL-2004-0024-rsync.asc.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A967","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0427","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call."},{"lang":"es","value":"La función do_fork en Linux 2.4.x y 2.6.x no decrementa el contador mm_count cuando un error ocurre después de que se haya activado mm_struct de un proceso hijo, lo que dispara una fuga de memoria que permite a usarios locales causar una denegación de servicio (consumición de memoria)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-401"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.4.0","versionEndExcluding":"2.4.26","matchCriteriaId":"0B1735AB-AFEF-46C0-9A69-368FE90C6FC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.0","versionEndExcluding":"2.6.6","matchCriteriaId":"22409EC2-B53B-4029-9E33-69AAC2AEFEE0"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040505-01-U.asc","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://fedoranews.org/updates/FEDORA-2004-111.shtml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://linux.bkbits.net:8080/linux-2.4/cset%40407bf20eDeeejm8t36_tpvSE-8EFHA","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://linux.bkbits.net:8080/linux-2.6/cset%40407b1217x4jtqEkpFW2g_-RcF0726A","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=linux-kernel&m=108139073506983&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11429","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/11464","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/11486","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/11541","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/11861","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/11891","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/11892","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/20162","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/20163","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/20202","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/20338","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/o-164.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:037","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_10_kernel.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-255.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-260.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-327.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10221","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.turbolinux.com/security/2004/TLSA-2004-14.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16002","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10297","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2819","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040505-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://fedoranews.org/updates/FEDORA-2004-111.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://linux.bkbits.net:8080/linux-2.4/cset%40407bf20eDeeejm8t36_tpvSE-8EFHA","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://linux.bkbits.net:8080/linux-2.6/cset%40407b1217x4jtqEkpFW2g_-RcF0726A","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=linux-kernel&m=108139073506983&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/11464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/11486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/11541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/11861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/11891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/11892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/20162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/20163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/20202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/20338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/o-164.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_10_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-255.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-260.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-327.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.turbolinux.com/security/2004/TLSA-2004-14.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0428","sourceIdentifier":"cve@mitre.org","published":"2004-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in CoreFoundation in Mac OS X 10.3.3 and Mac OS X 10.3.3 Server, related to \"the handling of an environment variable,\" has unknown attack vectors and unknown impact."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"}]}]}],"references":[{"url":"http://lists.virus.org/macsec-0405/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11539","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010045","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4070","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10270","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16051","source":"cve@mitre.org"},{"url":"http://lists.virus.org/macsec-0405/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16051","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0429","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability related to \"the handling of large requests\" in RAdmin for Apple Mac OS X 10.3.3 and Mac OS X 10.2.8 may allow attackers to have unknown impact via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/May/msg00000.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=108369640424244&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11539/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010045","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.auscert.org.au/render.html?it=4070","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/o-138.shtml","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16053","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/May/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=108369640424244&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11539/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.auscert.org.au/render.html?it=4070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/o-138.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0430","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en AppleFileServer de MAC OS X 10.3.3 y anteriores permite a atacantes remotos ejecutar código arbitrario mediante un paquete LoginExt para un método de autenticación de usuario (User Authentication Method - UAM) con contraseña en texto plano con un arguemento PathName que incluye un cadena de tipo de AFPName más larga que el campo de longitud asociado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.3.3","matchCriteriaId":"B09DFC89-C635-428B-A22A-928130AC3695"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*","versionEndIncluding":"10.3.3","matchCriteriaId":"D0A33D95-617A-4FE0-B3DD-859598B880FA"}]}]}],"references":[{"url":"http://lists.apple.com/mhonarc/security-announce/msg00049.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11539","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010039","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2004/a050304-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/648406","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securiteam.com/securitynews/5QP0115CUO.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16049","source":"cve@mitre.org"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00049.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/2004/a050304-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/648406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securiteam.com/securitynews/5QP0115CUO.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0431","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large \"number of entries\" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow."},{"lang":"es","value":"Desbordamiento de enteros en Apple QuickTime (QuickTime.qts) anteriores a 6.5.1 permite a atacantes ejecutar código de se elección mediante un \"número de entradas\" grande en la tabla de datos sample-to-chunk de un fichero de película .mov, lo que lleva un desbordamiento de búfer basado en el montón."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*","versionEndIncluding":"6.5","matchCriteriaId":"DD564C08-BCFF-4701-ACB7-71011B6A1345"}]}]}],"references":[{"url":"http://lists.apple.com/mhonarc/security-announce/msg00048.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108360110618389&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=108356485013237&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/782958","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16026","source":"cve@mitre.org"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00048.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108360110618389&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=108356485013237&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/782958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0432","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions."},{"lang":"es","value":"ProFTPD 1.2.9 trata las directivas Permitir y Denegar para ACLS basadas en CIDR como si fueran AllowAll (Permitir Todo), lo que podría permitir a clientes FTP saltarse las restricciones de acceso pretendidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd_project:proftpd:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"C2C1A60B-D79B-4EE3-9E48-83AF875AD062"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:0.5:*:*:*:*:*:*:*","matchCriteriaId":"980553F2-8662-47CF-95F0-645141746AEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:0.7:*:*:*:*:*:*:*","matchCriteriaId":"40EBF1CD-B392-4262-8F06-2C784ADAF0F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.1a:*:*:*:*:*:*:*","matchCriteriaId":"9C00F84A-FCD4-4935-B7DE-ECBA6AE9B074"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"960DC6C2-B285-41D4-96F7-ED97F8BD5482"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D1FD0EB4-E744-4465-AFEE-A3C807C9C993"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*","matchCriteriaId":"1D866A7D-F0B9-4EA3-93C6-1E7C2C2A861F"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*","matchCriteriaId":"57772E3B-893C-408A-AA3B-78C972ED4D5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}]}]}],"references":[{"url":"http://bugs.proftpd.org/show_bug.cgi?id=2267","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108335030208523&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108335051011341&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11527","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:041","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10252","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16038","source":"cve@mitre.org"},{"url":"http://bugs.proftpd.org/show_bug.cgi?id=2267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108335030208523&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108335051011341&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10252","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0433","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or (c) long Real Data Transport (RDT) packets."},{"lang":"es","value":"Múltiples desbordamientos de búfer en cliente Real-Time Streaming Protocol (RTSP) de (1) MPlayer anteriores a 1.0pre4  y (2) xine lib (xine-lib) anteriores a 1-rc4, cuando reproduce secuencias Real trsp (realrtsp), que permiten a atacantes remotos causar una denegación de servivio (caída) y posiblemente ejecutar código de su eleccion mediante (a) URLs largas, (b) respuestas de servidor Real largas, o (c) paquetes de transporte de datos Real (RDT) largos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre3try2:*:*:*:*:*:*:*","matchCriteriaId":"4E74EBC5-296E-4B20-8BCB-F104D06595AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"4C87793C-6577-4E67-BBFD-768FAF1BF88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"DFE9819F-A620-41A6-A102-41746457753F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"A7D6474F-C678-498C-9A61-287E2FDD8B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"06402BDD-77EA-447A-8C34-E1A0F41D0628"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"7387773A-81F1-464A-9489-E103C51BED46"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A03194CD-2CFA-4F11-90DE-3573BA06B6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"1C39D002-E323-423D-8895-9179DFDF6535"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"73E621C7-A5BA-4D71-9D57-4311360FF3A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"9C13E4FD-A874-4366-A426-19665B43F1DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"7C8F4701-C5CC-4FBA-AFF6-5AB890306AC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc3a:*:*:*:*:*:*:*","matchCriteriaId":"3295F345-26D0-4B23-848F-83CFE067EA01"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc3b:*:*:*:*:*:*:*","matchCriteriaId":"D2915303-7347-4811-B7D2-5AF367081797"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc3c:*:*:*:*:*:*:*","matchCriteriaId":"6976E802-011F-44A2-B668-F9D643FC7A86"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200405-24.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.xinehq.de/index.php/security/XSA-2004-3","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16019","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200405-24.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.xinehq.de/index.php/security/XSA-2004-3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0434","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leads to a heap-based buffer overflow."},{"lang":"es","value":"k5admind (kadmind) de Heimdal permite a atacantes remotos ejecutar código arbitrario mediante una petición de administración de Kerberos 4 con longitud de marco menor de 2, lo que conduce a un desbordameinte de búfer basado en el montón."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-131"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:*","versionEndExcluding":"0.6.2","matchCriteriaId":"2D5FE49D-6393-49FA-840D-AFC2D6B0703A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:09.kadmind.asc","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020998.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108386148126457&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-23.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-504","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16071","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:09.kadmind.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020998.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108386148126457&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0435","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Certain \"programming errors\" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MS_INVALIDATE operation, which leads to cache consistency problems that allow a local user to prevent certain changes to files from being committed to disk."},{"lang":"es","value":"Ciertos \"errores de programacíón\" en la llamada al sistema msync de FreeBSD 5.2.1 y anteriores y 4.10 y anteriores, no maneja adecuadamente la operación MS_INVALIDATE, lo que lleva a problemas de consistencia de caché que permiten al usuario local impedir que ciertos cambios en ficheros se lleven a cabo en el disco."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*","matchCriteriaId":"A442DE97-4485-4D95-B95D-58947585E455"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*","matchCriteriaId":"441BE3A0-20F4-4972-B279-19B3DB5FA14D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*","matchCriteriaId":"09BFA20B-2F31-4246-8F74-63DF1DB884EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*","matchCriteriaId":"5F3B4BA2-8A61-4F9A-8E46-7FA80E7F5514"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*","matchCriteriaId":"2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*","matchCriteriaId":"00EAEA17-033A-4A50-8E39-D61154876D2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*","matchCriteriaId":"4AE93D3D-34B4-47B7-A784-61F4479FF5A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*","matchCriteriaId":"E6288144-0CD7-45B6-B5A7-09B1DF14FBE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*","matchCriteriaId":"9FFD9D1C-A459-47AD-BC62-15631417A32F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*","matchCriteriaId":"4ECDEC87-0132-46B6-BD9B-A94F9B669EAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*","matchCriteriaId":"43E84296-9B5C-4623-A2C4-431D76FC2765"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*","matchCriteriaId":"C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*","matchCriteriaId":"8E4BC012-ADE4-468F-9A25-261CD8055694"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:11.msync.asc","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11714","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10416","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16254","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:11.msync.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0437","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Titan FTP Server version 3.01 build 163, and possibly other versions before build 169, allows remote authenticated users to cause a denial of service (crash) by disconnecting from the system during a \"LIST -L\" command, which causes Titan to access an invalid socket."},{"lang":"es","value":"Titan FTP Server versión 3.01 compilación 163, y posiblemente otras versiones anteriores a compilación 169, permite a usuarios remotos autenticados causar una denegación de servicio (caída) desconectando del sistema durante una órden \"LIST - L\", lo que causa que Titan acceda a un socket no válido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:south_river_technologies:titan_ftp_server:3.01_build_163:*:*:*:*:*:*:*","matchCriteriaId":"9F99D0FB-BDA0-4991-BD34-7304C2212E02"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0025.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108378048513596&w=2","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5RP0215CUU.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16057","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108378048513596&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5RP0215CUU.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0444","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of service or execute arbitrary code via (1) a manipulated length byte in the first-level decoding routine for NetBIOS Name Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow, (2) a heap-based corruption problem in an NBNS response that is missing certain RR fields, and (3) a stack-based buffer overflow in the DNS component via a Resource Record (RR) with a long canonical name (CNAME) field composed of many smaller components."},{"lang":"es","value":"Múltiples vulenrabilidades en SYMDNS.SYS de Symantec Noton Internet Security y Professional 2002 a 2004, Norton Persnoal Firewall 2002 a 2004, Norton AntiSpam 2004, Client Firewal 5.01 y 5.1.1, y Client Security 1.0 a 2.0 permite a atacantes remotos causar una denegación de servicio o ejecutar código de su elección mediante \r\n(1) un byte de longitud manipulado en la rutina de decodificación de primer nivel del Servicio de Nombres de NetBIOS (NBNS) que modifica una variable de índice que conduce a un desbordamiento de búfer en la pila,\r\n(2) un problema de corrupción del montón en una respuesta NBNS a la que le faltan ciertos campor RR, y \r\n(3) un desbordamiento de búfer basado en la pila en el componente DNS mediante un Registro de Recurso (RR) con un nombre canónico (CNAME) largo compuest de muchos componentes más pequeños."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_firewall:5.01:*:*:*:*:*:*:*","matchCriteriaId":"4AEFBAEB-18D4-4082-9F19-C47113841C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_firewall:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6EA9657C-14D2-418A-AABD-96392E87F4B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C1DFD4CB-40A1-4D70-97AC-0941826F28CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7483F6DD-EDC0-497E-A5A9-B186E02CCCEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.2:*:*:*:*:*:*:*","matchCriteriaId":"102D0C6A-31B8-4275-A805-4CA446D1C77F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EA18147D-E618-4902-8837-5824240DD50E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.4:*:*:*:*:*:*:*","matchCriteriaId":"75D357CC-EAD0-42E3-B38C-BE2DC44D154E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.5:*:*:*:*:*:*:*","matchCriteriaId":"201403B4-3B5C-4F77-ADAE-7A553D4D58F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.6:*:*:*:*:*:*:*","matchCriteriaId":"A8D19926-AB65-4C06-8C44-7EA9B070FD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.7:*:*:*:*:*:*:*","matchCriteriaId":"0F27E94F-F6D6-4C40-878F-BF952658A909"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.8:*:*:*:*:*:*:*","matchCriteriaId":"3AA71038-2D4E-4366-A3D1-AD85251B3E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.9:*:*:*:*:*:*:*","matchCriteriaId":"CC689F12-84C6-4B52-970F-DAF6B00B4A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0DDD0E02-306D-4675-B73A-2C2F619CDDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antispam:2004:*:*:*:*:*:*:*","matchCriteriaId":"EA28BC22-ABF0-4F1E-BA83-85B398775450"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2002:*:*:*:*:*:*:*","matchCriteriaId":"F05FEBA2-33E8-4074-8B57-4FE6FFEF2F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2002:*:pro:*:*:*:*:*","matchCriteriaId":"A5FA0458-AB41-495E-B41F-C18B4E6876CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2003:*:*:*:*:*:*:*","matchCriteriaId":"AEF97C5F-3A80-4973-85FD-5BCE43B32AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2003:*:pro:*:*:*:*:*","matchCriteriaId":"1F0BF645-7C56-4ED6-91C0-AE4CFAB62EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2004:*:*:*:*:*:*:*","matchCriteriaId":"2ACBDE0C-91D2-4357-9724-B60BBFF5D2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2004:*:pro:*:*:*:*:*","matchCriteriaId":"D7875372-44D7-47AB-8F8C-4A3AB98FB3B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_personal_firewall:2002:*:*:*:*:*:*:*","matchCriteriaId":"898D5369-E2F3-450C-8554-1C692EAA9906"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_personal_firewall:2003:*:*:*:*:*:*:*","matchCriteriaId":"74E5CAF7-C305-4FAF-8DA7-627D83F65185"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_personal_firewall:2004:*:*:*:*:*:*:*","matchCriteriaId":"36C0FF0C-EB6E-479B-BFF9-E55CBC0D6500"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021360.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021361.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021362.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11066","source":"cve@mitre.org"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010144","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010145","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010146","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-141.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/294998","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/634414","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/637318","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/6099","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6101","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6102","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10333","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10334","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10335","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16134","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16135","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16137","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021360.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021361.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021362.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-141.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/294998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/634414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/637318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/6099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0445","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself."},{"lang":"es","value":"El controlador SYMDNS.SYS de Symantec Norton Internet Security y Professional 2002 a 2004, Norton Personal Firewall 2002 a 2004, Norton AntiSpam 2004, Client Firewall 5.01 y 5.1.1, Client Securiy 1.0 a 2.0 permite a atacantes remotos causar una denegación de servicio (consumición de CPU en un buble infinito) mediante una respuesta DNS con un puntero de nombre comprimido que apunta a sí mismo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_firewall:5.01:*:*:*:*:*:*:*","matchCriteriaId":"4AEFBAEB-18D4-4082-9F19-C47113841C89"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_firewall:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"6EA9657C-14D2-418A-AABD-96392E87F4B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C1DFD4CB-40A1-4D70-97AC-0941826F28CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7483F6DD-EDC0-497E-A5A9-B186E02CCCEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.2:*:*:*:*:*:*:*","matchCriteriaId":"102D0C6A-31B8-4275-A805-4CA446D1C77F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.3:*:*:*:*:*:*:*","matchCriteriaId":"EA18147D-E618-4902-8837-5824240DD50E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.4:*:*:*:*:*:*:*","matchCriteriaId":"75D357CC-EAD0-42E3-B38C-BE2DC44D154E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.5:*:*:*:*:*:*:*","matchCriteriaId":"201403B4-3B5C-4F77-ADAE-7A553D4D58F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.6:*:*:*:*:*:*:*","matchCriteriaId":"A8D19926-AB65-4C06-8C44-7EA9B070FD1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.7:*:*:*:*:*:*:*","matchCriteriaId":"0F27E94F-F6D6-4C40-878F-BF952658A909"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.8:*:*:*:*:*:*:*","matchCriteriaId":"3AA71038-2D4E-4366-A3D1-AD85251B3E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:1.9:*:*:*:*:*:*:*","matchCriteriaId":"CC689F12-84C6-4B52-970F-DAF6B00B4A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0DDD0E02-306D-4675-B73A-2C2F619CDDCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antispam:2004:*:*:*:*:*:*:*","matchCriteriaId":"EA28BC22-ABF0-4F1E-BA83-85B398775450"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2002:*:*:*:*:*:*:*","matchCriteriaId":"F05FEBA2-33E8-4074-8B57-4FE6FFEF2F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2002:*:pro:*:*:*:*:*","matchCriteriaId":"A5FA0458-AB41-495E-B41F-C18B4E6876CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2003:*:*:*:*:*:*:*","matchCriteriaId":"AEF97C5F-3A80-4973-85FD-5BCE43B32AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2003:*:pro:*:*:*:*:*","matchCriteriaId":"1F0BF645-7C56-4ED6-91C0-AE4CFAB62EE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2004:*:*:*:*:*:*:*","matchCriteriaId":"2ACBDE0C-91D2-4357-9724-B60BBFF5D2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_internet_security:2004:*:pro:*:*:*:*:*","matchCriteriaId":"D7875372-44D7-47AB-8F8C-4A3AB98FB3B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_personal_firewall:2002:*:*:*:*:*:*:*","matchCriteriaId":"898D5369-E2F3-450C-8554-1C692EAA9906"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_personal_firewall:2003:*:*:*:*:*:*:*","matchCriteriaId":"74E5CAF7-C305-4FAF-8DA7-627D83F65185"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_personal_firewall:2004:*:*:*:*:*:*:*","matchCriteriaId":"36C0FF0C-EB6E-479B-BFF9-E55CBC0D6500"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11066","source":"cve@mitre.org"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010144","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010145","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010146","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-141.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/682110","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/6100","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10336","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16132","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-141.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/682110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/6100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16132","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0447","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact.  NOTE: due to a typo, this issue was accidentally assigned CVE-2004-0477.  This is the proper candidate to use for the Linux local DoS."},{"lang":"es","value":"Vulnerabilidad desconocida en Linux para IA64 anteriores a 2.4.26 permite a usuarios locales causar una denegación de servicio, con impacto desconocido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:ia64:*:*:*:*:*","versionEndIncluding":"2.4.25","matchCriteriaId":"1484EAC7-A75C-467E-AC6D-F087489AC619"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20162","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20163","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20202","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20338","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200407-16.xml","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-193.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-413.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10783","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16661","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10918","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200407-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-193.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-413.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10918","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0448","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la función log de jftpgw 0.13.4 y anteriores permite a usuarios remotos autenticados ejecutar código de su elección mediante especificadores de cadena de formato en ciertos mensajes syslog."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jftpgw:jftpgw:0.13:*:*:*:*:*:*:*","matchCriteriaId":"9FA3687A-AE55-49F0-A85C-1E0466B7286D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jftpgw:jftpgw:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"18E189A2-D429-4701-A9AA-436906ACD80C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jftpgw:jftpgw:0.13.2:*:*:*:*:*:*:*","matchCriteriaId":"0AEB52F5-21E0-4064-8057-1264CF58C398"},{"vulnerable":true,"criteria":"cpe:2.3:a:jftpgw:jftpgw:0.13.3:*:*:*:*:*:*:*","matchCriteriaId":"A3BC57F8-C7B7-4C8E-85BA-8D6D8DDCD13E"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-510","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10438","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16271","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0450","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la función printlog en log2mail 0.2.5.2 permite a usuarios locales o a atacantes remotos ejecutar código de su elección mediante especificadores de cadena de formato en un fichero de log monitorizado por log2mail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:log2mail:log2mail:0.2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8FF1138A-BCBA-4359-A795-CFC91A2CE8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:log2mail:log2mail:0.2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"CDCC9A70-6036-4005-9BF8-92A273F6F27D"},{"vulnerable":true,"criteria":"cpe:2.3:a:log2mail:log2mail:0.2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5C5ED810-4303-42E7-94D7-312E1CFD9987"},{"vulnerable":true,"criteria":"cpe:2.3:a:log2mail:log2mail:0.2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3EEFADA3-367A-468F-AC4B-A826EB577F7D"}]}]}],"references":[{"url":"http://felinemenace.org/~jaguar/advisories/log2mail.txt","source":"cve@mitre.org"},{"url":"http://osvdb.org/6711","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11768","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11769","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-513","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10460","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16311","source":"cve@mitre.org"},{"url":"http://felinemenace.org/~jaguar/advisories/log2mail.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/6711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16311","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0451","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog."},{"lang":"es","value":"Múltiples vulnerabilidades de cadena de formato en las funciones (1) logquit, (2) logerr, o (3) loginfo en Software Upgrade Protocol (SUP) permite a atacantes remotos ejecutar código de su elección mediante especificadores de cadena de formato en mensajes que son registrados por syslog."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sup:sup:1.8:*:*:*:*:*:*:*","matchCriteriaId":"91F983C9-A28C-4D0A-A413-CE8BC2215AD4"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*","matchCriteriaId":"A6B060E4-B5A6-4469-828E-211C52542547"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*","matchCriteriaId":"974C3541-990C-4CD4-A05A-38FA74A84632"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*","matchCriteriaId":"6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"58792F77-B06F-4780-BA25-FE1EE6C3FDD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"C9419322-572F-4BB6-8416-C5E96541CF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*","matchCriteriaId":"BFC50555-C084-46A3-9C9F-949C5E3BB448"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*","matchCriteriaId":"9C25D6E1-D283-4CEA-B47B-60C47A5C0797"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"AD18A446-C634-417E-86AC-B19B6DDDC856"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*","matchCriteriaId":"E4BB852E-61B2-4842-989F-C6C0C901A8D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*","matchCriteriaId":"24DD9D59-E2A2-4116-A887-39E8CC2004FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*","matchCriteriaId":"F28D7457-607E-4E0C-909A-413F91CFCD82"}]}]}],"references":[{"url":"http://securitytracker.com/id?1010539","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-521","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10571","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16459","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16459","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0452","sourceIdentifier":"cve@mitre.org","published":"2004-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7530A863-0FFF-4332-8E6F-4329AB4DE5FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.8.4:*:*:*:*:*:*:*","matchCriteriaId":"AD5E5A51-ED4C-4927-8C4D-502E79391E19"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U","source":"cve@mitre.org"},{"url":"http://fedoranews.org/updates/FEDORA--.shtml","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110547693019788&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12991","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/18517","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/55314","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-620","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-103.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-105.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12072","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18650","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9938","source":"cve@mitre.org"},{"url":"https://www.ubuntu.com/usn/usn-44-1/","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://fedoranews.org/updates/FEDORA--.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110547693019788&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/18517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/55314","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-38.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-105.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.ubuntu.com/usn/usn-44-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0453","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the monitor \"memory dump\" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulator crash) and possibly execute arbitrary code via format string specifiers in an output string."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la órden del monitor \"memory dump\" en VICE 1.6 a 1.14 permite a usuarios locales causar una denegación de servicio (caída del emulador) y posiblemente ejecutar código de su elección mediante especificadores de cadena de formato en una cadena de salida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vice:vice:1.6:*:*:*:*:*:*:*","matchCriteriaId":"52D1F7AC-449A-437E-B253-ABDEC055E352"},{"vulnerable":true,"criteria":"cpe:2.3:a:vice:vice:1.13:*:*:*:*:*:*:*","matchCriteriaId":"0FB3536D-556F-47D0-9E90-9BE39EA83F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vice:vice:1.14:*:*:*:*:*:*:*","matchCriteriaId":"BF42D07B-E553-4AB3-8283-A6C2ABFDD321"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108723630730487&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10543","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16404","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108723630730487&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16404","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0454","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the msg function for rlpr daemon (rlprd) 2.04 allows local users to execute arbitrary code."},{"lang":"es","value":"Desbordamiento de búfer en la función mgs de rlpr daemon (rlprd) 2.04 permite a usuarios locales ejecutar código de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rlpr:rlpr:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DFAC3D37-8D71-4762-9978-D352D7FA2046"},{"vulnerable":true,"criteria":"cpe:2.3:a:rlpr:rlpr:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"91F7F830-F7DB-45F3-83B5-D98F5CAA8C99"},{"vulnerable":true,"criteria":"cpe:2.3:a:rlpr:rlpr:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E2AE8328-BBCF-40BF-B99E-DDA55E3EF7DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rlpr:rlpr:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EB2B8487-E86E-404E-A6A0-40D569C13F95"},{"vulnerable":true,"criteria":"cpe:2.3:a:rlpr:rlpr:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8210438D-F087-4FE1-889C-CB9BBC1A0C73"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-524","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10578","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16454","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16454","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0455","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql."},{"lang":"es","value":"Desbordamiento de búfer en cgi.c de www-sql anteriores a 0.5.7 permite a usuarios locales ejecutar código de su elección mediante una página web que es procesada por www-sql."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-120"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:www-sql_project:www-sql:*:*:*:*:*:*:*:*","versionEndExcluding":"0.5.7","matchCriteriaId":"48C9E290-57DF-4D47-ABDB-504D6DA8EB71"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-523","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/10577","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16455","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2004/dsa-523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/10577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0456","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header."},{"lang":"es","value":"Desbordamiento basado en la pila en pavuk 0.9pl28, 0.9pl27, y posiblemente otras versiones permite a sitios web remotos ejecutar código de su elección mediante una cabecera de localización HTTP larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pavuk:pavuk:0.9pl28i:*:*:*:*:*:*:*","matchCriteriaId":"8847E10D-BDBE-45D9-8843-D2179FD23703"},{"vulnerable":true,"criteria":"cpe:2.3:a:pavuk:pavuk:0.928r1:*:*:*:*:*:*:*","matchCriteriaId":"79C449B4-EC74-49D6-B9D0-71C0260137FA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*","matchCriteriaId":"A6B060E4-B5A6-4469-828E-211C52542547"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*","matchCriteriaId":"974C3541-990C-4CD4-A05A-38FA74A84632"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*","matchCriteriaId":"6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"58792F77-B06F-4780-BA25-FE1EE6C3FDD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"C9419322-572F-4BB6-8416-C5E96541CF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*","matchCriteriaId":"BFC50555-C084-46A3-9C9F-949C5E3BB448"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*","matchCriteriaId":"9C25D6E1-D283-4CEA-B47B-60C47A5C0797"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"AD18A446-C634-417E-86AC-B19B6DDDC856"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*","matchCriteriaId":"E4BB852E-61B2-4842-989F-C6C0C901A8D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*","matchCriteriaId":"24DD9D59-E2A2-4116-A887-39E8CC2004FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*","matchCriteriaId":"F28D7457-607E-4E0C-909A-413F91CFCD82"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.1a:*:*:*:*:*:*:*","matchCriteriaId":"9C00F84A-FCD4-4935-B7DE-ECBA6AE9B074"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"960DC6C2-B285-41D4-96F7-ED97F8BD5482"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D1FD0EB4-E744-4465-AFEE-A3C807C9C993"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*","matchCriteriaId":"1D866A7D-F0B9-4EA3-93C6-1E7C2C2A861F"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*","matchCriteriaId":"57772E3B-893C-408A-AA3B-78C972ED4D5E"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023322.html","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200406-22.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-527","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10633","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16551","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023322.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200406-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16551","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0457","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files."},{"lang":"es","value":"El script mysqlhotcopy de mysql 4.0.20 y anteriores, cuando se usa el método scp del paquete mysql-server, permite a usuarios locales sobreescribir ficheros de su elección mediante un ataque de enlaces simbólicos en ficheros temporales."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.20","matchCriteriaId":"EE0EA569-9ECF-41FC-BA52-10A3F171BF98"}]}]}],"references":[{"url":"http://packages.debian.org/changelogs/pool/main/m/mysql-dfsg/mysql-dfsg_4.0.20-11/changelog","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/p-018.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-540","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-597.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17030","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10693","source":"cve@mitre.org"},{"url":"http://packages.debian.org/changelogs/pool/main/m/mysql-dfsg/mysql-dfsg_4.0.20-11/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/p-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-540","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-597.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10693","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0458","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null pointer dereference."},{"lang":"es","value":"mah-jong anteriores a 1.6.2 permiten a atacantes remotos causar una denegación de servicio mediante un argumento omitido, lo que dispara una desreferencia de puntero nulo."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-476"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-476"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nicolas_boullis:mah-jong:1.4:*:*:*:*:*:*:*","matchCriteriaId":"F6972537-47A6-4A78-B808-8B049FD2E6A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nicolas_boullis:mah-jong:1.6:*:*:*:*:*:*:*","matchCriteriaId":"C24D1CE5-25EE-4B02-B3DF-FD7C16D1DFA6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-503","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10343","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16143","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.debian.org/security/2004/dsa-503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0459","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Clear Channel Assessment (CCA) algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy (aka \"jabber\"), which prevents devices from transmitting data."},{"lang":"es","value":"El algoritmo de identificicación de canal vacio (Clear Channel Assessment - CCA) en el protocolo inalámbrico IEEE 802.11, cuando usa codificación de trasmisión de codificación DSSS, permite a atacantes remotos causar una denegación de servicio mediante ciertas señales de RF que causan que el canel aparezca ocupado (\"jabber\"), lo que impida que los dispositivos reciban datos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ieee:802.11_wireless_protocol:*:*:*:*:*:*:*:*","matchCriteriaId":"958DB9C5-0184-4D27-ABB6-218B7570905F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0631.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010152","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2004-009.pdf","source":"cve@mitre.org"},{"url":"http://www.auscert.org.au/render.html?it=4091","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/106678","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/16034","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10342","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16138","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0631.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2004-009.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.auscert.org.au/render.html?it=4091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/106678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/16034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16138","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0460","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file."},{"lang":"es","value":"Desbordamiento de búfer en la capacidad de registro de sucesos (logging) del demonio DHCP (DHCPD) de ISC DHCP 3.0.1rc12 y 3.01rc13 permite a atacantes remotos causar una denegación de servión (caída del servidor) y posiblemente ejecutar código arbitrario mediante multiples opciones de nombre de máquina (hostname) en mensajes (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, o (5) NAK, lo que puede generar una cadena larga cuando se escribe en un fichero de registro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:infoblox:dns_one_appliance:2.3.1_r5:*:*:*:*:*:*:*","matchCriteriaId":"8AAC3BDE-497E-41B1-9436-EB7B41FC24B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:infoblox:dns_one_appliance:2.4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6F2E2A23-2579-4AE3-85BE-645D1872F897"},{"vulnerable":true,"criteria":"cpe:2.3:h:infoblox:dns_one_appliance:2.4.0.8a:*:*:*:*:*:*:*","matchCriteriaId":"5F7371DD-6617-43B0-B503-46200857E203"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcpd:3.0.1:rc12:*:*:*:*:*:*","matchCriteriaId":"BD76976F-8BE2-4A96-A785-FDE10B0E430A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcpd:3.0.1:rc13:*:*:*:*:*:*","matchCriteriaId":"1A70E5CF-4B56-4201-A481-74A3FD6C4BEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_email_server:iii:*:*:*:*:*:*:*","matchCriteriaId":"BD74DAB4-A68E-4748-BC43-2285FC9804D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_admin-cd_for_firewall:*:*:*:*:*:*:*:*","matchCriteriaId":"52E04F16-A0C7-4B0C-A70E-2CA683E0C33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_connectivity_server:*:*:*:*:*:*:*:*","matchCriteriaId":"941DFF67-E9F6-41F0-A5CB-90105733327D"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_database_server:*:*:*:*:*:*:*:*","matchCriteriaId":"117BBA08-9C1B-4CAC-A418-B044D69C27D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_firewall_cd:*:*:*:*:*:*:*:*","matchCriteriaId":"52F8C98F-E10C-4FE8-96E7-27426F369E78"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_office_server:*:*:*:*:*:*:*:*","matchCriteriaId":"2FDDFB81-4DFE-416A-BCE1-ED96AC3E69B5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"33F6F859-B7B8-4072-B073-6CC8291D642E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C4AD30B9-8FBA-48B3-B2B2-014C950B9BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:ppc:*:*:*:*:*","matchCriteriaId":"279317B9-AF2F-43E9-BEE5-518FC6D23A87"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6996B14-925B-46B8-982F-3545328B506B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"F7840155-DCF0-4C34-815B-71F872D31A20"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D2E2EF3C-1379-4CBE-8FF5-DACD47834651"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*","matchCriteriaId":"37F124FE-15F1-49D7-9E03-8E036CE1A20C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108795911203342&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108843959502356&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108938625206063&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/23265","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/317350","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:061","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_19_dhcp_server.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10590","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-174A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16475","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108795911203342&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108843959502356&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108938625206063&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/317350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_19_dhcp_server.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-174A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16475","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0461","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code."},{"lang":"es","value":"El demonio DHCP (DHCPD) de ISC DHCP 3.0.1rc12 y 3.0.1rc13, cuando se compila en entornos que no proveen la función vsnprintf, usa ficheros de inclusión de C que definen vsnprintf usando la función menos segura vsprintf, lo que puede ocasionar vulnerabilidades de desbordamiento de búfer que permitan una denegación de servicio (caída del servidor) y la ejecución de código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:infoblox:dns_one_appliance:2.3.1_r5:*:*:*:*:*:*:*","matchCriteriaId":"8AAC3BDE-497E-41B1-9436-EB7B41FC24B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:infoblox:dns_one_appliance:2.4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6F2E2A23-2579-4AE3-85BE-645D1872F897"},{"vulnerable":true,"criteria":"cpe:2.3:h:infoblox:dns_one_appliance:2.4.0.8a:*:*:*:*:*:*:*","matchCriteriaId":"5F7371DD-6617-43B0-B503-46200857E203"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcpd:3.0.1:rc12:*:*:*:*:*:*","matchCriteriaId":"BD76976F-8BE2-4A96-A785-FDE10B0E430A"},{"vulnerable":true,"criteria":"cpe:2.3:a:isc:dhcpd:3.0.1:rc13:*:*:*:*:*:*","matchCriteriaId":"1A70E5CF-4B56-4201-A481-74A3FD6C4BEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_email_server:iii:*:*:*:*:*:*:*","matchCriteriaId":"BD74DAB4-A68E-4748-BC43-2285FC9804D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_admin-cd_for_firewall:*:*:*:*:*:*:*:*","matchCriteriaId":"52E04F16-A0C7-4B0C-A70E-2CA683E0C33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_connectivity_server:*:*:*:*:*:*:*:*","matchCriteriaId":"941DFF67-E9F6-41F0-A5CB-90105733327D"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_database_server:*:*:*:*:*:*:*:*","matchCriteriaId":"117BBA08-9C1B-4CAC-A418-B044D69C27D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_firewall_cd:*:*:*:*:*:*:*:*","matchCriteriaId":"52F8C98F-E10C-4FE8-96E7-27426F369E78"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_office_server:*:*:*:*:*:*:*:*","matchCriteriaId":"2FDDFB81-4DFE-416A-BCE1-ED96AC3E69B5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"33F6F859-B7B8-4072-B073-6CC8291D642E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C4AD30B9-8FBA-48B3-B2B2-014C950B9BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:ppc:*:*:*:*:*","matchCriteriaId":"279317B9-AF2F-43E9-BEE5-518FC6D23A87"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6996B14-925B-46B8-982F-3545328B506B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"F7840155-DCF0-4C34-815B-71F872D31A20"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D2E2EF3C-1379-4CBE-8FF5-DACD47834651"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*","matchCriteriaId":"37F124FE-15F1-49D7-9E03-8E036CE1A20C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108795911203342&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108843959502356&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108938625206063&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/23265","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/654390","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:061","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_19_dhcp_server.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10591","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-174A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16476","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108795911203342&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108843959502356&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108938625206063&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/654390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_19_dhcp_server.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-174A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16476","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0462","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session with the same server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/546483","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17702","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/546483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17702","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0465","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via \"..//\" sequences in the WCP_USER parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openconnect:webconnect:6.4.4:*:*:*:*:*:*:*","matchCriteriaId":"826A8F3E-D0CB-4664-B0B6-43B59D5727D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openconnect:webconnect:6.5:*:*:*:*:*:*:*","matchCriteriaId":"4F93EA0D-F052-4A23-B181-2F421215D3D5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110910838600145&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/14006/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.cirt.dk/advisories/cirt-29-advisory.pdf","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/628411","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JSHA-69HVPK","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19394","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110910838600145&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/14006/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.cirt.dk/advisories/cirt-29-advisory.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/628411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JSHA-69HVPK","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19394","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0466","sourceIdentifier":"cve@mitre.org","published":"2004-02-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service (hang) via a URL containing an MS-DOS device name such as (1) AUX, (2) CON, (3) PRN, (4) COM1, or (5) LPT1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openconnect:webconnect:6.4.4:*:*:*:*:*:*:*","matchCriteriaId":"826A8F3E-D0CB-4664-B0B6-43B59D5727D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openconnect:webconnect:6.5:*:*:*:*:*:*:*","matchCriteriaId":"4F93EA0D-F052-4A23-B181-2F421215D3D5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110910838600145&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/14006/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cirt.dk/advisories/cirt-29-advisory.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/552561","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JSHA-69FVMM","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19393","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110910838600145&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/14006/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cirt.dk/advisories/cirt-29-advisory.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/552561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JSHA-69FVMM","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0467","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service (routing disabled) via a large number of MPLS packets, which are not filtered or verified before being sent to the Routing Engine, which reduces the speed at which other packets are processed."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C0F33B07-7036-4A13-9B54-D191D8085295"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:5.1:*:*:*:*:*:*:*","matchCriteriaId":"FF54C9B6-F73B-421B-9B2C-A6F46A9C3618"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"ABFFA914-40DA-44DF-9C51-CBC753659C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:5.3:*:*:*:*:*:*:*","matchCriteriaId":"2A9EA5F0-08D8-476B-B3B9-009E5BB0A6B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"D815C4FB-9D6B-4DDF-A60A-4BD721D3CB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"658ED891-8E65-44F0-9797-07811AC5243F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:5.6:*:*:*:*:*:*:*","matchCriteriaId":"9D6D0229-9738-4472-B452-0D93EAEA7446"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"24DD3017-5939-4EDC-8A9E-A673195B705E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:6.1:*:*:*:*:*:*:*","matchCriteriaId":"78629980-A94C-4E13-86A4-C6CEC686B4B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:6.2:*:*:*:*:*:*:*","matchCriteriaId":"0131C19D-4AF7-410A-A7C9-6AFD3494A743"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:6.3:*:*:*:*:*:*:*","matchCriteriaId":"4EA66D3D-A91B-4573-B287-AB73DF17415C"}]}]}],"references":[{"url":"http://secunia.com/advisories/14049","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1013039","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/409555","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JSHA-68ZJCQ","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.niscc.gov.uk/niscc/docs/al-20050126-00067.html?lang=en","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-081.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12379","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19094","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/14049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1013039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/409555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JSHA-68ZJCQ","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.niscc.gov.uk/niscc/docs/al-20050126-00067.html?lang=en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-081.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0468","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in Juniper JUNOS Packet Forwarding Engine (PFE) allows remote attackers to cause a denial of service (memory exhaustion and device reboot) via certain IPv6 packets."},{"lang":"es","value":"Fuga de memoria en Juniper JUNOS Packet Forwarding Engine (PFE) permite a atacantes remotos causar una denegación de servicio (consumición de memoria y reinicio del dispositivo) mediante ciertos paquetes IPv6."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*","matchCriteriaId":"57562A7F-7AB2-4A35-88EB-586EF9546D50"}]}]}],"references":[{"url":"http://www.jpcert.or.jp/at/2004/at040009.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/658859","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JSHA-6253CC","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16548","source":"cve@mitre.org"},{"url":"http://www.jpcert.or.jp/at/2004/at040009.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/658859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/JSHA-6253CC","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0469","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation."},{"lang":"es","value":"Desbordamiento de búfer en la funcionalidad ISAKMP de los productos Check Point VPN-1 y FireWall-1 NG, anteriores a VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 y NG FP3 HFA-325, o VPN-1 SecuRemote/SecureClient R56, puede permitir a atacantes remotos ejecutar código arbitrario mediane una negociación de tunel VPN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:*:*:vsx-ng-ai:*:*:*:*:*","matchCriteriaId":"AA9A50A1-CA8C-4EE5-B68F-4958F6B4B028"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:2.0:*:gx:*:*:*:*:*","matchCriteriaId":"8C83ABA2-87CD-429B-9800-590F8256B064"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:2.0.1:*:vsx:*:*:*:*:*","matchCriteriaId":"E77F0C13-C65F-44DC-BD5D-A8F5CBF33F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:next_generation:*:*:fp3:*:*:*:*:*","matchCriteriaId":"148E888C-9705-4015-ADF2-5863715D8041"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:ng-ai:r54:*:*:*:*:*:*:*","matchCriteriaId":"A9E1C23E-E495-4724-92AB-E1AB425FBB7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:ng-ai:r55:*:*:*:*:*:*:*","matchCriteriaId":"60BC085B-508F-460F-8BE5-0B2842123DA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:vsx_2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9E5F3217-844F-41BB-8A7F-1D2F4445F3FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:vsx_ng_with_application_intelligence:*:*:*:*:*:*:*","matchCriteriaId":"B5EF01C8-1C8A-4BD1-A13B-CE31F09F9523"}]}]}],"references":[{"url":"http://www.checkpoint.com/techsupport/alerts/ike_vpn.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10273","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16060","source":"cve@mitre.org"},{"url":"http://www.checkpoint.com/techsupport/alerts/ike_vpn.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16060","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0470","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing weblogic.xml using WebLogic Builder or the SecurityRoleAssignmentMBean.toXML method, inadvertently removes security-role-assignment tags when weblogic.xml does not have a principal-name tag, which can remove intended access restrictions for the associated web application."},{"lang":"es","value":"BEA WebLogic Server y WebLocic Express 7.0 hasta SP5 y 8.1 hasta SP2, cuando se edita weblogic.xml usando WebLocic Builder o el método SecurityRoleAssignmentMBean.toXML, quita de manera inadvertida etiquetas de asignación de papel de seguridad cuando weblogic.xml no tiene una etiqueta de nombre principal, lo que puede eliminar las restricciones de acceso pretendidas para la aplicación web asociada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*","matchCriteriaId":"FBDF3AC0-0680-4EEE-898C-47D194667BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*","matchCriteriaId":"ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"}]}]}],"references":[{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_59.00.jsp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11593","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010128","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/950070","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/6076","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10328","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16123","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_59.00.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/950070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/6076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0471","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for starting and stopping servers for users in the Admin and Operator security roles, which allows unauthorized users to cause a denial of service (service shutdown)."},{"lang":"es","value":"BEA WebLogic Server y WebLocic Express 7.0 hasta SP5 y 8.1 hasta SP2 no hace cumplir las restricciones de sitio para iniciar y parar servidores a usuarios en los papeles de seguridad Admin y Operator, lo que permite a usuarios no autorizados causar una denegación de servicio (parada del servicio)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*","matchCriteriaId":"FBDF3AC0-0680-4EEE-898C-47D194667BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*","matchCriteriaId":"ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"}]}]}],"references":[{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_60.00.jsp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11594","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010129","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6077","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10327","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16121","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_60.00.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16121","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0472","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2023-11-07T01:56:41.893","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate is a reservation duplicate of CVE-2004-0434.  Notes: All CVE users should reference CVE-2004-0434 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-0473","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in Opera before 7.50 does not properly filter \"-\" characters that begin a hostname in a telnet URI, which allows remote attackers to insert options to the resulting command line and overwrite arbitrary files via (1) the \"-f\" option on Windows XP or (2) the \"-n\" option on Linux."},{"lang":"es","value":"El navegador Web Opera no filtra adecuadamente caractéres \"-\" en el comienzo de un nombre de máquina en una URI telnet, lo que permite a atacantes remotos insertar opciones en la linea de comandos resultante y sobreescribir ficheros de su elección mediante la opción \"-f\" en Windows XP o \"-n\" en Linux."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-88"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndExcluding":"7.50","matchCriteriaId":"3C2A60B0-579A-46F8-91E4-63275CF8595A"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200405-19.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1010142","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.idefense.com/application/poi/display?id=104&type=vulnerabilities","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.opera.com/linux/changelogs/750/index.dml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10341","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16139","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1010142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.idefense.com/application/poi/display?id=104&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.opera.com/linux/changelogs/750/index.dml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10341","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0474","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an \"http://\" or \"file://\" argument to the topic parameter in an hcp:// URL.  NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue."},{"lang":"es","value":"El Centro de Ayuda de Windows XP (HelpCtr.exe) puede permitir a atacantes remotos leer o ejecutar ficheros arbitrarios mediante un argumento \"http://\" o \"file://\" en el parámetro topic en una URL \"hcp://\". Nota: desde el informe inicial de este problema, varios investigadores no han conseguido reproducir este error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0440.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0450.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0688.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107652584102003&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/353248","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9621","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15101","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0440.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0450.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0688.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107652584102003&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/353248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15101","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0475","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double backward slash (\"\\\\\") before the target CHM file, as demonstrated using an \"ms-its\" URL to ntshared.chm.  NOTE: this bug may overlap CVE-2003-1041."},{"lang":"es","value":"La función showHelp en Internet Explorer 6 en Windows XP Pro permite a atacantes remotos ejecutar ficheros .chm locales de su elección mediante una barra invertida (\"\") doble antes del fichero .chm objetivo, como se ha demostrado usando una URL \"ms-its\" con ntshared.chm. NOTA: Este fallo puede solaparse con CAN-2003-1041."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/363202","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10348","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16147","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/363202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16147","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0476","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in 3Com OfficeConnect Remote 812 ADSL Router 1.1.9.4 allows remote attackers to cause a denial of service (reboot or packet loss) via a long string containing Telnet escape characters to the Telnet port."},{"lang":"es","value":"Desbordamiento de búfer en el encaminador ADSL 3Com OfficeConnect Remote 812 1.1.9.4 permite a atacantes remotos causar una denegación de servicio (reinicio o pérdida de paquetes) mediante una cadena larga conteniendo caractéres de escape de Telnet en el puerto Telnet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3cp4144:*:*:*:*:*:*:*:*","matchCriteriaId":"55279440-DCB1-4F7D-81B9-1E39BBE380B0"},{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3cp4144:1.1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"2E3EB934-BB37-4D0E-ABF8-E84ED8CCF759"}]}]}],"references":[{"url":"http://secunia.com/advisories/11716","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=105&type=vulnerabilities","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10419","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16257","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=105&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16257","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0477","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in 3Com OfficeConnect Remote 812 ADSL Router allows remote attackers to bypass authentication via repeated attempts using any username and password.  NOTE: this identifier was inadvertently re-used for another issue due to a typo; that issue was assigned CVE-2004-0447.  This candidate is ONLY for the ADSL router bypass."},{"lang":"es","value":"Vulnerabilidad desconocida en 3Com OfficeConncet Remote 812 ADSL Router permite a atacantes remotos saltarse la autenticación mediante repetidos intentos usando cualquier nombre de usuario y contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3cp4144:*:*:*:*:*:*:*:*","matchCriteriaId":"55279440-DCB1-4F7D-81B9-1E39BBE380B0"},{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3cp4144:1.1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"2E3EB934-BB37-4D0E-ABF8-E84ED8CCF759"}]}]}],"references":[{"url":"http://secunia.com/advisories/11716","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=106&type=vulnerabilities&flashstatus=false","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10426","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16267","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=106&type=vulnerabilities&flashstatus=false","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10426","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0478","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite loop  that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U."},{"lang":"es","value":"Ciertas versiones (desconocidas) de Mozilla permiten a atacantes remotos causar una denegación de servicio (alto consumo de RAM/CPU) usando Javascritp en un bucle infinito que añade continuamente entrada a un formulario, posiblemente como resultado de inserción de caractéres de control, como se ha demostrado usando un carácter \"Ctrl-U\" embebido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","matchCriteriaId":"10E59CDD-9F95-4E38-95B3-AC5C35075378"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=243540","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2004-May/000587.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16225","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=243540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.immunitysec.com/pipermail/dailydave/2004-May/000587.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16225","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0479","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, which triggers a null dereference."},{"lang":"es","value":"Internet Explorer 6 permite a atacantes remotos causar una denegación de servicio (caída) mediante Javascritp que crea una ventana emergente y desactiva la funcionalidad imagetoolbar con una etiqueta META, lo que dispara una desreferencia nula."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*","matchCriteriaId":"B80088A3-2AA4-44A2-98DF-359E15F8E18B"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021500.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=108457938412310&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=vuln-dev&m=108476938219070&w=2","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021500.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=108457938412310&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=vuln-dev&m=108476938219070&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0480","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe."},{"lang":"es","value":"Vulnerabilidad de inyección de argumentos en IBM Lotus Notes 6.0.3 y 6.5 permite a atacantes remotos ejecutar código de su eleccion mediante una URI notes: que usa un nombre de ruta de red UNC para proveer un fichero de configuración notes.ini alternativo a notes.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-88"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB71B7AA-957B-46A6-9BC9-CE23EC721189"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1360A50E-C1E1-4690-874A-04CC7C1A77CC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108843896506099&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=475/context=SSKTWP&uid=swg21169510","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=111&type=vulnerabilities","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10600","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16496","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=108843896506099&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=475/context=SSKTWP&uid=swg21169510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=111&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0482","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4) procfs_regs.c, (5) procfs_status.c, and (6) procfs_subr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly perform other unauthorized activities."},{"lang":"es","value":"Múltiples errores de \"comprobación incorrecta de límites\" en ciertas funciones de procfs de OpenBSD 3.4 y 3.5 permite a usuarios locales leer memoria del kernel de su elección y posiblemente ganar privilegios mediante el sistema de archivos proc"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"}]}]}],"references":[{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/020_procfs.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/006_procfs.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=full-disclosure&m=108481812926420&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=openbsd-security-announce&m=108445767103004&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11605","source":"cve@mitre.org"},{"url":"http://www.deprotect.com/advisories/DEPROTECT-20041305.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.openbsd.org/errata34.html","source":"cve@mitre.org"},{"url":"http://www.openbsd.org/errata35.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6114","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16226","source":"cve@mitre.org"},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/020_procfs.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/006_procfs.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=full-disclosure&m=108481812926420&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=openbsd-security-announce&m=108445767103004&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.deprotect.com/advisories/DEPROTECT-20041305.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.openbsd.org/errata34.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openbsd.org/errata35.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16226","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0483","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service (infinite loop) via certain RPC requests."},{"lang":"es","value":"Vulnerabilidad desconocida en rpc.mountd de SGI IRIX 6.5.24 permite a atacantes remotos causar una denegación de servicio (bucle infinito) mediante ciertas peticiones RPC."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.24:*:*:*:*:*:*:*","matchCriteriaId":"0FA0AC9C-D99E-4DF5-B3F6-EF3E5A9602B0"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040503-01-P","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11628","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010185","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6201","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10372","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16175","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040503-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11628","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010185","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6201","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16175","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0484","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a form that crosses multiple td elements, and whose \"float: left\" class is defined in a link to a CSS stylesheet after the end of the table, which may trigger a null dereference."},{"lang":"es","value":"Vulnerabilidad desconocida en mshtml.dll en Microsoft Internet Explorer permite a usuarios remotos causar una denegación de servicio (caída) mediante cierto documento HTML que enlaza a un documenteo CSS mediante un descriptor de clase \"float:left\" para un elemento de formulario, lo que puede disparar una desreferencia nula."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*","matchCriteriaId":"7B90EA4B-DA10-44B7-BD3D-6AE1197212D5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108490218632590&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10382","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16189","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108490218632590&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10382","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0485","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file (.dmg) to be mounted as a disk volume."},{"lang":"es","value":"El ayudante de protocolo para URI \"disk:\" en Mac OX X 10.3.3 y 10.2.8 permite a atacantes remotos escribir ficheros arbitrarios haciendo que un fichero de imagen de disco (.dmg) sea montado como un volumen de disco."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"}]}]}],"references":[{"url":"http://fundisom.com/owned/warning","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00053.html","source":"cve@mitre.org"},{"url":"http://lists.seifried.org/pipermail/security/2004-May/003743.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11622/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/210606","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16166","source":"cve@mitre.org"},{"url":"http://fundisom.com/owned/warning","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.seifried.org/pipermail/security/2004-May/003743.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11622/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/210606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0486","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler."},{"lang":"es","value":"HelpViewer en Mac OS X 10.3.3 y 10.2.8 procesa scripts que no inició, lo que puede permitir a atacantes ejecuatar código de su elección, un problema que fue reportado originalmente como una vulnerabilidad de atravesamiento de directorios en el navegador web Safari usanto el manejador de URI help:"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0837.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00053.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11622/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010167","source":"cve@mitre.org"},{"url":"http://www.fundisom.com/owned/warning","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/578798","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/6184","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10356","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16166","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0837.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11622/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fundisom.com/owned/warning","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/578798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/6184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0487","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary programs."},{"lang":"es","value":"Un cierto control ActiveX en Symantec Norton Antivirus 2004 permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar programas de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2.1:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"A9415109-C554-40F6-851E-CC016951BDF8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108515369718455&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11676","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-149.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/312510","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/72_e.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6303","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10392","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.symantec.com/avcenter/security/Content/2004.05.20.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16220","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108515369718455&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-149.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/312510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/72_e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.symantec.com/avcenter/security/Content/2004.05.20.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0488","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en la función ssl_util_uuencode_binary en ssl_util.c de mod_ssl de Apache cuando se configura mod_ssl para que confie en la Autoridad Certificadora emisora, puede permitir a atacantes remotos ejecutar código arbitrario mediante un certificado de cliente con un DN de asunto grande."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.50:\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.35","versionEndExcluding":"2.0.50","matchCriteriaId":"B71C49F3-0F7C-4B25-AB0D-BBB2A0C5144F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0F9EF63F-DDA3-448B-92D7-27ED92C51FED"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53A61204-33CE-422F-8285-20A5E98ADF3F"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021610.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108567431823750&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108619129727620&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109181600614477&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109215056218824&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2004-245.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200406-05.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-532","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:054","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:055","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-342.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-405.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-816.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/10355","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.trustix.net/errata/2004/0031/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1888","source":"cve@mitre.org","tags":["Broken Link","Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16214","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11458","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021610.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108567431823750&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108619129727620&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109181600614477&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109215056218824&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2004-245.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200406-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:054","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:055","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-342.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-405.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-816.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/10355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.trustix.net/errata/2004/0031/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/raa117ef183f0da9b3f46efbeaa66f7622bd68868a450cae4fd8ed594%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-0489","sourceIdentifier":"cve@mitre.org","published":"2004-07-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to (1) execute arbitrary code via the ProxyCommand option or (2) conduct port forwarding via the -R option."},{"lang":"es","value":"Vulnerabilidad de inyección de argumentos en el manejador de URI SSH de Safari sobre Mac OS 10.3.3 y anteriores permite a atacantes remotos (1) ejecutar código de su elección mediante la opción ProxyCommand o (2) hacer reenvío de puertos mediante la opción -R."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-88"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.3.3","matchCriteriaId":"B09DFC89-C635-428B-A22A-928130AC3695"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021871.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.insecure.ws/article.php?story=200405222251133","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16242","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021871.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.insecure.ws/article.php?story=200405222251133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0490","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cPanel, when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option, does not set the --enable-discard-path option, which causes php to use the SCRIPT_FILENAME variable to find and execute a script instead of the PATH_TRANSLATED variable, which allows local users to execute arbitrary PHP code as other users via a URL that references the attacker's script after the user's script, which executes the attacker's script with the user's privileges, a different vulnerability than CVE-2004-0529."},{"lang":"es","value":"cPanel, cuando se compila Apache 1.3.29 y PHP con la opción mod_phpsuexec, no establece la opción --enable-discard-path, lo que hace que php use la variable SCRIPT_FILENAME para ejecutar un script en lugar de la variable PATH_TRANSLATED, lo que permite a usuarios locales ejecutar código PHP de su elección como otros usuarios mediante una URL que referencia al script del atacante con los privilegios del usuario, una vulnerabilidad distinta de CAN-2004-0529."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E5B33AE8-75A8-4454-A1A3-33F4034015FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:5.3:*:*:*:*:*:*:*","matchCriteriaId":"E4394768-37BE-4FC5-A65A-28C0295A33B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.0:*:*:*:*:*:*:*","matchCriteriaId":"DC52A018-43E8-4D86-A84C-81064B6ACD74"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.2:*:*:*:*:*:*:*","matchCriteriaId":"2FC66D8D-01B8-4312-A311-ACAB43699071"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.4:*:*:*:*:*:*:*","matchCriteriaId":"E892FB52-DB84-422F-ABB6-29AB95726138"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1FC5C591-69F3-411F-A53A-72D17687CA2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"92D81000-1A7C-4465-9EE2-E651AED09F82"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.4.2_stable_48:*:*:*:*:*:*:*","matchCriteriaId":"E4B555B5-E66F-4E37-A5BC-E04CBDFA4F8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09258895-32E6-49AC-8C96-D2838A0C8E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:8.0:*:*:*:*:*:*:*","matchCriteriaId":"3B4F9F98-08A2-430B-BC96-B30DCA165F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:9.0:*:*:*:*:*:*:*","matchCriteriaId":"32D546C9-674B-4683-9EC5-18156CE04B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:9.1:*:*:*:*:*:*:*","matchCriteriaId":"1E915DEA-1BA9-429D-97D5-CA3D37C969B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:9.1.0_r85:*:*:*:*:*:*:*","matchCriteriaId":"4D9DDCBE-8A9C-44FC-8A24-47933CE057F2"}]}]}],"references":[{"url":"http://bugzilla.cpanel.net/show_bug.cgi?id=283","source":"cve@mitre.org"},{"url":"http://bugzilla.cpanel.net/show_bug.cgi?id=664","source":"cve@mitre.org"},{"url":"http://www.a-squad.com/audit/explain10.html","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/tools/5TP0N15CUA.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/364112","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10407","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16239","source":"cve@mitre.org"},{"url":"http://bugzilla.cpanel.net/show_bug.cgi?id=283","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.cpanel.net/show_bug.cgi?id=664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.a-squad.com/audit/explain10.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/tools/5TP0N15CUA.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/364112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16239","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0491","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"40D8DAE0-8E75-435C-9BD6-FAEED2ACB47C"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-kernel&m=108087017610947&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/19607","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-472.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/13769","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126411","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10672","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1117","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-kernel&m=108087017610947&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19607","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-472.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/13769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0492","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied."},{"lang":"es","value":"Desbordamiento de búfer basado en el montón en proxy_util.c de mod_proxy en Apache 1.3.25 a 1.3.31 permite a atacantes remotos causar un denegación de servicio (caída del proceso) y posiblemente ejecutar código de su elección mediante un campo de cabecera HTTP Content-Length negativo, lo que causa que una gran cantidad de datos sean copiados."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 1.3.32:\nhttp://httpd.apache.org/security/vulnerabilities_13.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.26:*:*:*:*:*:*:*","matchCriteriaId":"E130104B-86F5-411E-8AC0-9B4B780BCA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.27:*:*:*:*:*:*:*","matchCriteriaId":"0E62E621-74DA-4D99-A79C-AD2B85896A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.28:*:*:*:*:*:*:*","matchCriteriaId":"2C577188-BD56-4571-A61A-1684DC9E9DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.29:*:*:*:*:*:*:*","matchCriteriaId":"5B3A4CD9-1E96-4D3B-938D-F2D15855B0DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.31:*:*:*:*:*:*:*","matchCriteriaId":"4058CE14-1CC8-42FD-A6BD-6869C1610E57"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:virtualvault:11.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5B8853E4-FEA2-4760-8734-5110D785F3F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:webproxy:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5FFE6E5A-6D37-494F-B9E5-37116DDC120A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:webproxy:2.1:*:*:*:*:*:*:*","matchCriteriaId":"F8BA3FB4-63B7-4B3E-A2EA-137B93D076DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server:1.3.26:*:*:*:*:*:*:*","matchCriteriaId":"9F43768E-F635-4A5E-892E-F8A732AC9F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server:1.3.26.1:*:*:*:*:*:*:*","matchCriteriaId":"BCE51E2D-29DA-41D8-824A-05FD4D208ABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server:1.3.26.2:*:*:*:*:*:*:*","matchCriteriaId":"7581135B-5A4C-48DA-8FCC-A06FB0C22072"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server:1.3.28:*:*:*:*:*:*:*","matchCriteriaId":"B4ED546C-D170-475B-9BB5-F23EAAD8B035"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:vvos:11.04:*:*:*:*:*:*:*","matchCriteriaId":"1D462D6F-EB68-4E31-87FD-D918F5DEF3FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*","matchCriteriaId":"CA3CDD3C-DBA6-4BA2-967D-AD746822F3CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108711172710140&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-245.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/lists/fulldisclosure/2004/Jun/0296.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11841","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-525","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.guninski.com/modproxy1.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/541310","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:065","source":"cve@mitre.org"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1737","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16387","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100112","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4863","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108711172710140&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=130497311408250&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-245.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://seclists.org/lists/fulldisclosure/2004/Jun/0296.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101555-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101841-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57628-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.guninski.com/modproxy1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/541310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4863","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0493","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters."},{"lang":"es","value":"La función ap_get_mime_headers_core de Apache httpd 2.0.49 permite a atacantes remotos causar una denegación de servicio (consumición de memoria) y posiblemente un error de entero sin signo que conduce a un desbordamiento de búfer basado en el montón en en sistemas de 64 bits, mediante líneas de cabecera largas con muchos caractéres espacio o tabulador."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.50:\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:converged_communications_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E586558A-ABC3-42EB-8B4D-DC92A0D695E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*","matchCriteriaId":"39605B96-BAD6-45C9-BB9A-43D6E2C51ADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.47:*:*:*:*:*:*:*","matchCriteriaId":"AFE732B5-00C9-4443-97E0-1DF21475C26B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.48:*:*:*:*:*:*:*","matchCriteriaId":"C79C41D3-6894-4F2D-B8F8-82AB4780A824"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.49:*:*:*:*:*:*:*","matchCriteriaId":"449A5647-CEA6-4314-9DB8-D086F388E1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server:2.0.42:*:*:*:*:*:*:*","matchCriteriaId":"4BBE18AC-99F8-4D82-8724-B99E82F6892E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server:2.0.42.1:*:*:*:*:*:*:*","matchCriteriaId":"AB9075EC-9B80-45F8-AEDF-04A8C49C7C74"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server:2.0.42.2:*:*:*:*:*:*:*","matchCriteriaId":"6F49DC1E-B67A-46CB-83B1-24FAFBDBE9E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server:2.0.47:*:*:*:*:*:*:*","matchCriteriaId":"9674B2D8-8235-4AB1-AB6D-285704774EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server:2.0.47.1:*:*:*:*:*:*:*","matchCriteriaId":"8673FFC4-36B3-4E61-8007-099E9568ECCA"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"20C0BD87-CE4B-49D2-89BE-EF282C43AD72"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FE76357A-27E6-4D85-9AA0-1BB658C41568"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AEF6C16F-8EDF-4A24-BFEF-6A304D654EEB"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/023133.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108853066800184&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109181600614477&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200407-03.xml","source":"cve@mitre.org"},{"url":"http://www.apacheweek.com/features/security-20","source":"cve@mitre.org"},{"url":"http://www.guninski.com/httpd1.html","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:064","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-342.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10619","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0039/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16524","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10605","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/023133.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108853066800184&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109181600614477&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200407-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apacheweek.com/features/security-20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.guninski.com/httpd1.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-342.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0039/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0494","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:cvlan:*:*:*:*:*:*:*:*","matchCriteriaId":"2FE82341-3E73-4F5B-BD9E-06C83F22E831"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*","matchCriteriaId":"A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*","matchCriteriaId":"409E324A-C040-494F-A026-9DCAE01C07F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*","matchCriteriaId":"6474B775-C893-491F-A074-802AFB1FEDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*","matchCriteriaId":"84A50ED3-FD0D-4038-B3E7-CC65D166C968"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*","matchCriteriaId":"777F9EC0-2919-45CA-BFF8-78A02537C513"}]}]}],"references":[{"url":"http://rpmfind.net/linux/RPM/suse/9.3/i386/suse/i586/gnome-vfs-1.0.5-816.2.i586.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-373.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1944","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16897","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9854","source":"cve@mitre.org"},{"url":"http://rpmfind.net/linux/RPM/suse/9.3/i386/suse/i586/gnome-vfs-1.0.5-816.2.i586.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-373.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16897","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9854","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0495","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool."},{"lang":"es","value":"Múltiples vulnerabilidades desconocidas en el kernel de Linux 2.4 y 2.6 permiten a usuarios locales ganar privilegios o acceder a memoria del kernel, como se ha encontrado mediante la herramienta de comprobación de código fuente \"Sparse\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:converged_communications_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E586558A-ABC3-42EB-8B4D-DC92A0D695E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:s3400:*:*:*:*:*:*:*","matchCriteriaId":"9BFF29C7-E5AA-44EB-B1A9-602B3692D893"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A0934C49-5F88-4189-BD88-2F32C39C2F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*","matchCriteriaId":"14B0A230-4054-4483-A3A7-9A5A286C7552"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*","matchCriteriaId":"81B543F9-C209-46C2-B0AE-E14818A6992E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*","matchCriteriaId":"DB89C970-DE94-4E09-A90A-077DB83AD156"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"F7840155-DCF0-4C34-815B-71F872D31A20"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D2E2EF3C-1379-4CBE-8FF5-DACD47834651"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*","matchCriteriaId":"37F124FE-15F1-49D7-9E03-8E036CE1A20C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:*:*:lx:*:*:*:*:*","matchCriteriaId":"C1A3B951-A1F8-4291-82FA-AB7922D13ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_email_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A451599B-5F4F-4D7F-B5EF-3AE9F9B89D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_email_server:iii:*:*:*:*:*:*:*","matchCriteriaId":"BD74DAB4-A68E-4748-BC43-2285FC9804D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_admin-cd_for_firewall:*:*:*:*:*:*:*:*","matchCriteriaId":"52E04F16-A0C7-4B0C-A70E-2CA683E0C33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_connectivity_server:*:*:*:*:*:*:*:*","matchCriteriaId":"941DFF67-E9F6-41F0-A5CB-90105733327D"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_database_server:*:*:*:*:*:*:*:*","matchCriteriaId":"117BBA08-9C1B-4CAC-A418-B044D69C27D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_firewall_cd:*:*:*:*:*:*:*:*","matchCriteriaId":"52F8C98F-E10C-4FE8-96E7-27426F369E78"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_office_server:*:*:*:*:*:*:*:*","matchCriteriaId":"2FDDFB81-4DFE-416A-BCE1-ED96AC3E69B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_office_server:*:*:*:*:*:*:*:*","matchCriteriaId":"18BAE686-972A-4756-9E5D-CF2830700891"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"20C0BD87-CE4B-49D2-89BE-EF282C43AD72"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C3E6C4A8-59F4-43EE-8413-E95289037598"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FE76357A-27E6-4D85-9AA0-1BB658C41568"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C56C5FDB-24E2-479D-87CA-164CD28567D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AEF6C16F-8EDF-4A24-BFEF-6A304D654EEB"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D982AE39-BB57-49E7-B5FE-5EF1ADE2F019"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"CD14661C-E3BE-44DF-BC8D-294322BF23EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F4007B0D-9606-46BD-866A-7911BEA292BE"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846","source":"cve@mitre.org"},{"url":"http://lwn.net/Articles/91155/","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:066","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_20_kernel.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-255.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-260.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10566","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16449","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10155","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2961","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lwn.net/Articles/91155/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_20_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-255.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-260.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16449","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2961","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0496","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory, a different set of vulnerabilities than those identified in CVE-2004-0495, as found by the Sparse source code checking tool."},{"lang":"es","value":"Multiples vulnerabilidades desconocidas en el kernel 2.6 de Linux permite a usuarios locales ganar privilegios o acceder a memoria del kernel, un grupo de vulerabilidades distinto de los identificado por CAN-2004-0495, como se ha encontrado con la herramienta de comprobación de código fuente Sparse"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*","matchCriteriaId":"E4F3F3BB-E004-4FD9-9580-F2D5F3ED3701"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_email_server:3:*:*:*:*:*:*:*","matchCriteriaId":"62E7BDA1-AFB2-45D4-B80C-30F4FF1DF219"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_email_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A451599B-5F4F-4D7F-B5EF-3AE9F9B89D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_connectivity_server:*:*:*:*:*:*:*:*","matchCriteriaId":"941DFF67-E9F6-41F0-A5CB-90105733327D"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_database_server:*:*:*:*:*:*:*:*","matchCriteriaId":"117BBA08-9C1B-4CAC-A418-B044D69C27D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_firewall:*:*:*:*:*:*:*:*","matchCriteriaId":"EEBE1A76-D59D-47C1-8B12-4582FAE888DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_office_server:*:*:*:*:*:*:*:*","matchCriteriaId":"2FDDFB81-4DFE-416A-BCE1-ED96AC3E69B5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C4AD30B9-8FBA-48B3-B2B2-014C950B9BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"F7840155-DCF0-4C34-815B-71F872D31A20"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D2E2EF3C-1379-4CBE-8FF5-DACD47834651"}]}]}],"references":[{"url":"http://www.novell.com/linux/security/advisories/2004_20_kernel.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16625","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_20_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0497","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4."},{"lang":"es","value":"Vulnerabilidad desconocida en el kernel 2.x de Linux puede permitir a usuarios locales modificar el ID de grupo de ficheros, como ficheros exportados con NFS en kernel 2.4."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*","matchCriteriaId":"E4F3F3BB-E004-4FD9-9580-F2D5F3ED3701"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:10:*:*:*:*:*:*:*","matchCriteriaId":"1AB8B4DC-5A39-4349-A90A-F14018DBBDD5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"96A6EE7E-C79C-4B25-AFF0-C6638CB3C99A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C4AD30B9-8FBA-48B3-B2B2-014C950B9BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2:*:*:*:*:*:*:*","matchCriteriaId":"39B3D5AE-05A8-433C-98DD-2711423D3FA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:066","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_20_kernel.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-354.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-360.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16599","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9867","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_20_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-354.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-360.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9867","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0498","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers to cause a denial of service (crash) via crafted H.323 packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stonesoft:firewall_engine:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2.8","matchCriteriaId":"98D4A43B-0E55-491B-B6AB-DDD46A7B7E9E"}]}]}],"references":[{"url":"http://www.stonesoft.com/support/Security_Advisories/6735.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.uniras.gov.uk/niscc/docs/re-20041026-00956.pdf?lang=en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.stonesoft.com/support/Security_Advisories/6735.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.uniras.gov.uk/niscc/docs/re-20041026-00956.pdf?lang=en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-0499","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:42.503","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-0500","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call."},{"lang":"es","value":"Desbordamiento de búfer en los conectores de protocolo MSN (1) object.c y (2) slp.c en Gaim anteriores a 0.83 permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código de su elección mediante mensajes de protocolo MSNSLP que no son manejados adecuadamene por una llamada strncpy."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.10:*:*:*:*:*:*:*","matchCriteriaId":"6D1EE775-471F-4D9F-9635-41CB581168D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"5E56639E-2F96-4110-8846-0EA887D2967B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.50:*:*:*:*:*:*:*","matchCriteriaId":"A2FDCAE1-0B5D-449F-A83A-5028E7701109"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.51:*:*:*:*:*:*:*","matchCriteriaId":"F984C4C7-6431-48DD-A0E0-0DC5F6052EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.52:*:*:*:*:*:*:*","matchCriteriaId":"E955A141-DAEB-40EA-BE35-A5EED928E030"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.53:*:*:*:*:*:*:*","matchCriteriaId":"E3F02AE7-7A9C-4219-9472-9FAC8CBC637B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.54:*:*:*:*:*:*:*","matchCriteriaId":"E94CDB8A-7120-41C6-95AF-5DBAD74F3204"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.55:*:*:*:*:*:*:*","matchCriteriaId":"F4A3A068-BEBB-4E31-9CAD-4A2008CFBC91"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.56:*:*:*:*:*:*:*","matchCriteriaId":"DA529226-9252-41EE-8543-692F3119CF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.57:*:*:*:*:*:*:*","matchCriteriaId":"C6FDD0E8-D0CB-4B4C-8E4C-A4979B116CC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.58:*:*:*:*:*:*:*","matchCriteriaId":"7366C749-E27C-422C-BFE0-DCC4B4D9C8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.59:*:*:*:*:*:*:*","matchCriteriaId":"5622F4C0-43C8-44B1-A7C7-D3A7F1199FA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.59.1:*:*:*:*:*:*:*","matchCriteriaId":"2A2E8C61-B01A-482A-9B8D-0072AB6BB7DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.60:*:*:*:*:*:*:*","matchCriteriaId":"30E40E9A-950B-4D6E-A748-5F76F7B97AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.61:*:*:*:*:*:*:*","matchCriteriaId":"C4FF2E49-7561-461A-98BD-4778C6764020"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.62:*:*:*:*:*:*:*","matchCriteriaId":"4168D220-61A9-4E9F-A5A8-4832822E35EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.63:*:*:*:*:*:*:*","matchCriteriaId":"253631B3-8A0C-48DC-851A-F5A6AB490BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.64:*:*:*:*:*:*:*","matchCriteriaId":"1266BD64-E19D-4686-9E00-42CC9AF94756"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.65:*:*:*:*:*:*:*","matchCriteriaId":"C62BCA03-A187-432B-B2B3-40DE99A9986C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.66:*:*:*:*:*:*:*","matchCriteriaId":"92762951-6F9E-426D-8157-55C65A561417"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.67:*:*:*:*:*:*:*","matchCriteriaId":"00AFDEF5-5E42-4BF6-8EC6-FE7FCD4DD4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.68:*:*:*:*:*:*:*","matchCriteriaId":"7A4B3DA2-9ECB-454D-8775-9571B158007F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.69:*:*:*:*:*:*:*","matchCriteriaId":"A041E262-E36F-44C3-B83B-2E79653B74EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.70:*:*:*:*:*:*:*","matchCriteriaId":"333D0BA1-7676-417D-BB92-AAA1AAED2D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.71:*:*:*:*:*:*:*","matchCriteriaId":"BF449EC2-A6F2-405F-BEE7-0516E092E6F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.72:*:*:*:*:*:*:*","matchCriteriaId":"840C5668-D951-4A62-B555-EB3D91A08B61"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.73:*:*:*:*:*:*:*","matchCriteriaId":"BC715625-C4E7-49AC-9F3E-7306114878D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.74:*:*:*:*:*:*:*","matchCriteriaId":"C8834643-F682-4FC1-93DE-BE4754E993AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.75:*:*:*:*:*:*:*","matchCriteriaId":"42DC59A0-4BD8-42AC-B2E0-BFC32FCE7396"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"}]}]}],"references":[{"url":"http://gaim.sourceforge.net/security/?id=0","source":"cve@mitre.org"},{"url":"http://www.fedoranews.org/updates/FEDORA-2004-278.shtml","source":"cve@mitre.org"},{"url":"http://www.fedoranews.org/updates/FEDORA-2004-279.shtml","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-12.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml","source":"cve@mitre.org"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:081","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_25_gaim.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-400.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10865","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16920","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9429","source":"cve@mitre.org"},{"url":"http://gaim.sourceforge.net/security/?id=0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fedoranews.org/updates/FEDORA-2004-278.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fedoranews.org/updates/FEDORA-2004-279.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_25_gaim.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-400.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0501","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message containing a Vector Markup Language (VML) entity whose src parameter points to the remote site, which could allow remote attackers to know when a message has been read, verify valid e-mail addresses, and possibly leak other information."},{"lang":"es","value":"Outlook 2003 permite a atacantes remotos saltarse las restricciones de acceso pretendidas y hacer que Outlokk pida una URL de un sitio remoto mediante un mensaje de correo electrónico HTML conteniendo una entidad VML (Vector Markup Language) cuyo parámetro src apunta al sitio remoto, lo que podría permitir a atacantes remotos saber cuando un mensaje ha sido leído, verificar direcciones de correo electrónico válidas, y posiblemente filtrar otra información."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*","matchCriteriaId":"C3189982-F780-4AC2-9663-E6D4DF9DD319"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108430168919965&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108637351805607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=108644231209698&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10323","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16116","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108430168919965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108637351805607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=108644231209698&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16116","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0502","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the \"src\" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shell: URI."},{"lang":"es","value":"Outlook 2003, cuando se responde a un mensaje de correo electrónico, almacena ciertos ficheros en una situación predecible para la fuente de una imagen (etiqueta HTML img) del mensaje original, lo que permite a atacantes remotos saltarse restricciones de zonas y explotar otros cosas que dependen de localizaciones impredecibles, como se ha demostrado usando una URI shell:"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*","matchCriteriaId":"C3189982-F780-4AC2-9663-E6D4DF9DD319"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108420583612655&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108637351805607&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=108644231209698&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11572","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10307","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16104","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108420583612655&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108637351805607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=108644231209698&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0503","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502."},{"lang":"es","value":"Outlook 2003 permite a atacantes remotos saltarse las restricciones de zona por defecto y ejecutar script en ficheros multimedia mediante un mensaje RTF (Rich Text Format) conteniendo un objeto OLE del Reproductor de Medios de Windows, lo que sortea la configuración del Reproductor de Medios de no permitir comandos y puede llevar a la instalación sin preguntar de un ejecutable cuando se explota junto con desprotecciones de localización de fichero predecible, como CAN-2004-0502"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*","matchCriteriaId":"C3189982-F780-4AC2-9663-E6D4DF9DD319"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0885.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108483193328605&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11629","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6217","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10369","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16173","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0885.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108483193328605&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6217","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0504","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients."},{"lang":"es","value":"Ethereal 0.10.3 permite a atacantes remotos causar una denegación de servicio (caída) mediante ciertos mensajes SIP entre servidores y clientes Hostip."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"136FF83B-2B03-4E5F-95C1-84195BE8392A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11608","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11776","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11836","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200406-01.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010158","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-150.shtml","source":"cve@mitre.org"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00014.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.ethereal.com/lists/ethereal-users/200405/msg00018.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/6131","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-234.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10347","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16148","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9769","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A982","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200406-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-150.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.ethereal.com/lists/ethereal-users/200405/msg00018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/6131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-234.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A982","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0505","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown attack vectors."},{"lang":"es","value":"El diseccionador AIM en Ethereal 0.10.3 permite a atacantes remotos causar una denegación de servicio (fallo en aserción) mediante vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"136FF83B-2B03-4E5F-95C1-84195BE8392A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11608","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11776","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11836","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200406-01.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010158","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-150.shtml","source":"cve@mitre.org"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00014.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/6132","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-234.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10347","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16150","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9433","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A986","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200406-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-150.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/6132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-234.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0506","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unknown attack vectors that cause a null pointer dereference."},{"lang":"es","value":"El diseccionador de SPNEGO en Ethereal 0.9.8 a 0.10.3 permite a atacantes remotos causar una denegación de servicio (caída) mediante vectores de ataque desconocidos que causan una desreferencia de puntero nulo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"136FF83B-2B03-4E5F-95C1-84195BE8392A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11608","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11776","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11836","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200406-01.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010158","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-150.shtml","source":"cve@mitre.org"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00014.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-234.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10347","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16151","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9695","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A987","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200406-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-150.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-234.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A987","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0507","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code."},{"lang":"es","value":"Desbordamiento de búfer en el diseccionador de MSSE de Ethereal 1.10.1 a 0.10.3 permite a atacantes remotos causar una denegación de servicio y posiblemente ejecutar código de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"136FF83B-2B03-4E5F-95C1-84195BE8392A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-234.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11608","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11776","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11836","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200406-01.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010158","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-150.shtml","source":"cve@mitre.org"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00014.html","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://www.osvdb.org/6134","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10347","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16152","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11026","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A988","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-234.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200406-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-150.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://www.osvdb.org/6134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11026","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0510","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program."},{"lang":"es","value":"Múltiples desbordamientos de búfer en MMDF sobre OpenServer 5.0.6 y 5.0.7, y posiblemente otros sistemas operativos, puede permitir a atacantes ejecutar código de su elección, como se ha demostrado utilizando el programa execmail"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6a:*:*:*:*:*:*:*","matchCriteriaId":"BBC635C0-2B09-41F5-8160-365EC8642F89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D9D76A8D-832B-411E-A458-186733C66010"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.7/SCOSA-2004.7.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109889281711636&w=2","source":"cve@mitre.org"},{"url":"http://www.deprotect.com/advisories/DEPROTECT-20040206.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/10758","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16738","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.7/SCOSA-2004.7.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109889281711636&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.deprotect.com/advisories/DEPROTECT-20040206.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/10758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16738","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0511","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a null dereference."},{"lang":"es","value":"Múltiples vulnerabilidades desconocidas en MMDF sobre OpenServer 5.0.6 y 5.0.7, y posiblemente otros sistemas operativos, pueden permitir a atacantes causar una denegación de servicio disparando una desreferencia nula."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6a:*:*:*:*:*:*:*","matchCriteriaId":"BBC635C0-2B09-41F5-8160-365EC8642F89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D9D76A8D-832B-411E-A458-186733C66010"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.7/SCOSA-2004.7.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10758","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16739","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.7/SCOSA-2004.7.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16739","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0512","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a core dump."},{"lang":"es","value":"Múltiples vulnerabilidades desconocidas en MMDF sobre OpenServer 5.0.6 y 5.0.7, y posiblemente otros sistemas operativos, puede permitir a atacantes causar una denegación de servicio disparando un volcado de núcleo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6a:*:*:*:*:*:*:*","matchCriteriaId":"BBC635C0-2B09-41F5-8160-365EC8642F89"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D9D76A8D-832B-411E-A458-186733C66010"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.7/SCOSA-2004.7.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10758","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16740","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.7/SCOSA-2004.7.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10758","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16740","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0513","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to \"logging when tracing system calls.\""},{"lang":"es","value":"Vulnerabilidad no especificada en Mac OS X  versiones anteriores a 10.3.4, tiene un impacto desconocido y vectores de ataque relacionados con \"registro de sucesos cuando se siguen llamadas del sistema\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","versionEndIncluding":"10.3.4","matchCriteriaId":"55280D4B-B3EA-4346-A5D1-B44B5E3EA07F"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/May/msg00005.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10432","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/May/1010329.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16291","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/May/msg00005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/alerts/2004/May/1010329.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16291","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0514","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to \"handling of directory services lookups.\""},{"lang":"es","value":"Vulnerabilidad desconocida en LoginWindow de Mac OS X 10.3.4, relacionada con \"manejo de consultas de servicios de directorio\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"}]}]}],"references":[{"url":"http://lists.seifried.org/pipermail/security/2004-May/003743.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010330","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/174790","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10432","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16289","source":"cve@mitre.org"},{"url":"http://lists.seifried.org/pipermail/security/2004-May/003743.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/174790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16289","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0515","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to \"handling of console log files.\""},{"lang":"es","value":"Vulnerabilidad desconocida en LoginWindow de Mac OS X 10.3.4, relacionada con \"manejo de ficheros de registro de consola\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"}]}]}],"references":[{"url":"http://lists.seifried.org/pipermail/security/2004-May/003743.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010330","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10432","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16289","source":"cve@mitre.org"},{"url":"http://lists.seifried.org/pipermail/security/2004-May/003743.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16289","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0516","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Mac OS X 10.3.4, related to \"package installation scripts,\" a different vulnerability than CVE-2004-0517."},{"lang":"es","value":"Vulnerabilidad desconocida en Mac OS X 10.3.4, relacionada con \"scripts de instalación de paquetes\", una vulnerabilidad distinta de CAN-2004-0517."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"}]}]}],"references":[{"url":"http://lists.seifried.org/pipermail/security/2004-May/003743.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010331","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10432","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16290","source":"cve@mitre.org"},{"url":"http://lists.seifried.org/pipermail/security/2004-May/003743.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0517","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Mac OS X 10.3.4, related to \"handling of process IDs during package installation,\" a different vulnerability than CVE-2004-0516."},{"lang":"es","value":"Vulnerabilidad desconocida en Mac OS X 10.3.4, relacionada con \"manejo de IDs de procesos durante instalación de paquetes\", una vulnerabilidad distinta de CAN-2004-0516."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"}]}]}],"references":[{"url":"http://lists.seifried.org/pipermail/security/2004-May/003743.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010331","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10432","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16290","source":"cve@mitre.org"},{"url":"http://lists.seifried.org/pipermail/security/2004-May/003743.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0518","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to \"the use of SSH and reporting errors,\" has unknown impact and attack vectors."},{"lang":"es","value":"Vulnerabilidad desconocida en el AppleFileServer para Mac OS X 10.3.4, relacionado con \"el uso de SSH e informes de errores\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"}]}]}],"references":[{"url":"http://lists.seifried.org/pipermail/security/2004-May/003743.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010333","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16288","source":"cve@mitre.org"},{"url":"http://lists.seifried.org/pipermail/security/2004-May/003743.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16288","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0519","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php."},{"lang":"es","value":"Multiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en SquirrelMail 1.4.2 permiten a atacantes remotos ejecutar script de su elección como otro usuario y posiblemente robar información de autenticación mediante múltiples vectores de ataque, incluyendo el parámetro mailbox en compose.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5EBF40C5-6272-427C-97A1-3CE3B1D47B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A55A98B3-34ED-4A90-BB78-50CB56B1B51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CC5143ED-D4C5-4830-9C96-0B54D03679CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B765AEC-09E9-456C-8B57-09927E55D119"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0AAFC3B0-DCE3-4190-B279-E095C666FA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9291A565-0BD6-4B5E-B45F-9DE65AB8159D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6F53A84-FC66-4963-A728-7285F63D4761"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"69A941FF-423E-49C5-AE1F-FE7ED016CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B34FDB1D-881B-4343-A76E-F23B93A0469A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"052914F8-B52C-4AB4-8F85-68D788B588C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"617C554F-8E7D-4F8A-AF63-C193934C8215"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"15F11950-A2E4-4F57-BF87-57788B841A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*","matchCriteriaId":"026730B8-3919-4100-8607-C640ADBDD662"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4AD31177-05BB-4623-AED7-765DB7E44E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"20247A22-9AB9-4BCE-BF28-350B52FBC62D"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108334862800260","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-240.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11531","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11686","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11870","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12289","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-16.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-535","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2005_19_sr.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/6827","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/361857","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10246","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1733","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16025","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1006","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10274","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108334862800260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-240.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2005_19_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/6827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/361857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10274","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0520","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as demonstrated using read_body.php."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en mime.php de SquirrelMail anteriores a 1.4.3 permite a atacantes remotos insertar HTML y script de su elección mediante la cabecera de correo Content-Type, como se ha demostrado usando read_body.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:2.30:*:*:*:*:*:*:*","matchCriteriaId":"9FCF6241-3F7C-4867-8D2E-CCA1BEFCA9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:2.31:*:*:*:*:*:*:*","matchCriteriaId":"EC478ABF-19F8-4195-AA37-23668E2474EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:2.32:*:*:*:*:*:*:*","matchCriteriaId":"E3A87C77-5F6E-497D-A6A0-7D68D5E27E33"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A55A98B3-34ED-4A90-BB78-50CB56B1B51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CC5143ED-D4C5-4830-9C96-0B54D03679CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B765AEC-09E9-456C-8B57-09927E55D119"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0AAFC3B0-DCE3-4190-B279-E095C666FA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9291A565-0BD6-4B5E-B45F-9DE65AB8159D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6F53A84-FC66-4963-A728-7285F63D4761"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"69A941FF-423E-49C5-AE1F-FE7ED016CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B34FDB1D-881B-4343-A76E-F23B93A0469A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"052914F8-B52C-4AB4-8F85-68D788B588C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"617C554F-8E7D-4F8A-AF63-C193934C8215"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"15F11950-A2E4-4F57-BF87-57788B841A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*","matchCriteriaId":"026730B8-3919-4100-8607-C640ADBDD662"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4AD31177-05BB-4623-AED7-765DB7E44E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"20247A22-9AB9-4BCE-BF28-350B52FBC62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"B08E51F1-3764-4146-89C1-20B9B8EE1222"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.5_dev:*:*:*:*:*:*:*","matchCriteriaId":"49EA7F58-14C6-4860-B276-46C9FCF91B2E"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108611554415078&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=squirrelmail-cvs&m=108532891231712","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-240.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11870","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12289","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-535","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-08.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.rs-labs.com/adv/RS-Labs-Advisory-2004-1.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/6827","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10439","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1733","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1012","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10766","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108611554415078&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=squirrelmail-cvs&m=108532891231712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-240.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.rs-labs.com/adv/RS-Labs-Advisory-2004-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/6827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10766","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0521","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en SquirrelMail anteriores a 1.4.3 RC1 permite a atacantes remotos ejecutar sentencias SQL no autorizadas, con impacto desconocido, probablemente mediante abook_database.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"67E9817E-FF56-4FD0-B6C7-F4EEB25AD0CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5EBF40C5-6272-427C-97A1-3CE3B1D47B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A55A98B3-34ED-4A90-BB78-50CB56B1B51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CC5143ED-D4C5-4830-9C96-0B54D03679CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B765AEC-09E9-456C-8B57-09927E55D119"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0AAFC3B0-DCE3-4190-B279-E095C666FA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9291A565-0BD6-4B5E-B45F-9DE65AB8159D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6F53A84-FC66-4963-A728-7285F63D4761"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"69A941FF-423E-49C5-AE1F-FE7ED016CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B34FDB1D-881B-4343-A76E-F23B93A0469A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"052914F8-B52C-4AB4-8F85-68D788B588C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"617C554F-8E7D-4F8A-AF63-C193934C8215"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"15F11950-A2E4-4F57-BF87-57788B841A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*","matchCriteriaId":"026730B8-3919-4100-8607-C640ADBDD662"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4AD31177-05BB-4623-AED7-765DB7E44E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"20247A22-9AB9-4BCE-BF28-350B52FBC62D"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858","source":"cve@mitre.org"},{"url":"http://marc.info/?l=squirrelmail-cvs&m=108309375029888","source":"cve@mitre.org"},{"url":"http://marc.info/?l=squirrelmail-cvs&m=108532891231712","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-240.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11686","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11870","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12289","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200405-16.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-212.shtml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-535","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6841","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/6827","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/7148","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10397","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1733","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16235","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1033","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11446","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=squirrelmail-cvs&m=108309375029888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=squirrelmail-cvs&m=108532891231712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-240.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12289","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200405-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-212.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/6827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/7148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1733","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11446","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0522","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges."},{"lang":"es","value":"Gallery 1.4.3 y anteriores permite a atacantes remotos saltarse la autenticación y obtener privilegios de administrador de Gallery."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.4:*:*:*:*:*:*:*","matchCriteriaId":"B821AEB0-7C0C-407E-9CCB-EEB16E1A2719"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F517D6BA-9793-4A4D-BDC6-2F5349F0B354"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"E876B0F6-8363-43E0-8E00-E55B04A05F7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.4.3_pl1:*:*:*:*:*:*:*","matchCriteriaId":"4131E313-CB18-45D7-9F4C-096EB0337B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.4_pl1:*:*:*:*:*:*:*","matchCriteriaId":"3C999044-00FE-4DE1-A235-F036FC9AE09A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.4_pl2:*:*:*:*:*:*:*","matchCriteriaId":"36A59F6E-A44B-4949-8487-CB089BF1CE5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*","matchCriteriaId":"A6B060E4-B5A6-4469-828E-211C52542547"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*","matchCriteriaId":"974C3541-990C-4CD4-A05A-38FA74A84632"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*","matchCriteriaId":"6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"58792F77-B06F-4780-BA25-FE1EE6C3FDD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"C9419322-572F-4BB6-8416-C5E96541CF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*","matchCriteriaId":"BFC50555-C084-46A3-9C9F-949C5E3BB448"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*","matchCriteriaId":"9C25D6E1-D283-4CEA-B47B-60C47A5C0797"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"AD18A446-C634-417E-86AC-B19B6DDDC856"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*","matchCriteriaId":"E4BB852E-61B2-4842-989F-C6C0C901A8D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*","matchCriteriaId":"24DD9D59-E2A2-4116-A887-39E8CC2004FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*","matchCriteriaId":"F28D7457-607E-4E0C-909A-413F91CFCD82"}]}]}],"references":[{"url":"http://secunia.com/advisories/11752","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200406-10.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-512","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10451","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16301","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11752","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200406-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16301","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0523","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root."},{"lang":"es","value":"Múltiples desbordamientos de búfer en krb5_aname_to_localname en MIT Kerberos 5 (krb5) 1.3.3 y anteriores permite a atacantes remtos ejecutar código de su elección como root"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:1.0:*:*:*:*:*:*:*","matchCriteriaId":"ACC18A69-28AC-4DED-AA9D-B050709A9D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"85336612-6B0A-46B0-B2E2-FF60A4D4DD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos:1.2.2.beta1:*:*:*:*:*:*:*","matchCriteriaId":"D65D5B46-F8BD-41C4-86F2-D495F1EB4F47"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.0:*:*:*:*:*:*:*","matchCriteriaId":"08FA60A9-10E1-4ACD-819C-17801FAD7671"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E8973E93-0BBE-4BD3-9983-F6480FFEA228"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7A37987D-22F9-47AC-A07A-380F7E509BFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E47F0770-67D7-42EE-A1AD-9D5B5E83BF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2:*:*:*:*:*:*:*","matchCriteriaId":"BE8C0C82-749E-4837-88F8-FB56A753B094"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2:beta1:*:*:*:*:*:*","matchCriteriaId":"4EA5E4B3-AD02-4E87-822B-8A6C91DA65FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2:beta2:*:*:*:*:*:*","matchCriteriaId":"1A0B70C1-476D-4FAF-BA96-CB3EB32B7BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8AD672FA-918D-48CB-BC03-4E412AF0DCCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D0B363A4-BB7A-48A2-AE6B-BD2DDD46E7CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"74EF42A5-EC47-4475-81D6-FD1E9C2B8A3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"30F2CBEF-6FA1-4E07-8163-6AFEDC93FCE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D133CB0D-8A54-4DAA-9FE8-0B367544DE65"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"7B2C23BD-1995-4F09-B444-87DDDE21817E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"EEF118BE-6351-4768-A3F0-DFE0065273D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F01A83F-3BD1-4DED-979A-B4B6B23039FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3:alpha1:*:*:*:*:*:*","matchCriteriaId":"6B1422F8-CC87-46EA-8649-A12D6E47335D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F953CEBA-BAC0-48DF-A3D0-1FABCC9963E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:seam:1.0:*:*:*:*:*:*:*","matchCriteriaId":"401CA0B3-2C25-4E6A-B0A0-C5AC4E69F14A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:seam:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"111DAAB7-2309-4951-85F1-866D2D532528"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:seam:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CD6C1EDF-259A-4DE1-9E43-35671FBA9662"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinysofa:tinysofa_enterprise_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A407E66E-FC1D-45E8-81C7-126472F5E7B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:tinysofa:tinysofa_enterprise_server:1.0_u1:*:*:*:*:*:*:*","matchCriteriaId":"83A54042-FC1E-4DE9-BA3A-8839131E32BC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860","source":"cve@mitre.org"},{"url":"http://lwn.net/Articles/88206/","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108612325909496&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108619161815320&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108619250923790&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101512-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-520","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-21.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/686862","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:056","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-236.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10448","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16268","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10295","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2002","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A724","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A991","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lwn.net/Articles/88206/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108612325909496&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108619161815320&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108619250923790&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101512-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/686862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-236.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A991","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0524","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the chpasswd command in the Change_passwd plugin before 4.0, as used in SquirrelMail, allows local users to gain root privileges via a long user name."},{"lang":"es","value":"Desbordamiento de búfer en la órden chpasswd en el plugin Change_passwd anteriores a 4.0, usado en SquirrelMail, permite a usuarios locales ganar privilegios de root mediante un nombre de usuario largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:thiago_melo_de_paula:change_passwd:3.1.1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"5C33CAE8-72A0-4113-8BBB-36516F9F5508"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108222863917958&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108311782032370&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11415","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10166","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.squirrelmail.org/plugin_view.php?id=117","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15889","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108222863917958&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108311782032370&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10166","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.squirrelmail.org/plugin_view.php?id=117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15889","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0525","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Integrated Lights-Out (iLO) 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service (hang) by accessing iLO using the TCP/IP reserved port zero."},{"lang":"es","value":"HP Integrated Lights-Out (iLO) 1.10 y otras versiones anteriores a 1.55 permite a atacantes remotos causar una denegación de servicio (caída) accediendo a iLO usando el puerto reservado TCP cero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:integrated_lights-out_firmware:1.6a:*:*:*:*:*:*:*","matchCriteriaId":"0DB1F11C-1449-46A9-84E5-279ABFF4BD8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:integrated_lights-out_firmware:1.10:*:*:*:*:*:*:*","matchCriteriaId":"F3B75737-F8DF-4467-87E6-B3D7D296AF69"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:integrated_lights-out_firmware:1.15:*:*:*:*:*:*:*","matchCriteriaId":"FDE41EB1-8AAE-40F8-A7C0-703283020F0F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:integrated_lights-out_firmware:1.15a:*:*:*:*:*:*:*","matchCriteriaId":"223798D1-6965-4EBF-B731-0AADBC853752"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:integrated_lights-out_firmware:1.16a:*:*:*:*:*:*:*","matchCriteriaId":"03B3C027-295A-4E8D-AC99-89B1DBC9937E"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:integrated_lights-out_firmware:1.20a:*:*:*:*:*:*:*","matchCriteriaId":"859702BA-314B-4BC4-8CA6-1432E8831B89"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:integrated_lights-out_firmware:1.26a:*:*:*:*:*:*:*","matchCriteriaId":"58207045-31FF-4B78-832D-A47F49743529"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:integrated_lights-out_firmware:1.27a:*:*:*:*:*:*:*","matchCriteriaId":"B378215E-CBEA-4C5B-8BBE-44B8EBA09DA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:integrated_lights-out_firmware:1.40a:*:*:*:*:*:*:*","matchCriteriaId":"F5066B1C-C809-4547-9E48-4E4822E8B91E"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:integrated_lights-out_firmware:1.41a:*:*:*:*:*:*:*","matchCriteriaId":"5CCFA86E-B3F6-4E71-ABC8-75783EBC8817"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:integrated_lights-out_firmware:1.42a:*:*:*:*:*:*:*","matchCriteriaId":"FC6ED7F5-C616-4FDD-9D36-697F19A0BE25"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:integrated_lights-out_firmware:1.50:*:*:*:*:*:*:*","matchCriteriaId":"D69393F4-139D-47E3-9125-D8633B192C91"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:integrated_lights-out_firmware:1.50a:*:*:*:*:*:*:*","matchCriteriaId":"D4397221-10C5-46E8-93A5-17497C5F82DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:integrated_lights-out_firmware:1.51a:*:*:*:*:*:*:*","matchCriteriaId":"110526DD-CD4A-44FB-B7BC-7B75655AE65E"}]}]}],"references":[{"url":"http://seclists.org/lists/bugtraq/2004/May/0281.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10415","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16251","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/bugtraq/2004/May/0281.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16251","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0526","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified \"alt\" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a \"phishing\" attack."},{"lang":"es","value":"Versiones desconocidas de Internet Explorer y Outlook  permiten a atacantes remotos suplantar URL legítimas en la barra de estado mediante etiquetas A HREF con valores \"alt\" modificados que apuntan al sitio legítimo, combinado con un mapa de imagen cuyo HREF apunta al sitio malicioso, lo que facilita ataques de suplantación para robo de datos (phising)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:97:*:*:*:*:*:*:*","matchCriteriaId":"D1D5CC3A-E880-4727-AEBE-1E4FE5A43AF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:98:*:*:*:*:*:*:*","matchCriteriaId":"52970A43-173E-477B-80BF-6FDBB6B0EECD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*","matchCriteriaId":"D52F17AB-2C87-4C1A-91B5-267ABBCF5844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:sp2:*:*:*:*:*:*","matchCriteriaId":"8A343E57-CF86-4500-96D2-7172B93808BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"BBE43EAE-9397-44E4-AE3D-44CEA47699DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:sr1:*:*:*:*:*:*","matchCriteriaId":"52A5E941-25A7-405E-B330-8101D6829B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2002:*:*:*:*:*:*:*","matchCriteriaId":"3FE6EAE0-5A8F-4A97-950B-879379A3C0F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2002:sp1:*:*:*:*:*:*","matchCriteriaId":"D3A4D9C5-A698-4523-8756-5D7EBAA47951"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2002:sp2:*:*:*:*:*:*","matchCriteriaId":"D0E20E02-43B2-499B-ADDD-B5B7003894D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2002:sp3:*:*:*:*:*:*","matchCriteriaId":"ACCF73A2-FFD7-41E0-B1BF-E5B4590F51FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*","matchCriteriaId":"C3189982-F780-4AC2-9663-E6D4DF9DD319"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.0:*:*:*:*:*:*:*","matchCriteriaId":"6764F97F-6906-4953-BB1C-AA6345FA8FBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.01:sp2:*:*:*:*:*:*","matchCriteriaId":"B2FEDFE4-ADD1-4B93-ABFC-0F04E0F6572E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.27.3110:*:*:*:*:*:*:*","matchCriteriaId":"3A5A497C-D03E-4666-BFCE-632F9943DB96"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.72.2106:*:*:*:*:*:*:*","matchCriteriaId":"5D635E46-B428-498D-9C6C-7CA9EB397C96"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.72.3120.0:*:*:*:*:*:*:*","matchCriteriaId":"7769EE2E-A740-4AE8-B1B1-A5256C12601D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:4.72.3612:*:*:*:*:*:*:*","matchCriteriaId":"F6C57670-B009-4C06-BAFD-B5212750F298"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1F71D6D7-6CB2-4BE9-839A-A5714144029C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A72832FD-812D-4175-AA50-DC1DDAD5B954"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:5.5:*:*:*:*:*:*:*","matchCriteriaId":"57C8ACA2-A3C6-4435-9C0C-B316879FE1FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*","matchCriteriaId":"85FD3557-956D-4A96-8AA5-5FD9DB87FD11"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0161.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108422905510713&w=2","source":"cve@mitre.org"},{"url":"http://www.kurczaba.com/securityadvisories/0405132poc.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10308","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16102","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0161.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108422905510713&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kurczaba.com/securityadvisories/0405132poc.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0527","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified \"alt\" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a \"phishing\" attack."},{"lang":"es","value":"KDE Konqueror 2.1.1 y 2.2.2 permiten a atacantes remotos suplantar URL legítimas en la barra de estado mediante etiquetas A HREF con valores \"alt\" modificados que apuntan al sitio legítimo, combinado con un mapa de imagen cuyo HREF apunta al sitio malicioso, lo que facilita ataques de suplantación para robo de datos (phising)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"417F34FB-A6B0-4090-BDC9-6D4C1BF0D3D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D435E39F-4F70-481B-9225-B072B79BEB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8AD68BAB-8945-4A22-938E-12C01D0111D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7B3220BF-B0AF-4C90-89BD-B425EE58021D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA53FB7A-AF7F-45B2-AF23-11B1FC4EC289"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"619EB7F6-8694-4344-A4C9-A35DA58391AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7FED2DFC-592C-4FD3-B0B7-C670C78F56DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0F7BAE27-7AB1-4DBD-98AD-6109F0D9A458"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AF8A54F6-96A9-44B8-97C8-50DA7276708D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1001754B-8EDB-41A2-9D5D-6E2A2B556DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C8D57D87-3E6A-4A73-85BA-EE679E9DA8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0172B167-5780-4F80-ACC9-2FB8B60D6717"}]}]}],"references":[{"url":"http://www.osvdb.org/6579","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10383","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16102","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0528","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified \"alt\" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a \"phishing\" attack."},{"lang":"es","value":"Netscape Navigator 7.1 permite a atacantes remotos suplantar URL legítimas en la barra de estado mediante etiquetas A HREF con valores \"alt\" modificados que apuntan al sitio legítimo, combinado con un mapa de imagen cuyo HREF apunta al sitio malicioso, lo que facilita ataques de suplantación para robo de datos (phising)\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4C1BC491-9C5A-46D5-B6C3-5A8E5A1A0AF3"}]}]}],"references":[{"url":"http://www.osvdb.org/6580","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10389","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16102","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16102","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0529","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The modified suexec program in cPanel, when configured for mod_php and compiled for Apache 1.3.31 and earlier without mod_phpsuexec, allows local users to execute untrusted shared scripts and gain privileges, as demonstrated using untainted scripts such as (1) proftpdvhosts or (2) addalink.cgi, a different vulnerability than CVE-2004-0490."},{"lang":"es","value":"El programa modificado suexec de cPanel, cuando se configura para mod_php y compila para Apache 1.3.31 y anteriores sin mod_phpsuexec, permite a usuarios locales ejecutar scripts compartidos que no son de confianza y ganar privilegios, como se ha demostrado usando scripts como (1)proftpdvhosts or (2) addalink.cgi, una vulnerabiliad distinta de CAN-2004-0490."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cluecentral:suexec.patch:*:*:*:*:*:*:*:*","matchCriteriaId":"6DE2D0B5-23D7-4E6A-9353-CBD37B3DE096"}]}]}],"references":[{"url":"http://bugzilla.cpanel.net/show_bug.cgi?id=668","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108663003608211&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11798","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010411","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10478","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16347","source":"cve@mitre.org"},{"url":"http://bugzilla.cpanel.net/show_bug.cgi?id=668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108663003608211&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010411","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0530","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path, which allows local users to execute arbitrary code as the PHP user by inserting shared libraries into the appropriate path."},{"lang":"es","value":"El paquete PHP en Slackware 8.1, 9.0 y 9.1, cuando se enlaza con una librería estática, incluye /tmp en la ruta de búsqueda, lo que permite a usuarios locales ejecutar código de su elección como el usuario PHP insertando librerías compartidas en la ruta apropiada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:slackware:slackware_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"57F41B40-75E6-45C8-A5FB-8464C0B2D064"},{"vulnerable":false,"criteria":"cpe:2.3:o:slackware:slackware_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"300A6A65-05FD-401C-80F6-B5F5B1F056E0"},{"vulnerable":false,"criteria":"cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"AA3D53C9-3806-45E6-8AE9-7D41280EF64C"}]}]}],"references":[{"url":"http://secunia.com/advisories/11760","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10461","source":"cve@mitre.org"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.419765","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16310","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.419765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16310","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0533","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B12AEC6B-5077-47E6-8B54-90B712543AF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F0F131CD-671F-4A6F-AEF3-0FDC6A7E5EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E2D3BFC4-E028-41DD-BC37-C85403EDE1D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:5.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5BFC8418-5FC6-4B64-9203-F6AAEAF02CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"88324C77-F20E-4E20-AA5D-D368679647E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:webintelligence:2.7:*:*:*:*:*:*:*","matchCriteriaId":"18F930C0-1A43-4278-9F6F-DD06D96DC97E"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:webintelligence:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"254A598E-EC81-416E-AB66-BA9072B19FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:webintelligence:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"83D8F4AE-72BB-409E-A94E-611DF7FFEAB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:webintelligence:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6321B477-A1D0-47C1-AF11-F667C936D3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:webintelligence:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"92270BD8-E8C9-47F9-93B7-ACCF863D9275"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0056.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026549.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12587/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11208","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17422","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026549.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12587/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0534","sourceIdentifier":"cve@mitre.org","published":"2004-09-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:5.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B12AEC6B-5077-47E6-8B54-90B712543AF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:5.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F0F131CD-671F-4A6F-AEF3-0FDC6A7E5EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:5.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E2D3BFC4-E028-41DD-BC37-C85403EDE1D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:5.1.7:*:*:*:*:*:*:*","matchCriteriaId":"5BFC8418-5FC6-4B64-9203-F6AAEAF02CC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:infoview:5.1.8:*:*:*:*:*:*:*","matchCriteriaId":"88324C77-F20E-4E20-AA5D-D368679647E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:webintelligence:2.7:*:*:*:*:*:*:*","matchCriteriaId":"18F930C0-1A43-4278-9F6F-DD06D96DC97E"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:webintelligence:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"254A598E-EC81-416E-AB66-BA9072B19FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:webintelligence:2.7.2:*:*:*:*:*:*:*","matchCriteriaId":"83D8F4AE-72BB-409E-A94E-611DF7FFEAB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:webintelligence:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6321B477-A1D0-47C1-AF11-F667C936D3C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:webintelligence:2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"92270BD8-E8C9-47F9-93B7-ACCF863D9275"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0057.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026550.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12587/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11209","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17419","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0057.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026550.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12587/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11209","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17419","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0535","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory.  NOTE: this issue was originally incorrectly reported as a \"buffer overflow\" by some sources."},{"lang":"es","value":"El controlador e1000 del kernel de Linux 2.4.26 y anteriores no inicializa la memoria antes de usarla, lo que permite a usuarios locales leer porciones de la memoria del kernel. NOTA: Este problema ha sido originalmente descrito incorrectamente por otras fuentes como un \"desbordamiento de búfer\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*","matchCriteriaId":"E4F3F3BB-E004-4FD9-9580-F2D5F3ED3701"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_email_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A451599B-5F4F-4D7F-B5EF-3AE9F9B89D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_email_server:iii:*:*:*:*:*:*:*","matchCriteriaId":"BD74DAB4-A68E-4748-BC43-2285FC9804D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_admin-cd_for_firewall:*:*:*:*:*:*:*:*","matchCriteriaId":"52E04F16-A0C7-4B0C-A70E-2CA683E0C33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_connectivity_server:*:*:*:*:*:*:*:*","matchCriteriaId":"941DFF67-E9F6-41F0-A5CB-90105733327D"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_database_server:*:*:*:*:*:*:*:*","matchCriteriaId":"117BBA08-9C1B-4CAC-A418-B044D69C27D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_firewall_cd:*:*:*:*:*:*:*:*","matchCriteriaId":"52F8C98F-E10C-4FE8-96E7-27426F369E78"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_firewall_live-cd:*:*:*:*:*:*:*:*","matchCriteriaId":"D3D7140F-589F-44DC-84ED-93FE6989F821"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_office_server:*:*:*:*:*:*:*:*","matchCriteriaId":"2FDDFB81-4DFE-416A-BCE1-ED96AC3E69B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_office_server:*:*:*:*:*:*:*:*","matchCriteriaId":"18BAE686-972A-4756-9E5D-CF2830700891"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"CD14661C-E3BE-44DF-BC8D-294322BF23EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F4007B0D-9606-46BD-866A-7911BEA292BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:engardelinux:secure_community:2.0:*:*:*:*:*:*:*","matchCriteriaId":"835156D0-D0D8-4A82-9342-95E7239E3477"},{"vulnerable":true,"criteria":"cpe:2.3:o:engardelinux:secure_linux:1.5:*:professional:*:*:*:*:*","matchCriteriaId":"4E62C413-935F-459C-8F11-73F5B483E759"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*","matchCriteriaId":"C5FE15BF-91C7-452A-BE1B-7EC9632421C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C4AD30B9-8FBA-48B3-B2B2-014C950B9BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:ppc:*:*:*:*:*","matchCriteriaId":"279317B9-AF2F-43E9-BEE5-518FC6D23A87"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"052E3862-BFB7-42E7-889D-8590AFA8EF37"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"F7840155-DCF0-4C34-815B-71F872D31A20"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D2E2EF3C-1379-4CBE-8FF5-DACD47834651"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*","matchCriteriaId":"37F124FE-15F1-49D7-9E03-8E036CE1A20C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=125168","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845","source":"cve@mitre.org"},{"url":"http://lwn.net/Articles/91155/","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/testing/patch-2.4.27.log","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:062","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_20_kernel.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-413.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-418.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10352","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16159","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11136","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=125168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lwn.net/Articles/91155/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.4/testing/patch-2.4.27.log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_20_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-413.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-418.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11136","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0536","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report."},{"lang":"es","value":"Vulnerabildad de cadena de formato en Tripwire commercial 4.0.1 y anteriores, incluyendo 2.4, y open source 2.3.1 y anteriores permite a usuarios locales ganar privilegios mediante especificadores de cadena de formato en el nombre del ficheros, que es usado para la generación de un informe de correo electrónico."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tripwire:tripwire:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"FF3F4FED-7015-4797-9EBF-694B9EA9CE75"},{"vulnerable":true,"criteria":"cpe:2.3:a:tripwire:tripwire:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"AD06AF56-3FB0-4005-AAA7-445C4D6C28B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:tripwire:tripwire:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"EC8EFFBB-90F1-40C3-BB31-7EFA125CBC1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:tripwire:tripwire:2.3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2B0E835C-5559-4C25-87DA-7A66ABF65069"},{"vulnerable":true,"criteria":"cpe:2.3:a:tripwire:tripwire:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"EBD1A5C4-5401-4B13-81AD-A8E6E3E8A1B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tripwire:tripwire:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CC166ADE-A5C1-47D7-AF26-1B8A10D84DC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tripwire:tripwire:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DEEE4CC8-F0D8-4847-8A3D-23B5F77CA30E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tripwire:tripwire:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F34BD4EA-1753-4C8A-8E82-88CD3D78C235"},{"vulnerable":true,"criteria":"cpe:2.3:a:tripwire:tripwire:4.0:*:*:*:*:*:*:*","matchCriteriaId":"B35B7452-DA7F-4163-B0E7-3709696078E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tripwire:tripwire:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7206607C-BEA0-430D-854C-3E1644F2FD2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tripwire:tripwire:4.1:*:*:*:*:*:*:*","matchCriteriaId":"00BD7075-528F-448B-A648-EFB8B32825C9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108627481507249&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108630983009228&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200406-02.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-244.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10454","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16309","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108627481507249&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108630983009228&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200406-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-244.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10454","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16309","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0537","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 7.50 and earlier allows remote web sites to provide a \"Shortcut Icon\" (favicon) that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces."},{"lang":"es","value":"Opera 7.50 y anteriores permite a sitios web remotos suministrar un \"Icono de acceso directo\" (favicon) que es más ancho de lo esperado, lo que podría permitir a los sitios web suplantar un dominio de confianza y facilitar ataques de phising usando un icono ancho y espacios extra."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"7.50","matchCriteriaId":"377A5790-CADB-4081-BD32-669D3318FF18"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022263.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108627581717738&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://osvdb.org/6590","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/11762","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://security.greymagic.com/security/advisories/gm007-op/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.opera.com/linux/changelogs/751/index.dml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10452","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16307","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022263.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108627581717738&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://osvdb.org/6590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/11762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://security.greymagic.com/security/advisories/gm007-op/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.opera.com/linux/changelogs/751/index.dml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0538","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LaunchServices in Mac OS X 10.3.4 and 10.2.8 automatically registers and executes new applications, which could allow attackers to execute arbitrary code without warning the user."},{"lang":"es","value":"LaunchServices en Mac OS X 10.3.4 y 10.2.8 registra automáticamente y ejecuta aplicaciones nuevas, lo que podría permitir a atacantes ejecutar código arbitrario sin avisar al usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=25785","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=25785","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0539","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"Show in Finder\" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications, which could allow remote attackers to execute arbitrary code."},{"lang":"es","value":"El botón \"Show in Finder\" en el navegador web Safari de Mac OS X 10.3.4 y 10.2.8 puede ejecutar aplicaciones descargadas, lo que pódría permitir a atacantes remotos ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=25785","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/773190","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://docs.info.apple.com/article.html?artnum=25785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/773190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2004-0540","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain."},{"lang":"es","value":"Microsoft Windows 2000, cuando corre en un dominio cuyo nombre de dominio completamente cualificado (FQDN) tiene exáctamente 8 caractéres de largo, no impide que usuarios cuya contraseña ha expirado inicien sesión en el dominio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://secunia.com/advisories/11746/","source":"cve@mitre.org"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B830847","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11746/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B830847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0541","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password (\"pass\" variable)."},{"lang":"es","value":"Desbordamiento de búfer en la función ntlm_check_auth (autenticación NTLM) de Squid Web Proxy Cache 2.5.x y 3.x, cuando se compila con manejadores NTLM activados, permite a atacantes remotos ejecutar código de su elección mediante una contraseña larga (variable \"pass\")"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable:*:*:*:*:*:*:*","matchCriteriaId":"947FB840-2228-452A-A5EC-6333403E8408"},{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:3_pre:*:*:*:*:*:*:*","matchCriteriaId":"5279F71C-688C-41C5-8A32-5F1502072873"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"cve@mitre.org"},{"url":"http://fedoranews.org/updates/FEDORA--.shtml","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-13.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=107&type=vulnerabilities","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:059","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-242.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10500","source":"cve@mitre.org"},{"url":"http://www.trustix.net/errata/2004/0033/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16360","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10722","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A980","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://fedoranews.org/updates/FEDORA--.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=107&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:059","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-242.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.net/errata/2004/0033/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0542","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and access internal environment variables via (1) the \"%\", \"|\", or \">\" characters to the escapeshellcmd function, or (2) the \"%\" character to the escapeshellarg function."},{"lang":"es","value":"PHP anteriores a 4.3.7 en plataformas Win32 no filtra adecuadamente todos los metacaractéres de shell, lo que permite a atacantes locales o remotos ejecutar código de su elección, sobreescribir ficheros, y acceder a variables de entorno internas mediante (1) caractéres \"%\", \"|\", or \">\" en la función escapeshelcmd, o (2) el carácter \"%\" en la función escapeshellarg"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndExcluding":"4.3.7","matchCriteriaId":"92691A0B-D8C5-44C9-961D-CEBFA9508EE0"}]}]}],"references":[{"url":"http://www.idefense.com/application/poi/display?id=108","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.php.net/release_4_3_7.php","source":"cve@mitre.org","tags":["Patch","Release Notes","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16331","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.idefense.com/application/poi/display?id=108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.php.net/release_4_3_7.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Release Notes","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0543","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección de SQL en Oracle Applications 11.0 y Oracle E-Business Suite 11.5.1 a 11.5.8 permite a atacantes remotos ejecutar procedimientos y consultas SQL de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:applications:11.0:*:*:*:*:*:*:*","matchCriteriaId":"6A1457AD-2BB0-46BE-850C-6B5D9A12FE58"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A9E237E5-9E1A-4F20-9A3D-E3418E3B1329"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F57A5AE0-90B5-410E-8878-BD514C3B7946"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EA7EAC35-E890-444A-B070-C91382F2E242"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*","matchCriteriaId":"69568B66-122B-4946-B630-2960DAA1885E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*","matchCriteriaId":"6C3E4A5C-8D0F-4105-8618-26586BEDE84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*","matchCriteriaId":"D07FEA4F-B1C7-4250-81FD-AC1289769348"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11i:*:*:*:*:*:*:*","matchCriteriaId":"9835D257-9664-4FBC-889D-C3465BC2D7D3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0032.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108638417302229&w=2","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/2004alert67.pdf","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-153.shtml","source":"cve@mitre.org"},{"url":"http://www.integrigy.com/alerts/OraAppsSQLInjection.htm","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/961579","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10465","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-160A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16324","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108638417302229&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://otn.oracle.com/deploy/security/pdf/2004alert67.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-153.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.integrigy.com/alerts/OraAppsSQLInjection.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/961579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-160A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16324","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0544","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands."},{"lang":"es","value":"Múltiples desbordamientos de búfer en LVM de AIX 5.1 y 5.2 permite a usuarios locales ganar privilegios mediante comandos (1)putlvcb o (2) getlvcb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"}]}]}],"references":[{"url":"http://secunia.com/advisories/11158/","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0544.2","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IY55681","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IY55682","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-131.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4392","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4393","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9905","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9906","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15555","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18317","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11158/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0544.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IY55681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IY55682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-131.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0545","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack."},{"lang":"es","value":"LVM de AIX 5.1 Y 5.2 permite a usuarios locales sobreescribir ficheros de su elección mediante un ataque de enlaces simbólicos (symlink attack)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"}]}]}],"references":[{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0544.2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-131.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10230","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16011","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0544.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-131.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0547","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ODBC driver for PostgreSQL before 7.2.1 allows remote attackers to cause a denial of service (crash)."},{"lang":"es","value":"Desbordamiento de búfer en el contolador ODBC de PostgreSQL, en versiones anteriores a 7.2.1 permite a atacantes remotos causar una denegación de servicio (caída)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postgresql:postgresql:7.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AFF09CFB-F7CE-4659-BB20-83231539F765"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-516","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:072","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16329","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0548","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the (1) \"c\" compress option or (2) \"d\" decompress option."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en la funcionalidad word-list-compress en compress.c de Aspell permite a usuarios locales ejecutar código arbitrario mediante una entrada larga en la lista de palabras que no se maneja adecuadamente cuando se utiliza la opción de compresión \"\"c\"\" o la opción de descompresión \"\"d\"\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:aspell:0.50.5:*:*:*:*:*:*:*","matchCriteriaId":"7FFBAF6E-E1CD-470C-A3DC-63719809017B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108675120224531&w=2","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-14.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10497","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108675120224531&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0549","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript, as demonstrated using (1) delayed HTTP redirect operations, and an HTTP response with a Location: header containing a \"URL:\" prepended to a \"ms-its\" protocol URI, or (2) modifying the location attribute of the window, as exploited by the Download.ject (aka Scob aka Toofer) using the ADODB.Stream object."},{"lang":"es","value":"El control ActiveX WebBrowser, o el motor de render HTML de Internet Explorer (MSHTML), usado en Internet Explorer 6, permite a atacantes remotos ejecutar código arbitrario en el contexto de seguridad local usando el método showModalDialog y modificando la localizacion para ejecutar código como JavaScript, como demostró usando\r\n(1) redirecciones HTTP diferidas, y una respuesta HTTP con una cabecera \"Location:\" conteniendo un \"URL:\" añadida al principio de una URI \"ms-its\", o \r\n(2) modificando el atributo de localización de la ventana, explotado por el gusano Ject / Scob / Toofer, usando el objeto ADODB.Stream"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://62.131.86.111/analysis.htm","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0031.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0104.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108786396622284&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108852642021426&w=2","source":"cve@mitre.org"},{"url":"http://umbrella.name/originalvuln/msie/InsiderPrototype/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/713878","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-163A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-184A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-212A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16348","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1133","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A207","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A241","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A519","source":"cve@mitre.org"},{"url":"http://62.131.86.111/analysis.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0104.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108786396622284&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108852642021426&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://umbrella.name/originalvuln/msie/InsiderPrototype/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/713878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-163A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-184A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-212A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16348","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A241","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A519","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0550","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of \".\" (period) characters."},{"lang":"es","value":"Desbordamiento de búfer en Real Networks RealPlayer 10 permite a atacantes remotos ejecutar código de su elección mediante una URL con un número grande de caractéres \".\" (punto)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*","matchCriteriaId":"CD49D16C-B0AC-4228-9984-010661596232"}]}]}],"references":[{"url":"http://www.idefense.com/application/poi/display?id=109&type=vulnerabilities&flashstatus=false","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16388","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=109&type=vulnerabilities&flashstatus=false","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16388","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0551","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid packets instead of the final ACK portion of the three-way handshake to the (1) Telnet, (2) HTTP, or (3) SSH services, aka \"TCP-ACK DoS attack.\""},{"lang":"es","value":"Cisco CatOS anteriores a 5.5(20) a 8.x anteriores a 8.2(2) y 8.3(3) GLX, usados en conmutadores Catalyst, permiten a atacantes remotos causar una denegación de servicio (caída del sistema y reinicio) enviando paquétes no válidos en lugar de la porción final ACK del apretón de manos (handshake) en tres pasos a los servicios \r\n(1) Telnet, (2) HTTP, o (3) SSH. También conocida como  aka \"ataque de DoS TCP-ACK \"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"185CC3F3-624B-4372-80EC-D8B4BC00384A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"AF9A337F-7318-4163-9B6F-9ED7783CF94C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"A66B1FC1-F9EA-403D-A63C-E1D7AC108346"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"32B13D84-10A7-44C5-B771-B9F237954B2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.1\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"EDA1D807-2C93-4C94-9CA2-D4875FB0DFA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.1\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"381D0006-EE25-4B36-B9E4-65C41E7EFBAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.1\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"B68ECE9E-6657-46E4-B427-C321289CF78B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.1\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"D9658139-AC5C-4D4C-B8E2-055DD70EDFF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.1\\(9\\):*:*:*:*:*:*:*","matchCriteriaId":"434383D6-7DE3-4A3E-8B9E-4F7F79A66807"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.1\\(10\\):*:*:*:*:*:*:*","matchCriteriaId":"E40FC4F6-200D-4150-9353-CA0CD1FF8F92"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.1\\(11\\):*:*:*:*:*:*:*","matchCriteriaId":"D48351F4-51C7-4BE7-B91A-3E2FAD5A2C85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.1\\(12\\):*:*:*:*:*:*:*","matchCriteriaId":"5D12B329-490F-4084-8C12-3EE1394EE6E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"8499827B-94C6-4259-BA90-8A5331AF0CD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"36C122D0-D434-4AD4-BD57-E236BA89B85E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"E02B8D53-4193-4163-BF22-5534CC73ABB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"1884794C-360E-4C03-ABAC-EA0007F44ED5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.4\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"F84BC6D0-B18F-4A6F-AF51-6FA4CC83DE88"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.4\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"CA89EF90-0DAA-4D5E-9881-6C3A000A2ACD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.4\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"E1ED7AAA-6978-4438-B896-F6182882CEC4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.4\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"D5049D68-0729-40CF-827F-E3F59EE9214A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:2.4\\(5a\\):*:*:*:*:*:*:*","matchCriteriaId":"D93FEAFC-0D2E-46A9-BFD9-5C636D8AC61C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:3.0\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"B604D3F1-98B9-487E-8E45-5BAC514689F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:3.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"DC7B86FA-85A8-44D2-A12C-85312B765A6B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:3.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"36962C89-B7F7-4C47-B9FF-5E23FDBCBB51"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:3.1\\(2a\\):*:*:*:*:*:*:*","matchCriteriaId":"AC554CE9-63AA-4BC9-86F8-F3D5968733CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:3.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"0077517D-E7E3-4A41-87C7-4DECECC44196"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:3.2\\(1b\\):*:*:*:*:*:*:*","matchCriteriaId":"B44D6DEB-84F8-4DA7-82BE-E5839BA5799C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:3.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"6E28F17F-12BF-48E3-B552-868F8A36B44A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:3.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"56124CD6-9802-4663-AB37-D986CB8023C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:3.2\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"D7161615-2958-4F0A-907D-4A300D0C00C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:3.2\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"C1104B88-1AA1-4164-B12D-970A6D0F531B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:3.2\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"6B5B3D72-7248-4518-8E3A-463AF552493E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:3.2\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"24F6CF22-D4B8-4857-99F8-7D1329CA33D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:3.2\\(8\\)gdr:*:*:*:*:*:*:*","matchCriteriaId":"DE024D9D-6B5B-4F50-84A3-1C2DACD924EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"92FFF1BF-4252-4183-BF0A-64074379AF09"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"CE4395AE-BAD2-4498-9A16-525CA4944001"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"09735A07-0FDD-4235-BCA6-377D5882F114"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"EE58DBF3-2ECB-4B8E-A08A-D76C3ECC09D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"8500DBD9-61EC-4C9B-8F1E-ED10CBD2F804"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.3\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"157FBE0B-F0BD-4E94-9C3D-349DD65F8310"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"44EAC49D-3B1F-4264-A1FE-37D55525122D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"E3AB1738-A733-4227-B389-650FD7559D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"851920E3-2DF8-4C74-84E0-E3950D2EA672"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"BFAF3474-E030-4AF5-8BE0-966191D15E16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"C8EF024C-80B1-4332-ADDC-992C5F933562"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"2DFA6741-74AF-42E0-9A8A-D775BA9EA519"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"6323C88E-C966-42FC-957F-EC244744A5D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(6a\\):*:*:*:*:*:*:*","matchCriteriaId":"21C26AFA-1147-4888-AB70-E751349A29DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"C33774F9-D0E0-4BB7-AE78-9B746C5FA972"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"DD0EFEE7-3EA4-4639-8B53-F7192E7C18E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(9\\):*:*:*:*:*:*:*","matchCriteriaId":"1A980A98-77C0-44F6-98C6-7CC4FEEC799C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(10\\):*:*:*:*:*:*:*","matchCriteriaId":"AD63DBE5-2149-46FF-B272-2E5A3C382548"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(11\\):*:*:*:*:*:*:*","matchCriteriaId":"04E2E594-8B82-476B-96A6-C713FE1FA06D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(12\\):*:*:*:*:*:*:*","matchCriteriaId":"D7837C26-C795-4FAC-A11B-149C41B34A26"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(12a\\):*:*:*:*:*:*:*","matchCriteriaId":"699AF98D-F7F6-4FDE-9CEB-F63E5BCD8EDF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(13\\):*:*:*:*:*:*:*","matchCriteriaId":"73A63535-F3C1-42C8-98EA-355F08AA66F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(13a\\):*:*:*:*:*:*:*","matchCriteriaId":"E8FB48FD-5678-4BAD-8467-3C703E4950DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(14\\):*:*:*:*:*:*:*","matchCriteriaId":"5404C55E-F7F4-4C83-87BE-02B93F76DC4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"8D8B8722-42A0-4CA6-8946-0D97BBABB30A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.1\\(1\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"6B5397DA-73CF-412B-A797-E6DEEC395FEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"587031FB-E0AF-4BD0-8809-8690D3814F3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.1\\(1a\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"8B53B40D-E949-4811-A483-207F69BB35D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.1\\(2a\\):*:*:*:*:*:*:*","matchCriteriaId":"CE163E0F-3F54-45B2-A101-6CA6FA548D2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.1\\(2b\\):*:*:*:*:*:*:*","matchCriteriaId":"6C4E5CD6-16CE-41B0-9203-88F10A43247E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"9D31AB89-4194-4CE5-AD93-3058E77E7E63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(1\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"C6955CCC-F43D-44D4-8714-0FA766C10C6F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"28CB60F6-622C-41D7-AFA4-A2DCE4D02549"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(2\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"23C82260-D8F9-48DE-AF84-B9B65BB9E277"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"2055E432-9939-48F7-A4BE-1888CC7241C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(3\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"E08E971E-5FF1-48F7-8A68-FB1BB80908BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(3a\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"EBA3BD8A-FB4A-47C6-B7AB-802393DCA19C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"E8F15DB3-6BC3-4F15-A164-3D1F2FBA718D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"63E4BD89-21FE-492B-85C3-9BEBDB01F8CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"CE27E478-63BF-4475-B89A-91CF2D9A6C49"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"5754B0FA-30C6-4E12-9D6C-92F38CD3A9CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(7a\\):*:*:*:*:*:*:*","matchCriteriaId":"A9D16366-422C-4291-A0F1-050AD80E8A7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(1a\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"C0AC3C74-262E-4A11-BCE8-58DE522E23AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(2\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"21A2D344-D0AD-4E0A-A5F3-C4323813FDD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(3\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"46DC4972-7FA1-4320-83E6-607D139121EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(4\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"339DDB07-6C16-43B9-A880-77E2351B1C05"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(5\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"EBCB451E-8945-408C-94F5-36C43AA05C1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(5a\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"A7D8D9AA-154C-46B2-96B8-AADA610056E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(6\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"E7F30211-BB7A-41D3-946F-655C028A3772"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(6a\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"DF8D3189-2552-43B0-89E7-DFDB4A152A56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"01AE0EAB-F266-437A-B615-69536AF50B49"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F1D952CE-9CDE-442D-8544-4614DBE5AC12"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(1\\)deferred:*:*:*:*:*:*:*","matchCriteriaId":"528940FF-E621-43B8-B562-D9B51231E1FE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"EE529454-F5E6-4417-A5D7-B1A9BCD2B5C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(2a\\):*:*:*:*:*:*:*","matchCriteriaId":"FA107149-E36F-4D9E-A0C5-8BAA661F18C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"85D0F005-80B3-41A2-8B7C-EA256C1634DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"FD50773D-8E63-45C7-A52D-D7B13F65327F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(4a\\):*:*:*:*:*:*:*","matchCriteriaId":"8EB2FF0C-B5F1-4FDF-B57B-7A7114E09DFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"9E8A2EE7-8C86-44F0-899C-FD98E08C6E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B70FD634-E2D7-4E42-B140-44C5CB9294E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"F7146FDF-3644-469D-8AA1-6AD19BFB5A06"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"364CCF12-AF9E-4661-9ECB-9AE0C00813D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"282793F1-296C-423A-9A2D-301DC3340664"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"020B669B-DE6B-4828-BB44-D99EE576B79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(4a\\):*:*:*:*:*:*:*","matchCriteriaId":"4D406F1D-C33D-4BC2-BBA8-740A9E114523"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(4b\\):*:*:*:*:*:*:*","matchCriteriaId":"C762F4B3-4F3D-4EE8-A914-1900AE4AA1C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"9627888A-F522-4A41-8B14-F0E7096509FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"B4C5BA8E-2A45-4952-AEE4-94CBE8B4B855"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(6a\\):*:*:*:*:*:*:*","matchCriteriaId":"6443D518-066C-46E4-90EA-94BF860741A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"6EEA4461-2225-4D64-9CF9-68039C8E85C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(7a\\):*:*:*:*:*:*:*","matchCriteriaId":"DB127898-E068-4696-A72D-5EDE1730E320"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"1255E56C-2DEB-4B86-97A7-7CF6316A2C21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(8a\\):*:*:*:*:*:*:*","matchCriteriaId":"2BBFE844-7084-4F81-BC5B-42FED826AD12"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(8a\\)cv:*:*:*:*:*:*:*","matchCriteriaId":"61FC0A1A-4A1F-4B38-86BA-3DADDB1D6BAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(9\\):*:*:*:*:*:*:*","matchCriteriaId":"753AC7F2-83B7-4288-926B-73774A126D1D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(10\\):*:*:*:*:*:*:*","matchCriteriaId":"DB1C6B11-4AE9-459B-870A-4845DA43ADC8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(10a\\):*:*:*:*:*:*:*","matchCriteriaId":"45C18C9D-89F3-43BD-A3A8-EA8EF5BC6E8E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(11\\):*:*:*:*:*:*:*","matchCriteriaId":"3F11B940-0EA7-4ABE-AA08-29646083E077"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(11a\\):*:*:*:*:*:*:*","matchCriteriaId":"ABEF59A8-3DAD-4DAE-80BF-9AED862B734D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(12\\):*:*:*:*:*:*:*","matchCriteriaId":"46B1EA66-327F-4FB9-A316-2C29B52AA33A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(12a\\):*:*:*:*:*:*:*","matchCriteriaId":"F854B7F7-9EDE-4452-85DC-01686BC58D21"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(13\\):*:*:*:*:*:*:*","matchCriteriaId":"7860ADDE-7861-41A6-9DA9-2355FEEC4B60"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(13.5\\):*:*:*:*:*:*:*","matchCriteriaId":"717511D5-C05C-4D78-A76D-62E196E1FA1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(13a\\):*:*:*:*:*:*:*","matchCriteriaId":"BF90D0A9-302D-4C66-B145-1EAC5EEBFC3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(14\\):*:*:*:*:*:*:*","matchCriteriaId":"9AD4C82A-CDB7-403E-A6B8-7AFF28D2B341"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(15\\):*:*:*:*:*:*:*","matchCriteriaId":"014BA0A4-F21F-4226-A3F9-50C95C2D1B76"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(16\\):*:*:*:*:*:*:*","matchCriteriaId":"9524A795-3462-4D7B-AEA2-318EE40743E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(16.2\\):*:*:*:*:*:*:*","matchCriteriaId":"1DDD57B8-9123-4F59-8449-F7E404C2E081"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(17\\):*:*:*:*:*:*:*","matchCriteriaId":"9AB54D04-F672-4009-B9D5-FA111D16996C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(18\\):*:*:*:*:*:*:*","matchCriteriaId":"5EDA2CA5-0DC9-4B33-B3FD-67867D6360DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(19\\):*:*:*:*:*:*:*","matchCriteriaId":"926FC1F1-C2D1-439C-9A43-B38399A1C363"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1:*:*:*:*:*:*:*","matchCriteriaId":"06F049B3-FBE6-4951-896E-B8AE2D7BFBAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"33A4D6E9-ADCB-4338-8CA9-A2F374F7CE38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"FAF08F95-9CF4-4AF6-BB08-021694C7AB40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(1b\\):*:*:*:*:*:*:*","matchCriteriaId":"8C9BCB53-72AA-426F-9D18-544038B65128"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(1c\\):*:*:*:*:*:*:*","matchCriteriaId":"C95B56F4-CDD1-4102-BB33-C66D3CDAC6C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(1d\\):*:*:*:*:*:*:*","matchCriteriaId":"9CDFB025-A93A-441C-84B6-EBB0902A5559"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(1e\\):*:*:*:*:*:*:*","matchCriteriaId":"C0F9CA24-9D6E-4408-AB1B-55DA4D63F871"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"AA37670F-3FF4-476E-AA4A-7F98229C6EB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(2a\\):*:*:*:*:*:*:*","matchCriteriaId":"CB27CF6D-0CCC-43C6-A19D-8BB5EC63AFBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"52009F7A-2CD1-49BA-B9A6-C88766DC4D6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(3a\\):*:*:*:*:*:*:*","matchCriteriaId":"B12A4460-1B54-45D6-BE01-28BD52E1DC45"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"E88E2AD3-68B4-4473-8393-8E792F2539D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(4b\\):*:*:*:*:*:*:*","matchCriteriaId":"9160267C-8FDB-41BB-96C0-2EAEB75BA102"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"DB7870CC-BAB2-4BC7-A35B-6629BD325D0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.2\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"7A98413C-3659-4959-B4C6-7787D0D15878"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"9626715B-2878-41CF-9CCF-84553230EB55"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.2\\(2a\\):*:*:*:*:*:*:*","matchCriteriaId":"7512F24B-D150-4A31-807A-37B6DCAEAE4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"1345465E-2B83-40FE-BC6B-536E0A2260D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.2\\(3a\\):*:*:*:*:*:*:*","matchCriteriaId":"8D5183C6-CBD7-4FA0-A6FA-8B35E87E59BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"A614780A-D5B8-4368-9255-770C52EF1A2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"1C3669F2-4892-4936-8A7E-59D640CEBEA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"30ADFF58-A65F-42F6-97BD-17E491302AA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(2a\\):*:*:*:*:*:*:*","matchCriteriaId":"B243E03B-3A82-40D5-8B47-AED222CF45DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"C5E7DF31-2345-4139-BE3D-94128E14F84E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(3\\)x:*:*:*:*:*:*:*","matchCriteriaId":"B60504C4-09F6-4D5C-AF5E-58446C6FA49B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(3\\)x1:*:*:*:*:*:*:*","matchCriteriaId":"34A4E69C-5E3B-4014-9382-E1FA72C31C8A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(3a\\):*:*:*:*:*:*:*","matchCriteriaId":"5EEF50D9-DE68-4FD0-94F8-45EF319A0332"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"3B791566-5B22-452D-ACDA-A1085700AE2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(4a\\):*:*:*:*:*:*:*","matchCriteriaId":"B1A05FF1-D9AF-4752-9E4A-496DAF78D4B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"FD776AC3-A10E-4B4C-BCB9-1DB1781DDA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(5.10\\):*:*:*:*:*:*:*","matchCriteriaId":"CBD37D98-2F73-4CC8-9FB3-5FCC7AA4EB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"F5F64FB9-F6E5-4A96-89FA-23E0531E7FA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"85342953-6AC3-42C3-B5BD-849FD40675F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"03C856BF-4112-454F-BBE3-AFC195F0BAF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(8.3\\):*:*:*:*:*:*:*","matchCriteriaId":"4855D79B-7AC5-4E61-A9B1-1A770C1F21B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(9\\):*:*:*:*:*:*:*","matchCriteriaId":"C68C6298-F045-4573-ACCD-1A82E09D72E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(10\\):*:*:*:*:*:*:*","matchCriteriaId":"EFE2BF70-A2B4-44A8-820E-4B95D458307F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"980DC7C0-0200-4C4B-8D14-09EB151B09B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.4\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"432A925A-1922-4562-841B-65180917D22D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.4\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"E444F7F2-5526-45C0-AD38-E8A41023B376"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.4\\(4a\\):*:*:*:*:*:*:*","matchCriteriaId":"AA3EEAE6-9EDF-4783-A083-D6C81CFF510A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.4\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"B3EE2A06-BA13-4F28-A00B-057DDA2B2CEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.4\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"0CE99942-0989-47F9-B5AD-FBF4CE4216B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.4\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"D798B64D-FE4A-4129-8D5A-7C123F5DFC9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.4\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"30F7A129-D4EA-4F66-B6A4-147AAB3E624C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"DE867B59-439F-4620-A785-E16F2C6DBC6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"DEF0CFFD-7889-4B33-AFCD-E3EA978214D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"8F47A997-B2A5-459D-8089-12B2AB438FB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.1\\(2a\\):*:*:*:*:*:*:*","matchCriteriaId":"B7EF7E63-17F6-4D92-AAB0-205BC44940DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.2\\(0.65\\):*:*:*:*:*:*:*","matchCriteriaId":"94D3F3AF-C844-4445-88E8-9608653B83C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"6A64DE87-64E6-4A2C-A932-D5ADBAE9A09E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"FF76E1E2-3EE9-4560-B138-06347ECA3B4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.3:*:*:*:*:*:*:*","matchCriteriaId":"CC67FF4D-ED26-44B7-8AB9-26F0BB2946BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"EE322AC8-E45F-4C43-BD6A-2FA883AD33C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.3\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"0462C72E-7110-48FC-BC88-FF8A5663C6B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.4:*:*:*:*:*:*:*","matchCriteriaId":"4A7B5E1E-5698-4F69-AB53-C9F6339758C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.4\\(0.2\\)clr:*:*:*:*:*:*:*","matchCriteriaId":"F494A6B7-75D4-4A04-889E-7269098AF23D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.4\\(0.63\\):*:*:*:*:*:*:*","matchCriteriaId":"E79A55B3-65CD-40D7-9215-BC924C519512"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"BBEB96B9-6F4C-4C5D-BF6F-BE65C3A96C9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.4\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"7D45D090-EFAA-4D2F-BE05-1726E05B12C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.4\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"43A64E8E-A8ED-414F-BC61-846AD5D582B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.5:*:*:*:*:*:*:*","matchCriteriaId":"A01B4160-AC81-4C2D-B34A-C46EC2C610E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"567897E0-416B-47D8-ABAF-412DA5FF9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.6:*:*:*:*:*:*:*","matchCriteriaId":"D726FE1E-26C9-41F2-AF59-8F8248449DE1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.6\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C6E0B307-56E1-4E0E-A68E-5D95CBC91A8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.6\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"E6DED72B-DBB7-4E51-AD6D-75EE407A3817"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.6\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"BE121926-3978-4220-AC94-30A3E4BC2BFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.6\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"760418C3-E160-4468-A47A-7632245EDD84"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.6\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"28CA144F-341E-4F88-8D67-103F8619B742"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:8.1:*:*:*:*:*:*:*","matchCriteriaId":"3CCED76E-89CA-46E3-A285-2FB907780A66"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:8.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"8AFA7E37-DB5D-4E4C-B48E-37DF120D5DE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:8.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"786657C5-9EA5-45D0-B2F8-01AB599F4954"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:8.2:*:*:*:*:*:*:*","matchCriteriaId":"75165FB6-B193-4DC9-A2FF-20F553111A1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:8.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"5EAA2D25-6F7C-4EAD-B2BC-B17B21C62A6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:8.3\\(1\\)glx:*:*:*:*:*:*:*","matchCriteriaId":"0C0D1A2C-EC6F-4725-B305-42CBA32C1682"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:8.3glx:*:*:*:*:*:*:*","matchCriteriaId":"A95D74BA-04CC-46AB-9F7A-BFF1CE165778"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2901:*:*:*:*:*:*:*:*","matchCriteriaId":"59B7C906-927C-4B8B-9FA2-F93CF4DB6023"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2902:*:*:*:*:*:*:*:*","matchCriteriaId":"D46A6C9D-3068-4E06-9FC7-C068C2B92FC6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2926:*:*:*:*:*:*:*:*","matchCriteriaId":"5850AC3C-C2D2-41EF-A4F9-81B8E4B08759"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2926f:*:*:*:*:*:*:*:*","matchCriteriaId":"88256AC6-6E27-40E6-9714-398DEF763D78"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2926gl:*:*:*:*:*:*:*:*","matchCriteriaId":"9D23DF01-93A7-46AD-8B09-963BCC02EB57"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2926gs:*:*:*:*:*:*:*:*","matchCriteriaId":"E61F8C4A-1B97-4550-A465-3157A51E5D04"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2926t:*:*:*:*:*:*:*:*","matchCriteriaId":"8A9BEB23-E8F7-40A5-965C-F2A02FB65B58"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2948:*:*:*:*:*:*:*:*","matchCriteriaId":"36A8A4B8-423D-4366-8F6D-521A7120E0E5"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2948-ge-tx:*:*:*:*:*:*:*:*","matchCriteriaId":"B539EED0-16A3-4F4F-8791-F90FDA13520B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2948g-l3:*:*:*:*:*:*:*:*","matchCriteriaId":"C8BF525D-E813-4CB9-BE84-0B8283F2FACF"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2980g:*:*:*:*:*:*:*:*","matchCriteriaId":"E67B901F-1FF8-4B04-ADBB-66606F20A70B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_2980g-a:*:*:*:*:*:*:*:*","matchCriteriaId":"3DC0577E-8CCC-4D3A-8536-61577BFA16D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_4000:*:*:*:*:*:*:*:*","matchCriteriaId":"105544F7-F57E-4B22-921C-E5EEA82B5CC4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_4500:*:*:*:*:*:*:*:*","matchCriteriaId":"8C88A18B-2949-4D54-8B78-61418C1DD3E8"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_4503:*:*:*:*:*:*:*:*","matchCriteriaId":"50E25997-76B2-46FF-8426-8F40002BEE78"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_4506:*:*:*:*:*:*:*:*","matchCriteriaId":"23267E55-E098-41F5-9B9A-E1919214B579"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_4507r:*:*:*:*:*:*:*:*","matchCriteriaId":"324DE8A5-FA75-4758-8775-65051504259F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_4510r:*:*:*:*:*:*:*:*","matchCriteriaId":"843C8691-3CB5-4C7E-A6C0-47625387CF33"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_4912g:*:*:*:*:*:*:*:*","matchCriteriaId":"A3021C2B-3E4B-4E81-9725-F75EA7635EED"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_5000:*:*:*:*:*:*:*:*","matchCriteriaId":"38E8BD58-5E55-4F07-B115-3BE78D7B2AD6"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6000_ws-svc-nam-1:2.2\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"1A2AF1C7-23EB-4C13-AC71-4FA7E78E8ED7"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6000_ws-svc-nam-1:3.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"0BF0BBC8-04BD-4867-B188-35461E50FF16"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6000_ws-svc-nam-2:2.2\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"A2C1E3F7-D48E-4AF1-8205-33EB71E09E09"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6000_ws-svc-nam-2:3.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"C959C93D-D58C-4AB5-9058-0CF257C68F72"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6000_ws-x6380-nam:2.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"4FDB5EAC-E41D-4A15-B059-45B4BE4813EC"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:catalyst_6000_ws-x6380-nam:3.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"E2DF345D-AD8A-4DE6-8136-6EF7B011E4B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"851920E3-2DF8-4C74-84E0-E3950D2EA672"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"BFAF3474-E030-4AF5-8BE0-966191D15E16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"C8EF024C-80B1-4332-ADDC-992C5F933562"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(4b\\):*:*:*:*:*:*:*","matchCriteriaId":"5F4D6201-495A-4EEC-876F-09B58C1D700F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"2DFA6741-74AF-42E0-9A8A-D775BA9EA519"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"6323C88E-C966-42FC-957F-EC244744A5D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"C33774F9-D0E0-4BB7-AE78-9B746C5FA972"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"DD0EFEE7-3EA4-4639-8B53-F7192E7C18E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(9\\):*:*:*:*:*:*:*","matchCriteriaId":"1A980A98-77C0-44F6-98C6-7CC4FEEC799C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(10\\):*:*:*:*:*:*:*","matchCriteriaId":"AD63DBE5-2149-46FF-B272-2E5A3C382548"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(11\\):*:*:*:*:*:*:*","matchCriteriaId":"04E2E594-8B82-476B-96A6-C713FE1FA06D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(12\\):*:*:*:*:*:*:*","matchCriteriaId":"D7837C26-C795-4FAC-A11B-149C41B34A26"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5\\(13a\\):*:*:*:*:*:*:*","matchCriteriaId":"E8FB48FD-5678-4BAD-8467-3C703E4950DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:4.5.10:*:*:*:*:*:*:*","matchCriteriaId":"D105C909-39B4-4B35-9D6E-3BC78491759F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.1:*:*:*:*:*:*:*","matchCriteriaId":"9229B19E-B65E-4C23-8F35-7019050E24B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"8D8B8722-42A0-4CA6-8946-0D97BBABB30A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"587031FB-E0AF-4BD0-8809-8690D3814F3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.1\\(2a\\):*:*:*:*:*:*:*","matchCriteriaId":"CE163E0F-3F54-45B2-A101-6CA6FA548D2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2:*:*:*:*:*:*:*","matchCriteriaId":"847EC2AD-F05D-47BC-841C-21F5ECF7E79B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"9D31AB89-4194-4CE5-AD93-3058E77E7E63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"1EC01832-ADF1-4A74-95FE-0B3DDE3AAFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"28CB60F6-622C-41D7-AFA4-A2DCE4D02549"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"2055E432-9939-48F7-A4BE-1888CC7241C7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"E8F15DB3-6BC3-4F15-A164-3D1F2FBA718D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"63E4BD89-21FE-492B-85C3-9BEBDB01F8CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"CE27E478-63BF-4475-B89A-91CF2D9A6C49"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.2\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"5754B0FA-30C6-4E12-9D6C-92F38CD3A9CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(1\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"C21CF907-707A-43CA-984C-310062705C63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(1a\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"C0AC3C74-262E-4A11-BCE8-58DE522E23AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(2\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"21A2D344-D0AD-4E0A-A5F3-C4323813FDD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(3\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"46DC4972-7FA1-4320-83E6-607D139121EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(4\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"339DDB07-6C16-43B9-A880-77E2351B1C05"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(5\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"EBCB451E-8945-408C-94F5-36C43AA05C1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(5a\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"A7D8D9AA-154C-46B2-96B8-AADA610056E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.3\\(6\\)csx:*:*:*:*:*:*:*","matchCriteriaId":"E7F30211-BB7A-41D3-946F-655C028A3772"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4:*:*:*:*:*:*:*","matchCriteriaId":"01AE0EAB-F266-437A-B615-69536AF50B49"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"F1D952CE-9CDE-442D-8544-4614DBE5AC12"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"EE529454-F5E6-4417-A5D7-B1A9BCD2B5C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"85D0F005-80B3-41A2-8B7C-EA256C1634DD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.4\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"FD50773D-8E63-45C7-A52D-D7B13F65327F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"9E8A2EE7-8C86-44F0-899C-FD98E08C6E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"B70FD634-E2D7-4E42-B140-44C5CB9294E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"364CCF12-AF9E-4661-9ECB-9AE0C00813D9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"282793F1-296C-423A-9A2D-301DC3340664"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"020B669B-DE6B-4828-BB44-D99EE576B79D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(4a\\):*:*:*:*:*:*:*","matchCriteriaId":"4D406F1D-C33D-4BC2-BBA8-740A9E114523"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(4b\\):*:*:*:*:*:*:*","matchCriteriaId":"C762F4B3-4F3D-4EE8-A914-1900AE4AA1C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"9627888A-F522-4A41-8B14-F0E7096509FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"B4C5BA8E-2A45-4952-AEE4-94CBE8B4B855"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"6EEA4461-2225-4D64-9CF9-68039C8E85C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5\\(13\\):*:*:*:*:*:*:*","matchCriteriaId":"7860ADDE-7861-41A6-9DA9-2355FEEC4B60"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"33A4D6E9-ADCB-4338-8CA9-A2F374F7CE38"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"FAF08F95-9CF4-4AF6-BB08-021694C7AB40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(1b\\):*:*:*:*:*:*:*","matchCriteriaId":"8C9BCB53-72AA-426F-9D18-544038B65128"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(1c\\):*:*:*:*:*:*:*","matchCriteriaId":"C95B56F4-CDD1-4102-BB33-C66D3CDAC6C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"AA37670F-3FF4-476E-AA4A-7F98229C6EB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(2.13\\):*:*:*:*:*:*:*","matchCriteriaId":"2BA92A7D-5D0C-42A1-8D0B-C50EA6778DEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"52009F7A-2CD1-49BA-B9A6-C88766DC4D6C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.2\\(0.110\\):*:*:*:*:*:*:*","matchCriteriaId":"B9CE2412-CFB8-42B0-B39E-84569C922952"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.2\\(0.111\\):*:*:*:*:*:*:*","matchCriteriaId":"1F9D3782-7638-4252-B9A1-B11CECBE0D19"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(0.7\\)pan:*:*:*:*:*:*:*","matchCriteriaId":"236ABC7F-51AE-40A9-9A3F-F32E16A7B74E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"3B791566-5B22-452D-ACDA-A1085700AE2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.3\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"FD776AC3-A10E-4B4C-BCB9-1DB1781DDA70"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.1:*:*:*:*:*:*:*","matchCriteriaId":"904FC5E4-6BE0-4B15-8283-26F92922B78E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"8F47A997-B2A5-459D-8089-12B2AB438FB0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"567897E0-416B-47D8-ABAF-412DA5FF9509"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:7.6\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C6E0B307-56E1-4E0E-A68E-5D95CBC91A8D"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040609-catos.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/245190","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16370","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040609-catos.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/245190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16370","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0552","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed."},{"lang":"es","value":"Sophos Small Business Suite 1.00 para Windows no maneja adecuadamente ficheros cuyos tamaños contienen nombres reservados de MS-DOS, como (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, lo que puede permitir que código malicioso evite  la detección cuando es instalado, copiado o ejecutado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:small_business_suite:*:*:*:*:*:*:*:*","versionEndIncluding":"1.00","matchCriteriaId":"22244861-B2F3-43DB-99A3-4965003340C0"}]}]}],"references":[{"url":"http://www.idefense.com/application/poi/display?id=143&type=vulnerabilities","source":"cve@mitre.org"},{"url":"http://www.seifried.org/security/advisories/kssa-005.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17468","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=143&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.seifried.org/security/advisories/kssa-005.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17468","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0554","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a \"crash.c\" program."},{"lang":"es","value":"El kernel de Linux 2.4.2x y 2.6.x para x86 permite a usuarios locales causar una denegación de servicio (caída del sistema), posiblemente mediante un bucle infinito que dispara un manejador de señal con una cierta secuencia de instrucciones fsave y fstor, originalmente demostrado con el programa \"crash.c\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:converged_communications_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E586558A-ABC3-42EB-8B4D-DC92A0D695E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:s3400:*:*:*:*:*:*:*","matchCriteriaId":"9BFF29C7-E5AA-44EB-B1A9-602B3692D893"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A0934C49-5F88-4189-BD88-2F32C39C2F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*","matchCriteriaId":"14B0A230-4054-4483-A3A7-9A5A286C7552"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*","matchCriteriaId":"81B543F9-C209-46C2-B0AE-E14818A6992E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*","matchCriteriaId":"DB89C970-DE94-4E09-A90A-077DB83AD156"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"F7840155-DCF0-4C34-815B-71F872D31A20"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D2E2EF3C-1379-4CBE-8FF5-DACD47834651"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*","matchCriteriaId":"37F124FE-15F1-49D7-9E03-8E036CE1A20C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix:*:*:lx:*:*:*:*:*","matchCriteriaId":"C1A3B951-A1F8-4291-82FA-AB7922D13ACE"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_email_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"A451599B-5F4F-4D7F-B5EF-3AE9F9B89D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_email_server:iii:*:*:*:*:*:*:*","matchCriteriaId":"BD74DAB4-A68E-4748-BC43-2285FC9804D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_admin-cd_for_firewall:*:*:*:*:*:*:*:*","matchCriteriaId":"52E04F16-A0C7-4B0C-A70E-2CA683E0C33B"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_connectivity_server:*:*:*:*:*:*:*:*","matchCriteriaId":"941DFF67-E9F6-41F0-A5CB-90105733327D"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_database_server:*:*:*:*:*:*:*:*","matchCriteriaId":"117BBA08-9C1B-4CAC-A418-B044D69C27D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_firewall_cd:*:*:*:*:*:*:*:*","matchCriteriaId":"52F8C98F-E10C-4FE8-96E7-27426F369E78"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_linux_office_server:*:*:*:*:*:*:*:*","matchCriteriaId":"2FDDFB81-4DFE-416A-BCE1-ED96AC3E69B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_office_server:*:*:*:*:*:*:*:*","matchCriteriaId":"18BAE686-972A-4756-9E5D-CF2830700891"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"20C0BD87-CE4B-49D2-89BE-EF282C43AD72"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C3E6C4A8-59F4-43EE-8413-E95289037598"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FE76357A-27E6-4D85-9AA0-1BB658C41568"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C56C5FDB-24E2-479D-87CA-164CD28567D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AEF6C16F-8EDF-4A24-BFEF-6A304D654EEB"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D982AE39-BB57-49E7-B5FE-5EF1ADE2F019"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"CD14661C-E3BE-44DF-BC8D-294322BF23EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F4007B0D-9606-46BD-866A-7911BEA292BE"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845","source":"cve@mitre.org"},{"url":"http://gcc.gnu.org/bugzilla/show_bug.cgi?id=15905","source":"cve@mitre.org"},{"url":"http://linuxreviews.org/news/2004-06-11_kernel_crash/index.html","source":"cve@mitre.org"},{"url":"http://lwn.net/Articles/91155/","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108786114032681&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108793699910896&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=linux-kernel&m=108681568931323&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20162","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20163","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20202","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20338","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/973654","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:062","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_17_kernel.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-255.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-260.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10538","source":"cve@mitre.org"},{"url":"http://www.trustix.net/errata/2004/0034/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16412","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2915","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9426","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gcc.gnu.org/bugzilla/show_bug.cgi?id=15905","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://linuxreviews.org/news/2004-06-11_kernel_crash/index.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lwn.net/Articles/91155/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108786114032681&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108793699910896&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=linux-kernel&m=108681568931323&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/973654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_17_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-255.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-260.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.net/errata/2004/0034/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0555","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in (1) queue.c and (2) queued.c in queue before 1.30.1 may allow remote attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:queue:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"CE9346B1-766A-433C-AC32-F8D9A7C2CD94"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:queue:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"89FBB49C-F2B8-4EC5-8534-20782E1A3E86"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:queue:1.12.9:*:*:*:*:*:*:*","matchCriteriaId":"A812D9C0-FD41-4B37-943D-BF2B3DA35EC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:queue:1.20.0:*:*:*:*:*:*:*","matchCriteriaId":"B4A5D139-2D04-47E5-867E-12DB63E2404D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:queue:1.20.1:*:*:*:*:*:*:*","matchCriteriaId":"C4AD1430-A702-498D-98D8-53239C748E8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:queue:1.20.2:*:*:*:*:*:*:*","matchCriteriaId":"058D27E1-3795-4441-983A-4FEFD1CAA0EB"}]}]}],"references":[{"url":"http://securitytracker.com/id?1012929","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2005/dsa-643","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18945","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1012929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2005/dsa-643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18945","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0557","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Sound eXchange (SoX) anteriores a 12.17 permite a atacantes remotos ejecutar código arbitrario mediante ciertos campos de cabecera de ficheros WAV."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sox:sox:12.17.2:*:*:*:*:*:*:*","matchCriteriaId":"3D8C8486-8397-4B6E-967F-B2AD831B0628"},{"vulnerable":true,"criteria":"cpe:2.3:a:sox:sox:12.17.3:*:*:*:*:*:*:*","matchCriteriaId":"D47BE660-68EE-44CD-9F30-5D7CA16795D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sox:sox:12.17.4:*:*:*:*:*:*:*","matchCriteriaId":"C2015121-6291-4BB4-AE99-08222A5346F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"CD14661C-E3BE-44DF-BC8D-294322BF23EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F4007B0D-9606-46BD-866A-7911BEA292BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*","matchCriteriaId":"81B543F9-C209-46C2-B0AE-E14818A6992E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*","matchCriteriaId":"DB89C970-DE94-4E09-A90A-077DB83AD156"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6996B14-925B-46B8-982F-3545328B506B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0014.html","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000855","source":"cve@mitre.org"},{"url":"http://lwn.net/Articles/95529/","source":"cve@mitre.org"},{"url":"http://lwn.net/Articles/95530/","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2004/Jul/1227.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12175","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-565","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-23.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:076","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-409.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10819","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1945","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16827","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9801","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lwn.net/Articles/95529/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lwn.net/Articles/95530/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2004/Jul/1227.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-565","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-409.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10819","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9801","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0558","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port."},{"lang":"es","value":"La implementación del Protocolo de Impresión de Internet (IPP) en CUPS anteriores a 1.1.21 permite a atacantes remotos causar una denegación de servicio (cuelgue del servicio) mediante cierto paquete UDP al puerto IPP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easy_software_products:cups:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.21","matchCriteriaId":"DC216601-C4E1-4479-B28B-8C58CDC08D4C"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000872","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109760654431316&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57646-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201005-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000757.1-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-545","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:097","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-449.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11183","source":"cve@mitre.org"},{"url":"http://www.suse.com/de/security/2004_31_cups.html","source":"cve@mitre.org"},{"url":"http://www.trustix.org/errata/2004/0047/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2072","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17389","source":"cve@mitre.org"},{"url":"https://github.com/fibonascii/CVE-2004-0558","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11732","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109760654431316&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57646-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201005-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000757.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-545","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-449.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.suse.com/de/security/2004_31_cups.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.org/errata/2004/0047/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17389","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://github.com/fibonascii/CVE-2004-0558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11732","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0559","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory."},{"lang":"es","value":"El script maketemp.pl en Usermin 1.070 y 1.080 permite a usuarios locales sobreescribir ficheros de su elección durante la instalación mediante un ataque de enlaces simbólicos en el directorio /tmp/.usermin"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.000:*:*:*:*:*:*:*","matchCriteriaId":"C70274C3-7CA0-49A2-B63C-7DAF492CCD0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.010:*:*:*:*:*:*:*","matchCriteriaId":"A7C4A319-0EA6-47E0-831A-27530DCF714E"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.020:*:*:*:*:*:*:*","matchCriteriaId":"D1009D90-9851-441B-A2E2-FA5B676E8182"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.030:*:*:*:*:*:*:*","matchCriteriaId":"934A3D3F-CF10-478C-9206-DB468BCA4702"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.040:*:*:*:*:*:*:*","matchCriteriaId":"77B42570-F094-4C25-B246-6439D3FF4B30"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.051:*:*:*:*:*:*:*","matchCriteriaId":"69A30BB5-2C3F-4C39-8CDC-CC0CC280384C"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.060:*:*:*:*:*:*:*","matchCriteriaId":"753BF8DE-D225-4301-A6A6-50CD60B34234"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.070:*:*:*:*:*:*:*","matchCriteriaId":"FC37A972-11D7-4C85-A8DC-5EDE808629F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.080:*:*:*:*:*:*:*","matchCriteriaId":"EA7131C0-4FE1-4D69-9B21-8A9BFADE2A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.0.00:*:*:*:*:*:*:*","matchCriteriaId":"2B4A574A-5B2A-4769-B932-E1736564160A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"D9425C1F-5E6A-489A-9A8B-9156E79FEAA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.0.50:*:*:*:*:*:*:*","matchCriteriaId":"C968FBE9-191A-40B1-9A69-BF24511E40B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.0.60:*:*:*:*:*:*:*","matchCriteriaId":"D89047FD-39F0-4614-B1EC-D13BAF57405E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.0.70:*:*:*:*:*:*:*","matchCriteriaId":"6CDF2120-F341-4C2E-88C1-A6C76626BFF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.0.80:*:*:*:*:*:*:*","matchCriteriaId":"01DFC15C-3513-4E94-B46D-94FEA0D627FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.0.90:*:*:*:*:*:*:*","matchCriteriaId":"F4E068D3-F6B5-4102-B9FA-949E2FAA33D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.1.00:*:*:*:*:*:*:*","matchCriteriaId":"7E6BD551-EC6A-4C77-B9E7-B9CF3DC21021"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"01B0FE2D-02BC-4081-B172-64A74389C5F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"1615ACA2-32CC-48B7-AB5A-0BB0FDA7F190"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.1.30:*:*:*:*:*:*:*","matchCriteriaId":"F5ABAE43-0EEF-44D5-AB36-44DA54290122"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.1.40:*:*:*:*:*:*:*","matchCriteriaId":"AD33CE40-DFC9-4BDC-BF4F-9E0B268B8503"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.1.50:*:*:*:*:*:*:*","matchCriteriaId":"8608F5A2-B6FA-43C6-9862-43DBAF01EB1C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"052E3862-BFB7-42E7-889D-8590AFA8EF37"}]}]}],"references":[{"url":"http://secunia.com/advisories/12488/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-15.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11153","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.webmin.com/uchanges-1.089.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17299","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12488/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.webmin.com/uchanges-1.089.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17299","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0560","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted content of a certain size that triggers the overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_minnesota:gopherd:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A89D4AC8-EE40-46A6-897B-A212D77080C3"}]}]}],"references":[{"url":"http://secunia.com/advisories/13855","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-638","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-638","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0561","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the log routine for gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_minnesota:gopherd:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A89D4AC8-EE40-46A6-897B-A212D77080C3"}]}]}],"references":[{"url":"http://secunia.com/advisories/13855","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-638","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-638","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0563","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has world readable permissions, which could allow local users to gain sensitive information, such as a username and password."},{"lang":"es","value":"El fichero de configuración en freenet anteriores a 0.9.6 y anteriores a 1.0 en Debian Linux tiene permisos de lectura para todo el mundo, lo que podría permitir a usuarios locales ganar información sensible, como nombres de usuario y contraseña."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freenet6:freenet6:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"A94C2AFA-468E-45B5-A765-26BB747DE64E"},{"vulnerable":true,"criteria":"cpe:2.3:a:freenet6:freenet6:1.0:*:*:*:*:*:*:*","matchCriteriaId":"18CD6E5C-46E4-4D84-81B4-6C70C808860E"}]}]}],"references":[{"url":"http://secunia.com/advisories/12705/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011460","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-555","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11280","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17544","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12705/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17544","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0564","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files.  NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe \"is NOT designed to run setuid-root.\"  Therefore this identifier applies *only* to those configurations and installations under which pppoe is run setuid root despite the developer's warnings."},{"lang":"es","value":"Roaring Penguin pppoe, cuando se ejecuta con setuid root, no libera privilegios adecuadamente, lo que permite a usuarios locales sobreescribir ficheros arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roaring_penguin:pppoe:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8F1F5B1D-4264-4877-91D5-BCFF26D6F538"},{"vulnerable":true,"criteria":"cpe:2.3:a:roaring_penguin:pppoe:3.3:*:*:*:*:*:*:*","matchCriteriaId":"0C270453-511A-4924-8200-D847BC8AE748"},{"vulnerable":true,"criteria":"cpe:2.3:a:roaring_penguin:pppoe:3.5:*:*:*:*:*:*:*","matchCriteriaId":"40DFDDE1-5F26-4F1B-90E4-916BD22A7C0A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*","matchCriteriaId":"A6B060E4-B5A6-4469-828E-211C52542547"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*","matchCriteriaId":"974C3541-990C-4CD4-A05A-38FA74A84632"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*","matchCriteriaId":"6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"58792F77-B06F-4780-BA25-FE1EE6C3FDD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"C9419322-572F-4BB6-8416-C5E96541CF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*","matchCriteriaId":"BFC50555-C084-46A3-9C9F-949C5E3BB448"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*","matchCriteriaId":"9C25D6E1-D283-4CEA-B47B-60C47A5C0797"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"AD18A446-C634-417E-86AC-B19B6DDDC856"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*","matchCriteriaId":"E4BB852E-61B2-4842-989F-C6C0C901A8D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*","matchCriteriaId":"24DD9D59-E2A2-4116-A887-39E8CC2004FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*","matchCriteriaId":"F28D7457-607E-4E0C-909A-413F91CFCD82"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110247119200510&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110253341209450&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-557","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fedoralegacy.org/updates/FC1/2005-11-14-FLSA_2005_152794__Updated_rp_pppoe_package_fixes_security_issue.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11315","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17576","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110247119200510&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110253341209450&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fedoralegacy.org/updates/FC1/2005-11-14-FLSA_2005_152794__Updated_rp_pppoe_package_fixes_security_issue.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0565","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit."},{"lang":"es","value":"Fuga de información de punto flotante en el código de cambio de contexto de Linux 2.4.x sólo comprueba el bit MFH pero no verifica el propietario de FPH, lo que permite a usuarios locales leer valores de registros de otros procesos estableciendo el bit MFH."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*","matchCriteriaId":"E4F3F3BB-E004-4FD9-9580-F2D5F3ED3701"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C4AD30B9-8FBA-48B3-B2B2-014C950B9BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2:*:*:*:*:*:*:*","matchCriteriaId":"39B3D5AE-05A8-433C-98DD-2711423D3FA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20162","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20163","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20202","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20338","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:066","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-504.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10687","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124734","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16644","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10714","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16644","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10714","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0566","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value."},{"lang":"es","value":"Error de falta de signo en enteros en imgbmp.cxx de Windows 2000 permite a atacantes remotos ejecutar código arbitrario mediante una imagen BMP con un valor bfOffBits grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E6B8985B-B927-4928-B1DB-18E29F796992"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0806.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/266926","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-212A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15210","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A216","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A306","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A322","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A507","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A515","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0806.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/266926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-212A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15210","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A515","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0567","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute arbitrary code or cause a denial of service (server crash), which results in an \"unchecked buffer\" and possibly triggers a buffer overflow, aka the \"Name Validation Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*","matchCriteriaId":"D2CA1674-A8A0-479A-9D80-344D3C563A24"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"}]}]}],"references":[{"url":"http://secunia.com/advisories/13466","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1012517","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/p-054.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/378160","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/12370","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11922","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18259","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1012517","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/p-054.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/378160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/12370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18259","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0569","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service (system crash) via a malicious message, possibly related to improper length values."},{"lang":"es","value":"La librería de tiempo de ejecución RPC de Microsoft Windows NT 4.0 permite a atacantes remotos leer la memoria activa o causar una denegación de servicio (caída del sistema) mediante un mensaje malicioso, posiblemente relacionado con valores de longitud inapropiados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E53CDA8E-50A8-4509-B070-CCA5604FFB21"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109769394209518&w=2","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-029","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17646","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17663","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2505","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5277","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109769394209518&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-029","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17646","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0572","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not properly handled when the shell capability launches grpconv.exe."},{"lang":"es","value":"Desbordamiento de búfer en Convertidor de Grupos de Programa de Windows (grpconv.exe) puede permitir a atacantes remotos ejecutar código de su elección mediante una URL shell: con un nombre de fichero largo y una extensión .grp, lo cual no es manejado adecuadamente cuando la característica de shell lanza grpconv.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:grpconv:*:*:*:*:*:*:*:*","matchCriteriaId":"D628C142-0BC6-45F8-8E43-355BC61A9EF2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0290.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/543864","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10677","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-037","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16664","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17662","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1279","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1837","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1843","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2753","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3071","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3768","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3822","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4244","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4493","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0290.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/543864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10677","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17662","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4493","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0573","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website."},{"lang":"es","value":"Desbordamiento de búfer en el convertidor de Microsoft WordPerfect 5.x en Office 2000, Office XP, Offiece 2003 y las suites Works 2001 a 2004 permite a atacantes remotos ejecutar código de su elección mediante un documento o un sitio web malicioso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:2000:*:*:*:*:*:*:*","matchCriteriaId":"D2C6629C-BF53-49A1-B32C-A828CA0A0500"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:2002:*:*:*:*:*:*:*","matchCriteriaId":"6548F837-A687-4EEF-B754-DAA834B34FA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:2003:*:*:*:*:*:*:*","matchCriteriaId":"3C79FEE1-70A3-4A48-BE7B-0D18F0A5FA7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:*:*:*:*:*:*:*","matchCriteriaId":"A9A82D13-513C-46FA-AF51-0582233E230A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*","matchCriteriaId":"DB7EA4CC-E705-42DB-86B6-E229DA36B66D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:xp:*:*:*:*:*:*:*","matchCriteriaId":"34FA62BE-D804-402D-9BDD-68BC70ECCD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:publisher:2000:*:*:*:*:*:*:*","matchCriteriaId":"95648599-D3B3-4043-821C-D385FB7A77CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:publisher:2002:*:*:*:*:*:*:*","matchCriteriaId":"99ED878A-CFC5-4FD5-A403-EB16CC4F8BC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:publisher:2003:*:*:*:*:*:*:*","matchCriteriaId":"617E8BE3-8AD0-42FC-BDEE-6B1F120AE512"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2000:*:*:*:*:*:*:*","matchCriteriaId":"AEBFF713-0884-43BF-9AB8-777664FD64AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*","matchCriteriaId":"2D90B1E1-23CD-4595-AD78-DA1758E9896D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:word:2003:*:*:*:*:*:*:*","matchCriteriaId":"379C2A4A-78EF-473D-954B-F5DD76C3D6CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:2001:*:*:*:*:*:*:*","matchCriteriaId":"B4ADD440-2CF5-4BC9-8C48-91CF8D5500BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:2002:*:*:*:*:*:*:*","matchCriteriaId":"17037BD9-742D-42E2-98CC-C764E6F71957"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:2003:*:*:*:*:*:*:*","matchCriteriaId":"0B77363A-53A3-4CFC-87E0-B7D33445ACEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:works:2004:*:*:*:*:*:*:*","matchCriteriaId":"F98B6FDD-E9AA-49A4-8D9C-422DF5520A66"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109519646030906&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12529","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011249","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011250","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011251","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011252","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/449438","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-027","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17306","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2670","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3311","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3333","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4005","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5021","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109519646030906&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011250","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/449438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0574","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an \"unchecked buffer,\" leading to off-by-one and heap-based buffer overflows."},{"lang":"es","value":"El componente de Protocolo de Transferencia de Noticias de Red (NNTP) de Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, y Exchange Server 2003 permite a atacantes remtos ejecutar código de su elección mediante patrones XPAT, posiblemente relacionado con una validación de longitud inadecuada o un \"búfer sin comprobar\", conduciendo a desbordamientos de búfer basados en la pila y error de fuera por uno."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2000:-:*:*:*:*:*:*","matchCriteriaId":"FF429469-1B63-4BF3-A59F-F8180226BB6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2003:-:*:*:*:*:*:*","matchCriteriaId":"E2337C2B-EEC2-48B3-93C0-FE1FE7D41273"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:-:-:*:*:*:*:*:*","matchCriteriaId":"EAA6977C-182F-4537-9140-7F33AC027C39"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:server:*:*:*","matchCriteriaId":"5C472E11-99A9-4139-95A1-396A54769EE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:r2:*:*:*:*:*:*:*","matchCriteriaId":"23C65B29-89C4-4C05-BD53-27CAD31810A1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109761632831563&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-012.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.coresecurity.com/common/showdoc.php?idx=420&idxseccion=10","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/203126","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-036","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17641","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17661","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A246","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4392","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5021","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5070","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5926","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109761632831563&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-012.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.coresecurity.com/common/showdoc.php?idx=420&idxseccion=10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/203126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-0575","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an \"unchecked buffer\" and improper length validation."},{"lang":"es","value":"Desbordamiento de enteros en DUNZIP32.DLL de Microsoft Windows XP, Windows XP edición de 64 bits, Windows Server 2003, y Windows Server 2003 edición de 64 bits permite a atacantes remotos ejecutar código de su elección mediante carpetas comprimidas (\"zipeadas\") que envuelven un \"búfer no comprobado\" y una validación de longitud inapropiada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*","matchCriteriaId":"D2CA1674-A8A0-479A-9D80-344D3C563A24"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=109767342326300&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011637","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/p-010.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.eeye.com/html/research/advisories/AD20041012A.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/649374","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-034","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17624","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17659","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1053","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3913","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4276","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6397","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=109767342326300&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011637","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/p-010.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.eeye.com/html/research/advisories/AD20041012A.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/649374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0576","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The radius daemon (radiusd) for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service (server crash) via malformed SNMP messages containing an invalid OID."},{"lang":"es","value":"El demonio radius (radiusd) de GNU Radius 1.1, cuando se compila con la opción -enable-snmp, permite a atacantes remotos causar una denegación de servicio (caída del servidor) mediante un mensaje SNMP malformado conteniendo un OID no válido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5C1B4923-F65D-4D51-944B-B63283FBAD13"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=108785242716726&w=2","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=110&type=vulnerabilities","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16466","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=108785242716726&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=110&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16466","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0577","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files from the root directory via a URL request to the wingate-internal directory."},{"lang":"es","value":"Wingate 5.2.3 build 901 y 6.0 beta 2 build 942, y otras versiones como la 5.0.5, permite a atacantes remotos leer ficheros arbitraios del directorio raíz mediante un petición URL al directorio wingate-internal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"40A0AE5B-B449-4494-828E-2FD7414F6FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E328107F-F19D-427D-A88A-17DCB58A459C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"2D445EB5-ED3A-4476-9395-1EFD19A9B6A1"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=108872788123695&w=2","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=113","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16589","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=108872788123695&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16589","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0578","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files via leading slash (//) characters in a URL request to the wingate-internal directory."},{"lang":"es","value":"WinGate 5.2.3 build 901 y 6.0 beta 2 build 942, y otras versiones como 5.0.5 permiten a atacantes remotos leer ficheros arbitrarios mediante caractéres barra (//) en el principio de una petición URL al directorio wingate-internal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"40A0AE5B-B449-4494-828E-2FD7414F6FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E328107F-F19D-427D-A88A-17DCB58A459C"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"2D445EB5-ED3A-4476-9395-1EFD19A9B6A1"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=108872788123695&w=2","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=113","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16589","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=108872788123695&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16589","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0579","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en super anteriores a 3.32 permite a usuarios locales ejecutar código de su elección como root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:william_deich:super:3.12:*:*:*:*:*:*:*","matchCriteriaId":"919A340A-54C0-4DE3-B402-A32AAA44D4D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:william_deich:super:3.16:*:*:*:*:*:*:*","matchCriteriaId":"AAE7E22D-1768-4ECD-90C6-AAF29F25ABE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:william_deich:super:3.17:*:*:*:*:*:*:*","matchCriteriaId":"FF60FA58-F97F-4189-91FF-7B594729FEE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:william_deich:super:3.18:*:*:*:*:*:*:*","matchCriteriaId":"7E91F41A-06CF-4BDC-8E33-3A08AE40DD8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:william_deich:super:3.19:*:*:*:*:*:*:*","matchCriteriaId":"97762EE4-BB33-45FB-A085-9A55A9617E4F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*","matchCriteriaId":"A6B060E4-B5A6-4469-828E-211C52542547"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*","matchCriteriaId":"974C3541-990C-4CD4-A05A-38FA74A84632"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*","matchCriteriaId":"6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"58792F77-B06F-4780-BA25-FE1EE6C3FDD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"C9419322-572F-4BB6-8416-C5E96541CF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*","matchCriteriaId":"BFC50555-C084-46A3-9C9F-949C5E3BB448"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*","matchCriteriaId":"9C25D6E1-D283-4CEA-B47B-60C47A5C0797"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"AD18A446-C634-417E-86AC-B19B6DDDC856"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*","matchCriteriaId":"E4BB852E-61B2-4842-989F-C6C0C901A8D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*","matchCriteriaId":"24DD9D59-E2A2-4116-A887-39E8CC2004FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*","matchCriteriaId":"F28D7457-607E-4E0C-909A-413F91CFCD82"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16458","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16458","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0580","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information."},{"lang":"es","value":"DHCP en los encaminadores de cable y ADSL Linksys BEFSR11, BEFSR41, BEFSR81 y BEFSRU31, con versión de firmware 1.45.7, no limpia adecuadamente búferes usados anteriormente en un paquete de respueta BOOTP, lo que permite a atacantes remotos obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befcmu10:*:*:*:*:*:*:*:*","matchCriteriaId":"90DA95A3-DF00-411F-8582-60CB737BA116"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befn2ps4:*:*:*:*:*:*:*:*","matchCriteriaId":"1C888358-9CF4-4D5B-AAC0-7E606978C00E"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befn2ps4:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"A3FFAA33-12EC-40E4-9A34-DDB95A77A63C"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr11:1.40.2:*:*:*:*:*:*:*","matchCriteriaId":"BC087D32-60A2-48AD-8DD3-1088C641F880"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr11:1.41:*:*:*:*:*:*:*","matchCriteriaId":"4A2B43B5-0083-4F71-BD69-9EA4C0AE1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr11:1.42.3:*:*:*:*:*:*:*","matchCriteriaId":"6F69304C-DC53-4782-AEE0-E575B44FF56D"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr11:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"A7F5E5AA-6469-4405-BDE9-AD4D174A1A6F"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr11:1.43:*:*:*:*:*:*:*","matchCriteriaId":"2EA4C23A-598A-4B11-BD78-39EA55E0E6A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr11:1.43.3:*:*:*:*:*:*:*","matchCriteriaId":"26EE9DDF-2DCD-4432-A513-84AE9BCE94C2"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr11:1.44:*:*:*:*:*:*:*","matchCriteriaId":"B2A867E8-F2ED-4772-BB5A-C50FFBA1B448"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.35:*:*:*:*:*:*:*","matchCriteriaId":"A52F18C5-6D00-493C-B38F-D6695670357F"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.36:*:*:*:*:*:*:*","matchCriteriaId":"3F7E417D-3751-4FCF-AECC-7601F77198E9"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.37:*:*:*:*:*:*:*","matchCriteriaId":"127E79AF-33BE-485E-B4A3-058ECC898E9F"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.38.5:*:*:*:*:*:*:*","matchCriteriaId":"B49FC600-D1E3-4233-AC8A-DBFA87D2138D"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.39:*:*:*:*:*:*:*","matchCriteriaId":"A0754C5C-166A-4084-A4A5-510AAC1AC6FE"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.40.2:*:*:*:*:*:*:*","matchCriteriaId":"858C8B66-8FF4-4A1E-9B2D-363AC169467E"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.41:*:*:*:*:*:*:*","matchCriteriaId":"048E48C6-6A62-4E64-A69C-0F7B872AA121"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.42.3:*:*:*:*:*:*:*","matchCriteriaId":"C0FAD3B2-69ED-451F-9CD2-6B552E962B7C"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"525E00CA-DEEA-410F-A90C-C73C8D304E36"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.43:*:*:*:*:*:*:*","matchCriteriaId":"6337002A-EA1A-47A9-B4A5-E3EECD859C41"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.43.3:*:*:*:*:*:*:*","matchCriteriaId":"E88F34EA-AFCF-4CED-A7A4-9C76309E90E9"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.44:*:*:*:*:*:*:*","matchCriteriaId":"C5219F89-4CB8-4239-A7C2-1E869E931777"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41:1.45.7:*:*:*:*:*:*:*","matchCriteriaId":"BEC6E599-5026-4580-B94F-6DD33E0952DF"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41w:*:*:*:*:*:*:*:*","matchCriteriaId":"8FC1F57E-2E8F-419C-8725-18208B8C1874"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr81:*:*:*:*:*:*:*:*","matchCriteriaId":"AF867F97-F14F-4056-B0C8-A72E2FE2E74D"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr81:2.42.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FC5B40A4-E7CA-4BDD-899E-3693129D347E"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr81:2.44:*:*:*:*:*:*:*","matchCriteriaId":"7142F135-C45C-4737-BDBB-1CCF2A1827EC"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsru31:1.40.2:*:*:*:*:*:*:*","matchCriteriaId":"914AC3F4-064A-47A6-B707-00FCC0607761"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsru31:1.41:*:*:*:*:*:*:*","matchCriteriaId":"44405B42-D7AD-42E3-BD17-A619936DC02D"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsru31:1.42.3:*:*:*:*:*:*:*","matchCriteriaId":"9209ABC6-7DAA-46CE-8F59-2F9430FF2491"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsru31:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"958AF49D-FB97-476F-B8DF-5A760F72DBC6"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsru31:1.43:*:*:*:*:*:*:*","matchCriteriaId":"E80E4BFD-DB4D-4574-A0F6-15881A66F308"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsru31:1.43.3:*:*:*:*:*:*:*","matchCriteriaId":"67CC8982-FF47-45CF-8861-AD2F5A8D0E0A"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsru31:1.44:*:*:*:*:*:*:*","matchCriteriaId":"892159A1-620C-413A-ADE5-205B12E5E080"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsx41:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"6353EE40-1C83-4A1A-836F-6716D95A5A88"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsx41:1.43:*:*:*:*:*:*:*","matchCriteriaId":"2704FB57-AC43-4C92-B038-8C226C8A47B6"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsx41:1.43.3:*:*:*:*:*:*:*","matchCriteriaId":"BDD7A706-C379-4D56-97CA-88D3F76D4EF3"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsx41:1.43.4:*:*:*:*:*:*:*","matchCriteriaId":"0D0F2944-C902-4652-85FA-9223773D53DC"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsx41:1.44:*:*:*:*:*:*:*","matchCriteriaId":"90E9B1CD-FFC1-4318-BB31-6753DEF73D5A"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsx41:1.44.3:*:*:*:*:*:*:*","matchCriteriaId":"D6EFD70A-34B4-4F27-9377-A665505895D2"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsx41:1.45.3:*:*:*:*:*:*:*","matchCriteriaId":"1B23D8CA-A966-4E23-B6D2-4E7AAD239543"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befvp41:*:*:*:*:*:*:*:*","matchCriteriaId":"A513272D-E013-498F-8582-0645DB3366F1"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befvp41:1.39.64:*:*:*:*:*:*:*","matchCriteriaId":"0ADD86DE-4495-4C95-9C32-294442915A85"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befvp41:1.40.3f:*:*:*:*:*:*:*","matchCriteriaId":"DFB5F870-AE5C-4B0E-AEEA-335A990E6EA3"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befvp41:1.40.4:*:*:*:*:*:*:*","matchCriteriaId":"C359F33C-D4B0-4C22-8CEE-86F6FE8A1987"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befvp41:1.42.7:*:*:*:*:*:*:*","matchCriteriaId":"56484A79-0B44-439F-A64B-B55660E0C7FB"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:rv082:*:*:*:*:*:*:*:*","matchCriteriaId":"88647EC9-AD63-4643-B1B9-C0C224E6F93B"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wap55ag:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"935294D7-41A5-4E47-A168-A908E61CADCD"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wrt54g:1.42.3:*:*:*:*:*:*:*","matchCriteriaId":"51DC73D9-CBB8-4683-BB21-3AA0F9468F18"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wrt54g:2.00.8:*:*:*:*:*:*:*","matchCriteriaId":"4AF3AB9D-CE52-42CF-9FD7-ECB83495C3AE"}]}]}],"references":[{"url":"http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=832&p_%20%5Ccreated=1086294093&p_sid=pU1X1idh&p_lva=&p_sp=cF9zcmNoPSZwX3NvcnRfYnk9JnBfZ3JpZHNvcnQ9%20%5CJnBfcm93X2NudD02NTQmcF9wYWdlPTE%2A&p_li=","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108662876129301&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11606","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/May/1010288.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6325","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10329","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16142","source":"cve@mitre.org"},{"url":"http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=832&p_%20%5Ccreated=1086294093&p_sid=pU1X1idh&p_lva=&p_sp=cF9zcmNoPSZwX3NvcnRfYnk9JnBfZ3JpZHNvcnQ9%20%5CJnBfcm93X2NudD02NTQmcF9wYWdlPTE%2A&p_li=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108662876129301&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2004/May/1010288.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16142","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0581","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp."},{"lang":"es","value":"El script ksymoops-gznm en Mandrake Linux 9.1 a 10.0, y Corporate Server 2.1 permite a usuarios locales borrar ficheros arbitrarios mediante un ataque de enlaces simbólicos en /tmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ksymoops:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"B3962516-E0A2-4AE6-B862-62A203B0B322"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ksymoops:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"2E795349-8C71-4EEE-93B6-106BE36A01DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:ksymoops:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"6C87DA33-6C06-44D7-B8C8-6451F426AE2D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C4AD30B9-8FBA-48B3-B2B2-014C950B9BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:ppc:*:*:*:*:*","matchCriteriaId":"279317B9-AF2F-43E9-BEE5-518FC6D23A87"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"052E3862-BFB7-42E7-889D-8590AFA8EF37"}]}]}],"references":[{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:060","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10516","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16392","source":"cve@mitre.org"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0582","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Webmin 1.140 allows remote attackers to bypass access control rules and gain read access to configuration information for a module."},{"lang":"es","value":"Vulnerabilidad desconocidad en Webmin 1.140 permite a atacantes remotos saltarse reglas de control de acceso y conseguir acceso de lectura a información de configuración de un módulo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.1.40:*:*:*:*:*:*:*","matchCriteriaId":"AD33CE40-DFC9-4BDC-BF4F-9E0B268B8503"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000848","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108697184602191&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-526","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-12.xml","source":"cve@mitre.org"},{"url":"http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/74_e.html","source":"cve@mitre.org"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:074","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10474","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10522","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.webmin.com/changes-1.150.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16333","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108697184602191&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/74_e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.webmin.com/changes-1.150.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16333","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0583","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords."},{"lang":"es","value":"La funcionalidad lockout en (1)Webmin 1.140 y (2) Usermin 1.070 no process ciertas cadenas de caractéreis, lo que permite a atacanetes remotos conducir un ataque de fuerza bruta para averiguar IDs de usuario y contraseñas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.070:*:*:*:*:*:*:*","matchCriteriaId":"FC37A972-11D7-4C85-A8DC-5EDE808629F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.1.40:*:*:*:*:*:*:*","matchCriteriaId":"AD33CE40-DFC9-4BDC-BF4F-9E0B268B8503"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*","matchCriteriaId":"A6B060E4-B5A6-4469-828E-211C52542547"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*","matchCriteriaId":"974C3541-990C-4CD4-A05A-38FA74A84632"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*","matchCriteriaId":"6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"58792F77-B06F-4780-BA25-FE1EE6C3FDD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"C9419322-572F-4BB6-8416-C5E96541CF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*","matchCriteriaId":"BFC50555-C084-46A3-9C9F-949C5E3BB448"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*","matchCriteriaId":"9C25D6E1-D283-4CEA-B47B-60C47A5C0797"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"AD18A446-C634-417E-86AC-B19B6DDDC856"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*","matchCriteriaId":"E4BB852E-61B2-4842-989F-C6C0C901A8D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*","matchCriteriaId":"24DD9D59-E2A2-4116-A887-39E8CC2004FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*","matchCriteriaId":"F28D7457-607E-4E0C-909A-413F91CFCD82"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108737059313829&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-526","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-12.xml","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-15.xml","source":"cve@mitre.org"},{"url":"http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/75_e.html","source":"cve@mitre.org"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:074","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10474","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10523","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.webmin.com/changes-1.150.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16334","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108737059313829&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/75_e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.webmin.com/changes-1.150.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16334","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0584","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Horde IMP 3.2.3 and earlier, before a \"security fix,\" does not properly validate input, which allows remote attackers to execute arbitrary script as other users via script or HTML in an e-mail message, possibly triggering a cross-site scripting (XSS) vulnerability."},{"lang":"es","value":"Vulnerabilidad desconocida en Hored-IMP 3.2.3 y anteriores, antes de un \"arreglo de seguridad\" no validan adecuadamente la entrada, lo que permite a atacantes remotos ejecutar script de su elección como otro usuario mediante script o HTML, posiblemente disparando una vulnerabilidad de secuencias de comandos en sitios cruzados (XSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8D2A8C5B-6155-4B40-B8C8-B4944064E3DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D11E08A4-79D6-46FE-880F-66E9778C298E"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"55A3894F-2E3F-49CA-BEE5-759D603F6EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDBDC41-7E6F-4C97-95BD-7DEB2D9FE837"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3B52D447-8E56-4E04-9650-38D222DA8D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1C455353-0401-4975-89BC-C23D32A684F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1D9D9E1-D8B7-4A56-BC2F-90BDC97322B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"59DE856E-98FF-4B49-BD7F-3E326FEB89EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"6ED34889-9F98-46BC-9176-557484272C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"B7FBC61D-6A08-4DE8-A5E5-A3FC57E7759D"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.3:*:*:*:*:*:*:*","matchCriteriaId":"E52AEEE6-2364-4CFB-9337-C5CCA54362E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AD137160-B80D-4C65-A9A9-CEE12107E3DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:3.1:*:*:*:*:*:*:*","matchCriteriaId":"4E6C2AC8-C21A-4152-AAE6-915ACE65CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1956C8F0-EB91-4322-85C1-6BE15AA13703"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:3.2:*:*:*:*:*:*:*","matchCriteriaId":"A48DEBEB-0C2D-4F6A-AF63-04990D2FD5AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8E004FA4-0180-458A-8E8C-8167EF684ED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1F0A1617-17D1-4C9F-A818-27321FD2FEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D86CDC19-43C3-4ACC-94B4-388BCC8A2203"}]}]}],"references":[{"url":"http://secunia.com/advisories/11805","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-11.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.horde.org/imp/3.2/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10501","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16357","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11805","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.horde.org/imp/3.2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16357","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0585","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2023-11-07T01:56:43.793","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-0589.  Reason: This candidate is a duplicate of CVE-2004-0589.  Notes: All CVE users should reference CVE-2004-0589 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-0586","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"acpRunner ActiveX 1.2.5.0 allows remote attackers to execute arbitrary code via the (1) DownLoadURL, (2) SaveFilePath, and (3) Download ActiveX methods."},{"lang":"es","value":"acpRunner ActiveX 1.2.5.0 permite a atacantes remotos ejecutar código de su elección mediante los métodos ActiveX (1) DownLoadURL, (2) SaveFilePath, y (3) Download."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:acprunner:1.2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C2ADDD71-0706-4C92-BA97-ACF8E98746D6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108745652205176&w=2","source":"cve@mitre.org"},{"url":"http://www-306.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-54588","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16429","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108745652205176&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-306.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-54588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0587","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service."},{"lang":"es","value":"Permisos inseguros en el fichero /proc/scsi/qla2300/HbaApiNode en Linux permite a usuarios locales causar una denegación de servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"052E3862-BFB7-42E7-889D-8590AFA8EF37"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D2E2EF3C-1379-4CBE-8FF5-DACD47834651"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc","source":"cve@mitre.org"},{"url":"http://lwn.net/Articles/91155/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010057","source":"cve@mitre.org"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:066","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_10_kernel.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-413.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-418.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10279","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16062","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9398","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lwn.net/Articles/91155/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_10_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-413.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-418.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16062","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9398","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0588","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is addressed in the following product update:\r\nUsermin, Usermin, 1.080","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo de correo web de Usermin 1.070 permite a atacantes remotos insertar HTML y scrpit de su elección mediante mensajes de correo electrónico."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.070:*:*:*:*:*:*:*","matchCriteriaId":"FC37A972-11D7-4C85-A8DC-5EDE808629F8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108781564518287&w=2","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-15.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/73_e.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10521","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16494","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108781564518287&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/73_e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16494","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0589","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 11.1(x) through 11.3(x) and 12.0(x) through 12.2(x), when configured for BGP routing, allows remote attackers to cause a denial of service (device reload) via malformed BGP (1) OPEN or (2) UPDATE messages."},{"lang":"es","value":"Cisco IOS 11.1 (x) a 11.3(x) y 12.0(x) a 12.2(x), cuando se configuran para encaminamiento BGP, permite a atacantes remotos causar una denegación de servicio (recarga de dipositivo) mediante mensajes BGP (1) OPEN o (2) UPDATE malformados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionStartIncluding":"11.1","versionEndIncluding":"12.2\\(14\\)sx2","matchCriteriaId":"B960C5F9-F47B-459E-BACE-E87EBDDAEDF3"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040616-bgp.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/784540","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16427","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4948","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040616-bgp.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/784540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0590","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS#7 certificates in which a self-signed certificate identifies an alternate Certificate Authority (CA) and spoofed issuer and subject."},{"lang":"es","value":"FreeS/WAN 1.x y 2.x, y otros productos relacionados, incluyendo superfreeswan 1.x, openswan 1.x anteriores a 1.0.6, openswan 2.x anteriores a 2.1.4 y strongSwan anteriores a 2.1.3 permite a atacantes remotos autenticarse usando certificados PKCS#7 falsificados en los que un certificado auto-firmado identifica a una Autoridad Certificadora (CA) y a un usuario y asunto suplantados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:frees_wan:frees_wan:1:*:*:*:*:*:*:*","matchCriteriaId":"10B562DF-7470-4C26-9989-0872DA521B44"},{"vulnerable":true,"criteria":"cpe:2.3:a:frees_wan:frees_wan:2:*:*:*:*:*:*:*","matchCriteriaId":"E5B02427-164D-4B6B-ACF1-662691FC6828"},{"vulnerable":true,"criteria":"cpe:2.3:a:frees_wan:super_frees_wan:1:*:*:*:*:*:*:*","matchCriteriaId":"4C94B5FB-8830-4217-BB07-36DAD9902259"},{"vulnerable":true,"criteria":"cpe:2.3:a:openswan:openswan:1:*:*:*:*:*:*:*","matchCriteriaId":"06740766-75C5-4EDA-8BFD-96C5E7AE1A73"},{"vulnerable":true,"criteria":"cpe:2.3:a:openswan:openswan:2:*:*:*:*:*:*:*","matchCriteriaId":"E54638CB-40EE-47D1-A373-1AEF85DE9405"},{"vulnerable":true,"criteria":"cpe:2.3:a:strongswan:strongswan:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.2","matchCriteriaId":"D62594D0-8847-4CC4-9AFD-3C216D429C5B"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200406-20.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:070","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openswan.org/support/vuln/can-2004-0590/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16515","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200406-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openswan.org/support/vuln/can-2004-0590/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16515","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0591","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is addressed in the following product release:\r\nInter7, SqWebMail, 4.0.5","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via (1) e-mail headers or (2) a message with a \"message/delivery-status\" MIME Content-Type."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la función print_header_uc de SqWebMail 4.0.4 y anteriores, y posiblemente 3.x, permite a atacantes remotos inyectar script web arbitrario o HTML mediante (1) cabeceras de correo electrónico o (2) un mensaje con un \"message/delivery-status\" MIME Content-Type."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:sqwebmail:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AF7483EB-CAC5-4D13-9E8C-3514E852C038"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108786212220140&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11918/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-533","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-02.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10588","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16467","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108786212220140&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11918/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16467","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0592","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The tcp_find_option function of the netfilter subsystem for IPv6 in the SUSE Linux 2.6.5 kernel with USAGI patches, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type, a similar flaw to CVE-2004-0626."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"4A917E95-0542-44BE-97D4-F199337A2FF9"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023408.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_20_kernel.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43137","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023408.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_20_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0593","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sygate Enforcer 3.5MR1 and earlier passes broadcast traffic before authentication, which could allow remote attackers to bypass filtering rules."},{"lang":"es","value":"Sygate Enforcer 3.5MR1 y anteriores permiten el paso de tráfico de multidifusión antes de la autenticación, lo que podría permitir a atacantes remotos saltarse las reglas de filtrado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sygate_technologies:enforcer:*:*:*:*:*:*:*:*","versionEndIncluding":"3.5mr1","matchCriteriaId":"F742DAFB-51AB-4D46-8523-C3990FAA7129"},{"vulnerable":true,"criteria":"cpe:2.3:a:sygate_technologies:secure_enterprise:3.0:*:*:*:*:*:*:*","matchCriteriaId":"A3A24DA8-81B3-4EDC-887A-2C0EEA4416EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sygate_technologies:secure_enterprise:3.5:*:*:*:*:*:*:*","matchCriteriaId":"1A39B208-887E-495A-9206-6CF11A8A6B83"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109215731626998&w=2","source":"cve@mitre.org"},{"url":"http://www.corsaire.com/advisories/c031120-003.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10908","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16948","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109215731626998&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.corsaire.com/advisories/c031120-003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0594","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete."},{"lang":"es","value":"La funcionalidad memory_limit de PHP 4.x a 4.3.7 y 5.x a 5.0.0RC3, bajo ciertas condiciones, como cuando register_globals está habilitado, permite a atacantes remotos ejecutar código de su elección disparando un aborto por memory_limit de la función zend_hash_init y sobrescribiendo un puntero de destructor de HashTable antes de que la incialización de las estructuras de datos clave se haya completado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-367"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:*","matchCriteriaId":"48A4B336-2D5B-4D9B-AA87-E5266FED05BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:2.1:*:*:*:*:*:*:*","matchCriteriaId":"37042CDE-E4FE-442E-891A-CD84433D36E2"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:converged_communications_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E586558A-ABC3-42EB-8B4D-DC92A0D695E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.00:*:*:*:*:*:*:*","matchCriteriaId":"54C09E05-4FAA-4893-BF36-9DD967525C4E"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.11:*:*:*:*:*:*:*","matchCriteriaId":"972D4ABF-2E80-4902-910D-5BD0CBEC9765"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.22:*:*:*:*:*:*:*","matchCriteriaId":"DE7425AE-26A6-48A4-B883-C6220FCAC32B"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*","matchCriteriaId":"12C73959-3E02-4847-8962-651D652800EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*","matchCriteriaId":"39605B96-BAD6-45C9-BB9A-43D6E2C51ADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"4.3.7","matchCriteriaId":"04AA8CFD-CEAD-455C-A96A-E1FE87196C86"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*","matchCriteriaId":"E727CECE-E452-489A-A42F-5A069D6AF80E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*","matchCriteriaId":"149A1FB8-593E-412B-8E1C-3E560301D500"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*","matchCriteriaId":"5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*","matchCriteriaId":"8FC144FA-8F84-44C0-B263-B639FEAD20FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*","matchCriteriaId":"295907B4-C3DE-4021-BE3B-A8826D4379E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*","matchCriteriaId":"DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023908.html","source":"cve@mitre.org","tags":["Broken Link","URL Repurposed"]},{"url":"http://marc.info/?l=bugtraq&m=108981780109154&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108982983426031&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109051444105182&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109181600614477&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-531","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2005/dsa-669","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-13.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:068","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2004_21_php4.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-392.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-395.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-405.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-816.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10725","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.trustix.org/errata/2004/0039/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16693","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10896","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023908.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","URL Repurposed"]},{"url":"http://marc.info/?l=bugtraq&m=108981780109154&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108982983426031&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109051444105182&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109181600614477&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2005/dsa-669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2004_21_php4.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-392.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-395.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-405.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-816.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.trustix.org/errata/2004/0039/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0595","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities."},{"lang":"es","value":"La función strip_tags en PHP 4.x hasta 4.3.7, y 5.x hasta 5.0.0RC3, no filtra caractéres null() dentro de nombreres de etiquetas cuanto se restringe la entrada a etiquetas permitidas, lo que permite que etiquetas peligrosas sean procesadas por navegadores como Internet Explorer y Safari, que ignoran caractéres nulos y facilita la explotación de vulnerabilidades de secuencias de comandos en sitios cruzados (XSS)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:converged_communications_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E586558A-ABC3-42EB-8B4D-DC92A0D695E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6996B14-925B-46B8-982F-3545328B506B"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*","matchCriteriaId":"39605B96-BAD6-45C9-BB9A-43D6E2C51ADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:integrated_management:*:*:*:*:*:*:*:*","matchCriteriaId":"D12D6986-429E-4152-A6E5-4CC1FB9556D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6713614A-B14E-4A85-BF89-ED780068FC68"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FD95F8EB-B428-4B3C-9254-A5DECE03A989"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"069EB7EE-06B9-454F-9007-8DE5DCA33C53"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"18BF5BE6-09EA-45AD-93BF-2BEF1742534E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EC1460DF-1687-4314-BF1A-01290B20302D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"470380B0-3982-48FC-871B-C8B43C81900D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"63190D9B-7958-4B93-87C6-E7D5A572F6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"4AAF4586-74FF-47C6-864B-656FDF3F33D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"5652D5B0-68E4-4239-B9B7-599AFCF4C53E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"57B71BB7-5239-4860-9100-8CABC3992D8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"72BD447A-4EED-482C-8F61-48FAD4FCF8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*","matchCriteriaId":"0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*","matchCriteriaId":"E3797AB5-9E49-4251-A212-B6E5D9996764"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*","matchCriteriaId":"D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"20C0BD87-CE4B-49D2-89BE-EF282C43AD72"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8300:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C3E6C4A8-59F4-43EE-8413-E95289037598"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"FE76357A-27E6-4D85-9AA0-1BB658C41568"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8500:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C56C5FDB-24E2-479D-87CA-164CD28567D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AEF6C16F-8EDF-4A24-BFEF-6A304D654EEB"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8700:r2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D982AE39-BB57-49E7-B5FE-5EF1ADE2F019"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023909.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108981780109154&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108982983426031&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109051444105182&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109181600614477&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-531","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2005/dsa-669","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-13.xml","source":"cve@mitre.org"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:068","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_21_php4.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-392.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-395.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-405.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-816.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10724","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16692","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10619","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023909.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108981780109154&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108982983426031&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109051444105182&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109181600614477&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2005/dsa-669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_21_php4.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-392.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-395.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-405.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-816.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0596","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Equalizer Load-balancer for serial network interfaces (eql.c) in Linux kernel 2.6.x up to 2.6.7 allows local users to cause a denial of service via a non-existent device name that triggers a null dereference."},{"lang":"es","value":"El equilibrador de carga Equalizer de interfaces de red serie (eql.c) en Linux kernel 2.6 a 2.6.7 permite a usuarios locales causar una denegación de servicio mediante un nombre de dispositivo no existente que dispara una desreferencia nula."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A0934C49-5F88-4189-BD88-2F32C39C2F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"}]}]}],"references":[{"url":"http://linux.bkbits.net:8080/linux-2.6/cset%4040d4aa72hPLWy-jMLr0eJAXMxHcNZg","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10730","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16694","source":"cve@mitre.org"},{"url":"http://linux.bkbits.net:8080/linux-2.6/cset%4040d4aa72hPLWy-jMLr0eJAXMxHcNZg","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10730","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16694","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0597","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.5","matchCriteriaId":"47DB11FB-C59F-4FE1-AF54-A8051F4A9FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:6.1:*:*:*:*:*:*:*","matchCriteriaId":"3E762116-01B1-472B-AA7E-AB95A7BF7F32"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:msn_messenger:6.2:*:*:*:*:*:*:*","matchCriteriaId":"95440454-0800-45FE-8ABA-79EE514A33ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*","matchCriteriaId":"3778BBD3-6C58-46DF-B1EB-ED02513CA8D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_messenger:5.0:*:*:*:*:*:*:*","matchCriteriaId":"CD613B31-5F2D-4A56-B2ED-03D1BEA51E6A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:second_edition:*:*:*:*:*","matchCriteriaId":"61A91537-7EB8-4A0D-8D86-ECA710F9650B"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000856","source":"cve@mitre.org"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00056.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109163866717909&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109181639602978&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109761239318458&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110796779903455&w=2","source":"cve@mitre.org"},{"url":"http://scary.beasts.org/security/CESA-2004-001.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22957","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22958","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200663-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-114816-02-1","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/downloads/detail.jsp?ftpID=2679","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.coresecurity.com/common/showdoc.php?idx=421&idxseccion=10","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-536","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-03.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/388984","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/817368","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:079","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:212","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:213","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_23_libpng.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-402.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-429.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10857","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/15495","source":"cve@mitre.org"},{"url":"http://www.trustix.net/errata/2004/0040/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-217A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-039A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1943","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-009","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16894","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11284","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2274","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2378","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4492","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A594","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7709","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109163866717909&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109181639602978&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109761239318458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110796779903455&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scary.beasts.org/security/CESA-2004-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200663-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-114816-02-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/downloads/detail.jsp?ftpID=2679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.coresecurity.com/common/showdoc.php?idx=421&idxseccion=10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/388984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/817368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_23_libpng.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-402.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-429.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/15495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.net/errata/2004/0040/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-217A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-039A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11284","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7709","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0598","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null dereference."},{"lang":"es","value":"La función png_handle_iCCP en libpng 1.2.5 y anteriores permite a atacantes remotos causar una denegación de servicio (caída de aplicación) mediante una cierta imagen PNG que dispara una desreferencia nula."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.5","matchCriteriaId":"47DB11FB-C59F-4FE1-AF54-A8051F4A9FD4"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000856","source":"cve@mitre.org"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00056.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109163866717909&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109181639602978&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109761239318458&w=2","source":"cve@mitre.org"},{"url":"http://scary.beasts.org/security/CESA-2004-001.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22957","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22958","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200663-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-536","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-03.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/236656","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:079","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:212","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:213","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_23_libpng.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-402.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-429.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10857","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.trustix.net/errata/2004/0040/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-217A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1943","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16895","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10203","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2572","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109163866717909&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109181639602978&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109761239318458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scary.beasts.org/security/CESA-2004-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200663-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/236656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_23_libpng.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-402.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-429.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.trustix.net/errata/2004/0040/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-217A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2572","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0599","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image."},{"lang":"es","value":"Múltiples desbordamientos de enteros en las funciónes (1) png_read o (2) png_handle_sPLT o la capacidad (3) visualización progresiva de imagen en libpng 1.2.5 y anteriores permiten a atacantes remotos causar una denegación de servicio (caída de aplicación) mediante una imagen PNG malformada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.5","matchCriteriaId":"47DB11FB-C59F-4FE1-AF54-A8051F4A9FD4"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000856","source":"cve@mitre.org"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00056.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109163866717909&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109181639602978&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109761239318458&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"cve@mitre.org"},{"url":"http://scary.beasts.org/security/CESA-2004-001.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22957","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22958","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200663-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-536","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-570","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-571","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-03.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/160448","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/286464","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/477512","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:079","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:212","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:213","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_23_libpng.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-402.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-429.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10857","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/15495","source":"cve@mitre.org"},{"url":"http://www.trustix.net/errata/2004/0040/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-217A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1943","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16896","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10938","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1479","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109163866717909&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109181639602978&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109761239318458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scary.beasts.org/security/CESA-2004-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200663-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/160448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/286464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/477512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:212","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_23_libpng.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-402.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-429.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/15495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.net/errata/2004/0040/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-217A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16896","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1479","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0600","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication."},{"lang":"es","value":"Desbordamiento de búfer en la Herramienta de Adminstración Web de Samba (SWAT) en Samba 3.0.2 a 3.0.4 permite a atacantes remotos ejecutar código de su elección mediante un carácter en base-64 inválido durante autenticación básica HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"898968E5-577E-4B86-A804-EBEC67157A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"920EF846-41D1-429D-AF0F-3D7950F93069"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8016DC4F-F410-4401-BDCC-91BE0D44D028"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DC94A2CF-85DF-4BB5-8F78-470A3454C3CC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*","matchCriteriaId":"39605B96-BAD6-45C9-BB9A-43D6E2C51ADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000851","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000854","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109051340810458&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109051533021376&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109052647928375&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109052891507263&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109053195818351&w=2","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml","source":"cve@mitre.org"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_22_samba.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-259.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0039/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16785","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11445","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109051340810458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109051533021376&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109052647928375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109052891507263&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109053195818351&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_22_samba.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-259.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0039/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11445","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0601","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which could allow remote attackers to bypass intended restrictions."},{"lang":"es","value":"distcc anteriores a 2.16, cuando se ejecutan en plataformas de 64 bits, no interpreta reglas de control de acceso basadas en IP correctamente, lo que podría permitir a atacantes remotos sortear las restricciones pretendidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:distcc:distcc:2.7:*:*:*:*:*:*:*","matchCriteriaId":"D2BC13FB-BDC0-4BAC-A86D-976C8D8E5CB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:distcc:distcc:2.9:*:*:*:*:*:*:*","matchCriteriaId":"76F3AAEE-29ED-46ED-8EB2-CEEFF9D26143"},{"vulnerable":true,"criteria":"cpe:2.3:a:distcc:distcc:2.10:*:*:*:*:*:*:*","matchCriteriaId":"BE198B2A-861F-4C2D-B561-BF5D247DBC01"},{"vulnerable":true,"criteria":"cpe:2.3:a:distcc:distcc:2.11:*:*:*:*:*:*:*","matchCriteriaId":"3D1C8E5F-F557-4C67-B64C-EEEB90E4451B"},{"vulnerable":true,"criteria":"cpe:2.3:a:distcc:distcc:2.12:*:*:*:*:*:*:*","matchCriteriaId":"B43EC657-653E-4871-B2E4-4F69B3FEFEB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:distcc:distcc:2.13:*:*:*:*:*:*:*","matchCriteriaId":"C05727B9-068C-4889-A2CC-5922C5B18D1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:distcc:distcc:2.14:*:*:*:*:*:*:*","matchCriteriaId":"F6A4DFA3-111C-47DC-89B8-ABD43394A5EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:distcc:distcc:2.15:*:*:*:*:*:*:*","matchCriteriaId":"2F30BF94-5B03-42DF-B7BB-CBE1265E0E10"}]}]}],"references":[{"url":"http://distcc.samba.org/ftp/distcc/distcc-2.17.NEWS","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12711/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11319","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17581","source":"cve@mitre.org"},{"url":"http://distcc.samba.org/ftp/distcc/distcc-2.17.NEWS","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12711/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17581","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0602","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The binary compatibility mode for FreeBSD 4.x and 5.x does not properly handle certain Linux system calls, which could allow local users to access kernel memory to gain privileges or cause a system panic."},{"lang":"es","value":"El modo de compatibilidad binaria de FreeBSD 4.x y 5.x no maneja adecuadamente ciertas llamadas al sistema de Linux, lo que podría permitir a usuarios locales acceder a memoria del kernel para ganar privilegios o causar un pánico de sistema."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:13.linux.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10643","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16558","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:13.linux.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0603","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary commands, a different vulnerability than CVE-1999-1332."},{"lang":"es","value":"gzexe en gzip 1.3.3 y anteriores ejecutaran un argumento cuando la creación de un fichero temporal falla, en lugar de terminar el programa, lo que podría permitir a atacantes remotos o usuarios locales ejecutar órdenes de su elección, una vulnerabilidad diferente de CVE-1999-1332."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gzip:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.3","matchCriteriaId":"8844C001-C8AA-4D1F-A22E-0314AD0807AD"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=54890","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200406-18.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10603","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16506","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=54890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200406-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16506","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0604","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (crash), possibly via an empty search query, which triggers a NULL dereference."},{"lang":"es","value":"El cliente y servidor HTTP de giFT-FastTrack 0.8.6 y anteriores permite a atacantes remotos causar una denegación de servicio (caída), posiblemente mediante una consulta de búsqueda vacía, lo que dispara una desreferencia de puntero NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gift-fasttrack:gift-fasttrack:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"CB437534-BD0F-462E-862B-775047FABB64"},{"vulnerable":true,"criteria":"cpe:2.3:a:gift-fasttrack:gift-fasttrack:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"3AD16718-C370-4CA0-B6F5-F1F9264A3C90"},{"vulnerable":true,"criteria":"cpe:2.3:a:gift-fasttrack:gift-fasttrack:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"21C162E1-C3CD-4F04-8CFB-3360EDE0ADB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gift-fasttrack:gift-fasttrack:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"827DF368-F159-4F39-ADB0-21A3BD4A987B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gift-fasttrack:gift-fasttrack:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"797CE73B-BB47-4C7D-9DEC-CD68678E84D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gift-fasttrack:gift-fasttrack:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"0029E52F-CDCC-4371-92C5-5AC974EACB7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gift-fasttrack:gift-fasttrack:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"3582C842-6940-4C5D-B2CA-3221114089B8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"}]}]}],"references":[{"url":"http://developer.berlios.de/bugs/?func=detailbug&bug_id=1573&group_id=809","source":"cve@mitre.org"},{"url":"http://gift-fasttrack.berlios.de/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11941/","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-19.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10604","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16508","source":"cve@mitre.org"},{"url":"http://developer.berlios.de/bugs/?func=detailbug&bug_id=1573&group_id=809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gift-fasttrack.berlios.de/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11941/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200406-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16508","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0605","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued."},{"lang":"es","value":"Usuarios de IRC no registrados usando (1) ircd-hybrid 7.0.1 y anteriores (2) ircd-ratbox 1.5.1 y anteriores, o (3) ircd-ratbox 2.0rc6 o anteriores no tienen un límite de transferencia impuesto, lo que podría permitir a atacantes remotos causar una denegación de servicio haciendo peticiones repetidamente, que son desencoladas lentamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ircd-hybrid:ircd-hybrid:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.1","matchCriteriaId":"788A7062-A8F3-44C0-AC08-EA6AF173D18C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ircd-ratbox:ircd-ratbox:*:*:*:*:*:*:*:*","versionEndIncluding":"1.5.1","matchCriteriaId":"15B792C8-7B97-463F-89FB-E9507B108910"},{"vulnerable":true,"criteria":"cpe:2.3:a:ircd-ratbox:ircd-ratbox:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0_rc6","matchCriteriaId":"A0DB6A94-31D2-472B-A895-6B5A7D1D9EED"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108766803817406&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10572","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16457","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108766803817406&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16457","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0606","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the (1) CLIENTID or (2) HOSTNAME option of a DHCP request."},{"lang":"es","value":"Vulnerabilidad de scripts en sitios cruzados (XSS) en Infoblox DNS One con firmware 2.4.0-8 permite a atacantes remotos ejecutar scripts como otros usuarios mediante la opción (1) CLIENTID o (2) HOSTNAME de una petición DHCP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:infoblox:dns_one_appliance:2.4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6F2E2A23-2579-4AE3-85BE-645D1872F897"},{"vulnerable":true,"criteria":"cpe:2.3:h:infoblox:dns_one_appliance:2.4.0.8a:*:*:*:*:*:*:*","matchCriteriaId":"5F7371DD-6617-43B0-B503-46200857E203"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108769996925349&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16456","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108769996925349&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0607","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication."},{"lang":"es","value":"La función eay_check_x509cert en KAME Racoon verifica como buenos certificados incluso cuando la validación OpenSLL falla, lo que podría permitir a atacantes remotos saltarse la autenticación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3:*:*:*:*:*:*:*","matchCriteriaId":"ADAAFB6A-A22F-4539-8B12-AD5BE5829208"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E7BC2543-F91E-40A0-AF3D-47A8EC7A5FC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"30B05AF4-3F58-439D-BADD-C9758C4BBA0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"6B925C34-CB57-443E-8190-34D490377F49"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc2:*:*:*:*:*:*:*","matchCriteriaId":"F534ABF0-F79F-4BDD-AD0C-705868AD72C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9CDF7C24-5329-491C-B5F5-E2C2513B244C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc4:*:*:*:*:*:*:*","matchCriteriaId":"69EE38D7-0EC3-4349-ADA6-121D0A0C2DE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipsec-tools:ipsec-tools:0.3_rc5:*:*:*:*:*:*:*","matchCriteriaId":"947B349F-6D8D-4EE2-8350-F544F8B152C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kame:racoon:*:*:*:*:*:*:*:*","matchCriteriaId":"E477F0A9-8027-435B-8F99-A15D1D74220A"},{"vulnerable":true,"criteria":"cpe:2.3:a:kame:racoon:2003-07-11:*:*:*:*:*:*:*","matchCriteriaId":"F311F249-417C-4514-A144-E21A57078574"},{"vulnerable":true,"criteria":"cpe:2.3:a:kame:racoon:2004-04-05:*:*:*:*:*:*:*","matchCriteriaId":"AC1BA7DD-5218-41A0-9D5F-79A45D22A2A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kame:racoon:2004-04-07b:*:*:*:*:*:*:*","matchCriteriaId":"92E51298-8789-44B0-B64F-6D8D90034404"},{"vulnerable":true,"criteria":"cpe:2.3:a:kame:racoon:2004-05-03:*:*:*:*:*:*:*","matchCriteriaId":"75ABB0EA-A057-486E-BD66-3378B28545BD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*","matchCriteriaId":"81B543F9-C209-46C2-B0AE-E14818A6992E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*","matchCriteriaId":"DB89C970-DE94-4E09-A90A-077DB83AD156"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108726102304507&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108731967126033&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11863","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11877","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200406-17.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010495","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=245982","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7113","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-308.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10546","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16414","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9163","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108726102304507&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108731967126033&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200406-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=245982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-308.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0608","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP 7710 and earlier, Unreal Tournament 451b and earlier, Unreal Tournament 2003 2225 and earlier, Unreal Tournament 2004 before 3236, Wheel of Time 333b and earlier, and X-com Enforcer, allows remote attackers to execute arbitrary code via a UDP packet containing a secure query with a long value, which overwrites memory."},{"lang":"es","value":"El Motor de Unreal, usado en in DeusEx 1.112fm y anteriores, , Devastation 390 y anteriores, Mobile Forces 20000 y anteriores, Nerf Arena Blast 1.2 y anteriores, Postal 2 1337 y anteriores, Rune 107 y anteriores, Tactical Ops 3.4.0 y anteriores, Unreal 1 226f y anteriores, Unreal II XMP 7710 y anteriores, Unreal Tournament 451b y anteriores, Unreal Tournament 2003 2225 y anteriores, Unreal Tournament 2004 anteriores a 3236, Wheel of Time 333b y anteriores, and X-com Enforcer permite a atacantes remotos ejecutar código de su elección mediante un paquete UDP conteniendo una consulta segura con un valor largo, lo que sobreescribe memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arush:devastation:390.0:*:*:*:*:*:*:*","matchCriteriaId":"91455172-A4E9-4FFE-A8BA-7F42A57E0178"},{"vulnerable":true,"criteria":"cpe:2.3:a:dreamforge:tnn_outdoors_pro_hunter:*:*:*:*:*:*:*:*","matchCriteriaId":"1E1B27DC-C23A-4B9C-8BB6-8CE1CE96D834"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_engine:226f:*:*:*:*:*:*:*","matchCriteriaId":"A99F5526-E641-464B-83A3-A9AF27AC287D"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_engine:433:*:*:*:*:*:*:*","matchCriteriaId":"BBC39AE7-3145-4095-A471-C1668CAB8F97"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_engine:436:*:*:*:*:*:*:*","matchCriteriaId":"93D14650-A8AC-4CBB-9968-0EF215623DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament:451b:*:*:*:*:*:*:*","matchCriteriaId":"97F32E3A-5AAA-4339-9D13-683503ED1583"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_2003:2199_linux:*:*:*:*:*:*:*","matchCriteriaId":"48CB8C40-600B-47E5-95C7-69CC45511FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_2003:2199_macos:*:*:*:*:*:*:*","matchCriteriaId":"74616692-4F51-48F6-9359-4BB7D669B01A"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_2003:2199_win32:*:*:*:*:*:*:*","matchCriteriaId":"1971DEBD-F042-438D-B335-4D8BF3304EF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_2003:2225_macos:*:*:*:*:*:*:*","matchCriteriaId":"BA13D42B-7EF0-4D3E-94B4-6E0CDBB4DF1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_2003:2225_win32:*:*:*:*:*:*:*","matchCriteriaId":"69B75B3F-99B7-497E-9E1E-C49520E971D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_2004:macos:*:*:*:*:*:*:*","matchCriteriaId":"B5FF117A-F923-4891-9AE5-19791F71215C"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_2004:win32:*:*:*:*:*:*:*","matchCriteriaId":"B2C8FA0D-6FEA-4C92-9759-067D96C09F8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:infogrames:tacticalops:3.4:*:*:*:*:*:*:*","matchCriteriaId":"F409A702-F5EE-429C-A208-E7A8693FCDBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:infogrames:x-com_enforcer:*:*:*:*:*:*:*:*","matchCriteriaId":"BB1D7911-0A9A-4771-AC16-7B1017A0A094"},{"vulnerable":true,"criteria":"cpe:2.3:a:ion_storm:deusex:1.112_fm:*:*:*:*:*:*:*","matchCriteriaId":"3F029653-AF84-45D8-9508-0C65307415B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nerf_arena_blast:nerf_arena_blast:1.2:*:*:*:*:*:*:*","matchCriteriaId":"F8DAD171-F434-4299-B5F5-BAF843BC55DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rage_software:mobile_forces:20000.0:*:*:*:*:*:*:*","matchCriteriaId":"26EFB617-24C2-4FCD-AEDB-CEE4B37C6264"},{"vulnerable":true,"criteria":"cpe:2.3:a:robert_jordan:wheel_of_time:333.0b:*:*:*:*:*:*:*","matchCriteriaId":"8A8B1ED2-CACC-4FA2-9F59-E87AC64C448A"},{"vulnerable":true,"criteria":"cpe:2.3:a:running_with_scissors:postal_2:1337:*:*:*:*:*:*:*","matchCriteriaId":"9AE50091-3C88-45F1-86A3-417886D6A97E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/unsecure-adv.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108787105023304&w=2","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-14.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10570","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16451","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/unsecure-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108787105023304&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10570","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16451","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0609","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine the existence of files in a directory outside the jail."},{"lang":"es","value":"rssh 2.0 a 2.1.x expanden argumentos de línea de comandos antes de entrar en una jaula chroot, lo que permite a usuarios remotos autenticaos determinar la existencia de de ficheros en un directorio fuera de la jaula."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rssh:rssh:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F3708773-21D3-4A11-A259-B9E8E81F916E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rssh:rssh:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5F835C18-5D15-43FD-B009-E7332E51A8AC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108787373022844&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10574","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16470","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108787373022844&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16470","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0610","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of service (connection refusal) via a large number of open HTTP connections."},{"lang":"es","value":"El interfaz de administración Web de Microsoft MN-500 Wireless Router permite a atacantes remotos causar una denegación de servicio (rechazo de conexión) mediante un número largo de conexiones HTTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:microsoft:mn-500_wireless_base_station:*:*:*:*:*:*:*:*","matchCriteriaId":"66139625-499B-4A93-99BA-20301DB220AF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108796481501258&w=2","source":"cve@mitre.org"},{"url":"http://www.kurczaba.com/securityadvisories/0406213.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10585","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16448","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108796481501258&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kurczaba.com/securityadvisories/0406213.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16448","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0611","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service (no new connections) via a large number of open HTTP connections."},{"lang":"es","value":"La administración basada en web de Netgear FVS318 VPN Router permite a atacantes remotos causar una denegación de servicio (impide conexiones nuevas) mediante un gran número de conexiones HTTP abiertas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:fvs318:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3DF4C288-1EA1-4DD4-A8A8-9A6899F20FF0"},{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:fvs318:1.1:*:*:*:*:*:*:*","matchCriteriaId":"EE59DCA1-F551-46D8-8B80-F9F902F4D5FD"},{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:fvs318:1.2:*:*:*:*:*:*:*","matchCriteriaId":"CEBE1D04-920F-4499-BA10-AF5D9B2DC02A"},{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:fvs318:1.3:*:*:*:*:*:*:*","matchCriteriaId":"D3302AB1-B9EB-4137-98E7-0A9083755BA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108787199201059&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10585","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16462","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108787199201059&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16462","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0612","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which could allow remote attackers to bypass the mobile code filtering.  NOTE: it has been disputed by the vendor that this behavior is required by the SSL specification."},{"lang":"es","value":"El filtro de Código Móvil en ZoneAlarm PRO 5.0.590.015 no filtra código móvil dentro de una sesión SSL cifrada, lo que podría permitir a un atacanter remoto saltarse el filtrado de código móvil. NOTA: El vendedor ha manifestado que esta conducta es requerida por la especificación SLL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:5.0.590.015:*:pro:*:*:*:*:*","matchCriteriaId":"50E6E82F-5197-46D1-A0DE-F105177288C5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0420.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108786444608208&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10584","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16471","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0420.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108786444608208&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10584","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16471","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0613","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory."},{"lang":"es","value":"osTicket permite a atacantes remotos ver ficheros sensibles subidos y posiblemente ejecutar código de su elección mediante una petición HTTP que sube un fichero PHP al directorio de adjuntos de tiques."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osticket:osticket_sts:1.2:*:*:*:*:*:*:*","matchCriteriaId":"00CBCE49-FA09-47BD-9584-486B32D58EFB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108786779500957&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10586","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16477","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16478","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108786779500957&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16477","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16478","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0614","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to upload a file of any size."},{"lang":"es","value":"osTicket confía en un campo oculto en el formulario de envío  para limitar el tamaño de subida de un documento, lo que podría permitir a atacantes remotos subir ficheros de cualquier tamaño."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:osticket:osticket_sts:*:*:*:*:*:*:*:*","matchCriteriaId":"FECF6170-D1CA-4DAB-8375-0F602DC24F1F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108786779500957&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16477","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108786779500957&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16477","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0615","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en D-Link DI-614+ SOHO router corriendo firmware 2.30 y DI-704 SOHO Router corriendo firmware 2.60B2 permite a atacantes remotos inyectar script arbitrario o HTML mediante la opción DHCP HOSTNAME en una petición DHCP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:di-614\\+:2.30:*:*:*:*:*:*:*","matchCriteriaId":"FFBD013A-695E-41C7-BD1A-9D684CE86C54"},{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:di-704p:2.60b2:*:*:*:*:*:*:*","matchCriteriaId":"CB5DFEBE-C6A9-429E-A265-86037F0CD507"},{"vulnerable":true,"criteria":"cpe:2.3:h:dlink:di-624:*:*:*:*:*:*:*:*","versionEndIncluding":"1.28","matchCriteriaId":"2A5E7B2F-9DCF-478C-B9C4-3ED4C05E2387"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-07/0014.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108786257609932&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108797273127182&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11919","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010562","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7211","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10587","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16468","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-07/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108786257609932&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108797273127182&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11919","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16468","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0616","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive information such as the password, which is stored in plaintext."},{"lang":"es","value":"El encaminador ADSL inalámbrico BT Voyager 2000 tiene un nombre de comunidad SNMP público por defecto, lo que permite a atacantes remotos obtener información sensible, como la contraseña, que se almacena en texto claro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:bt:voyager_2000_wireless_adsl_router:*:*:*:*:*:*:*:*","matchCriteriaId":"7CCB0AC5-1C40-4E6E-803D-20A3D3B3B036"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0710.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108794963119034&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10589","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16472","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0710.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108794963119034&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16472","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0617","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ArbitroWeb 0.6 allows remote attackers to inject arbitrary script or HTML via the rawURL parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en ArbitroWeb 0.6 permite a atacantes remotos inyectar script web arbitrario o HTML mediante el parámetro rawURL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arbitroweb:arbitroweb:0.5:*:*:*:*:*:*:*","matchCriteriaId":"ABF93446-2A86-4287-9487-1D1FFE9152A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:arbitroweb:arbitroweb:0.6:*:*:*:*:*:*:*","matchCriteriaId":"72C0DDFC-0D1D-46FA-A52A-0BB6B7E520DD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108794392303244&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10592","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16481","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108794392303244&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16481","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0618","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call with an unaligned memory address as an argument."},{"lang":"es","value":"FreeBSD 5.1 para procesadores Alfa permite a usuarios locales causar una denegación de servicio (caída) mediante una llamada de sistema con una dirección de memoria no alineada como argumento."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*","matchCriteriaId":"4ECDEC87-0132-46B6-BD9B-A94F9B669EAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*","matchCriteriaId":"15C4D826-A419-45F5-B91C-1445DB480916"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*","matchCriteriaId":"0D9F2B04-A1F2-4788-A53D-C8274A758DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*","matchCriteriaId":"FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*","matchCriteriaId":"9A5309ED-D84F-4F52-9864-5B0FEEEE5022"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*","matchCriteriaId":"C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108816603102865&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10596","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16499","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108816603102865&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0619","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a negative add_dsa_buf_bytes variable, which leads to a buffer overflow."},{"lang":"es","value":"Desbordamiento de enteros en la función ubsec_keysetup del controlador de Linux Broadcom 5820 cryptonet permite a usuarios locales causar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante una variable add_dsa_buf_bytes negativa, lo que conduce a un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"038FEDE7-986F-4CA5-9003-BA68352B87D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:8.0:*:i386:*:*:*:*:*","matchCriteriaId":"4D1E6298-EDF5-438F-8DFD-16A514CB938A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:8.0:*:i686:*:*:*:*:*","matchCriteriaId":"75D77C6F-2125-4548-86ED-70A48E2D335A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel:2.4.20-8:*:athlon:*:*:*:*:*","matchCriteriaId":"36393930-7292-4AEC-8E1E-3D0019934AFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel:2.4.20-8:*:athlon_smp:*:*:*:*:*","matchCriteriaId":"C2618F2F-042B-4938-A7C8-2C2D1C387D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel:2.4.20-8:*:i386:*:*:*:*:*","matchCriteriaId":"862D6BE3-0712-4745-A0A6-EE6B3F1542AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel:2.4.20-8:*:i386_src:*:*:*:*:*","matchCriteriaId":"41A053DD-92F8-4DC7-B331-D462AF3CEB19"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel:2.4.20-8:*:i586:*:*:*:*:*","matchCriteriaId":"28076543-85FB-4ED8-9EB2-F3C235CC2D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel:2.4.20-8:*:i586_smp:*:*:*:*:*","matchCriteriaId":"8A2D5C8E-D36C-4DF2-B02B-A7AEA5E2F89B"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel:2.4.20-8:*:i686:*:*:*:*:*","matchCriteriaId":"B965D3F0-6FF5-405D-BF47-B59D3B264E50"},{"vulnerable":true,"criteria":"cpe:2.3:a:redhat:kernel:2.4.20-8:*:i686_smp:*:*:*:*:*","matchCriteriaId":"DA772F5D-5C17-4FEA-AD80-8FCC82627817"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108802653409053&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11936","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/p-047.shtml","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-549.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-283.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10599","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16459","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9773","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108802653409053&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11936","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/p-047.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-549.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-283.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10599","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9773","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0620","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attackers to inject arbitrary HTML or script as other users via the Edit-panel."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en (1) newreply.php o (2) newthread.php en vBulletin 3.0.1 permite a atacantes remotos inyectar HTML arbitrario o script como otros usuarios mediante el panel edición."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"90BE006A-0F2D-4F3A-A335-176C5A5978E9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108809720026642&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10602","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16502","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108809720026642&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0621","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list_user operation with the ulevel parameter set to 1 (administrator level), which lists all users and their passwords."},{"lang":"es","value":"admin.php de Newsletter ZWS permite a atacantes remotos ganar privilegios administrativos mediante una operación list_user con el parámetro ulevel establecido a 1 (nivel de administrador), lo que lista todos los usuarios y sus contraseñas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zaireweb_solutions:newsletter_zws:*:*:*:*:*:*:*:*","matchCriteriaId":"1FD071DF-FF0A-4F9B-86E6-F69055C5896C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108811585025216&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10605","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16507","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108811585025216&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16507","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0622","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow.app), Keychain, or FileVault passwords, which could allow the root user or an attacker with physical access to obtain sensitive information by reading memory."},{"lang":"es","value":"Mac OS 10.3.4 no limpia adecuadamente la memoria de  contraseñas de inicio de sesión de usuario, de Keychain o FileVault, lo que podría permitir al usuario root o a un atacante con acceso físico obtener información sensible leyendo la memoria."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*","matchCriteriaId":"D2442D35-7484-43D8-9077-3FDF63104816"}]}]}],"references":[{"url":"http://citp.princeton.edu/pub/coldboot.pdf","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108819559925981&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488930/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/488948/100/100/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16557","source":"cve@mitre.org"},{"url":"http://citp.princeton.edu/pub/coldboot.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108819559925981&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488930/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/488948/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16557","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0623","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en misc.c en GNU GNATS 4.00 puede permitir a atacantes remotos ejecuta código arbitrario mediante especificadores de cadena de formato en una cadena que sea registrada por syslog"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnats:3.0_02:*:*:*:*:*:*:*","matchCriteriaId":"D782EE2F-BCEA-4402-A452-7C2953EBD4E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnats:3.2:*:*:*:*:*:*:*","matchCriteriaId":"C5E274B9-3E07-407D-8846-6B80EB342445"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnats:3.14b:*:*:*:*:*:*:*","matchCriteriaId":"9661650F-BE82-4FFD-9961-2E3502F4E542"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnats:3.113:*:*:*:*:*:*:*","matchCriteriaId":"33B4363E-E996-4165-9829-7637E896EDAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnats:3.113.1:*:*:*:*:*:*:*","matchCriteriaId":"52DC78C7-1171-41EF-9654-93D04ED0C0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnats:3.113.1.6:*:*:*:*:*:*:*","matchCriteriaId":"DD908890-97DB-4E97-A92F-B96A486E771E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnats:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E41302A2-137C-4F61-967D-7EBBBD692AC8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108820000823191&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10609","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16517","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108820000823191&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16517","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0624","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php for Artmedic links 5.0 (artmedic_links5) allows remote attackers to execute arbitrary PHP code by modifying the id parameter to reference a URL on a remote web server that contains the code."},{"lang":"es","value":"Vulnerabiliad de inyección remota de código PHP en index.php de Artmedic links 5.0 (artmedic_links5) permite a atacantes remotos ejecutar código PHP de su elección modificando el parámetro id para referenciar a una URL en un servidor web remoto que contiene el código."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:artmedic_webdesign:artmedic_links:5.0:*:*:*:*:*:*:*","matchCriteriaId":"43E1FDC4-5444-4F1A-98CF-D3ACFC76B739"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108820257812904&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16518","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108820257812904&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0625","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en Infinity WEB 1.0 permite a atacantes remotos saltarse la autenticación y ganar privilegios mediante la página de inicio de sesión."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:websoft:infinity_web:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4B5A98EA-805F-4EC0-93BB-8AE85D4B89C5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0893.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108844087931959&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10614","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zone-h.org/en/advisories/read/id=4892/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16513","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0893.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108844087931959&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.zone-h.org/en/advisories/read/id=4892/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0626","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The tcp_find_option function of the netfilter subsystem in Linux kernel 2.6, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type."},{"lang":"es","value":"La función tcp_find_option del subsistema netfilter del kernel 2.6 de Linux, cuando se usan iptables y reglas de opciones TCP, permite a atacantes remotos causar una denegación de servicio (consumición de CPU por bucle infinito) mediante una opción de longitud larga que produce un entero negativo después de una conversión de tipos a char."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:10:*:*:*:*:*:*:*","matchCriteriaId":"1AB8B4DC-5A39-4349-A90A-F14018DBBDD5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lwn.net/Articles/91964/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108861141304495&w=2","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-12.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_20_kernel.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16554","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lwn.net/Articles/91964/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108861141304495&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_20_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16554","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0627","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string."},{"lang":"es","value":"La función check_scramble_323 de MySQL 4.1x anteriores a 4.1.4, y 5.0, permite a atacantes remotos saltarse la autenticación mediente una cadena revuelta de longitud cero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CFEDB808-A8D8-403E-9103-AB486C793EF7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108904917528205&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/184030","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108904917528205&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/184030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]}]}},{"cve":{"id":"CVE-2004-0628","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long scramble string."},{"lang":"es","value":"Desbordamiento basado en la pila en MySQL 4.1.x anteriores a 4.1.3, y 5.0 permite a atacantes remotos causar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante una cadena de permutación (scramble)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CFEDB808-A8D8-403E-9103-AB486C793EF7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108904917528205&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/645326","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16612","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108904917528205&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/645326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16612","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0629","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote attackers to execute arbitrary code via a URI for a PDF file with a null terminator (%00) followed by a long string."},{"lang":"es","value":"Desbordamiento de búfer en el componente ActiveX (pdf.ocx) de Adobe Acrobat 5.0.5 y Acrobat Reader, y posiblemente otras versiones, permite a atacantes remotos ejecutar código de su elección mediante una URI de un fichero PDF con un terminador nulo (%00) seguido por una cadena larga."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:5.0:*:*:*:*:*:*:*","matchCriteriaId":"201F059D-33D1-4D9F-9C6F-FC8EB49E4735"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B025E795-5713-485E-8A15-EBE4451A1A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*","matchCriteriaId":"183B5940-2310-4D2E-99F0-9792A801A442"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F8BB13E-2732-4F9E-A588-EA1C00893C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E5FCDCBF-597B-439C-8D8B-2819FC70C567"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*","matchCriteriaId":"5F0FCA2F-FD7F-4CE5-9D45-324A7EC45105"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EF7EAA22-CED2-4379-9465-9562BACB1C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.1:*:*:*:*:*:*:*","matchCriteriaId":"ACF742B8-5F7A-487B-835C-756B1BB392F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C0BB7C0C-B1D6-4733-BA91-022A1A7FB2E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0B131DB8-4B6A-4AF2-8D5E-B5EA1AEBFB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5B9351C2-16ED-4766-B417-8DB3A8766C2F"}]}]}],"references":[{"url":"http://www.adobe.com/support/techdocs/330527.html","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-14.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=126&type=vulnerabilities","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10947","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16998","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/techdocs/330527.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=126&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0630","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters (\"`\" or backtick) in the filename of the PDF file that is provided to the uudecode command."},{"lang":"es","value":"La caractérística uudecoding en Adobe Acrobat Reader 5.0.5 a 5.0.6 para Unix y Linux, y posiblemente otras versiones incluyendo aquellas anteriores a 5.0.9, permite a atacantes remotos ejecutar código arbitrario mediante metacaractéres de shell (\"`\" o comilla invertida) en el nombre del fichero que es suministrado a la orden uudecode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*","matchCriteriaId":"5F0FCA2F-FD7F-4CE5-9D45-324A7EC45105"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EF7EAA22-CED2-4379-9465-9562BACB1C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"35B1CA6B-600C-4E03-B4D5-3D7E1BC4D0F9"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200408-14.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/techdocs/322914.html","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=124&type=vulnerabilities","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-432.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10931","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16973","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200408-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/techdocs/322914.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=124&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-432.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16973","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0631","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via a long filename for the PDF file that is provided to the uudecode command."},{"lang":"es","value":"Desbordamiento de búfer en la característica uudecoding de Adobe Acrobat Reader 5.0.5 y 5.0.6 de Unix y Linux, u posiblemente otras versiones incluyendo aquellas anteriores a 5.0.9, permite a atacantes remotos ejecutar código de su elección mediane un nombre de fichero largo para el PDF que es suministrado a al orden uudecode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0:*:*:*:*:*:*:*","matchCriteriaId":"5F0FCA2F-FD7F-4CE5-9D45-324A7EC45105"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EF7EAA22-CED2-4379-9465-9562BACB1C20"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"35B1CA6B-600C-4E03-B4D5-3D7E1BC4D0F9"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200408-14.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/techdocs/322914.html","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=125&type=vulnerabilities","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-432.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10932","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16972","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200408-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.adobe.com/support/techdocs/322914.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=125&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-432.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16972","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0632","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow."},{"lang":"es","value":"Adobe Reader 6.0 no maneja adecuadamente caractéres nulos cuando divide la ruta de un archivo en sus componentes, lo que permite a atacantes remotos ejecutar código de su elección mediante un fichero con una extensión larga que no es normalmente manejada por Reader, disparando un desbordameinteo de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*","matchCriteriaId":"183B5940-2310-4D2E-99F0-9792A801A442"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F8BB13E-2732-4F9E-A588-EA1C00893C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C0BB7C0C-B1D6-4733-BA91-022A1A7FB2E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0B131DB8-4B6A-4AF2-8D5E-B5EA1AEBFB3B"}]}]}],"references":[{"url":"http://www.adobe.com/support/techdocs/330527.html","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/techdocs/34222.htm","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=116&type=vulnerabilities","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16667","source":"cve@mitre.org"},{"url":"http://www.adobe.com/support/techdocs/330527.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.adobe.com/support/techdocs/34222.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=116&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16667","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0633","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer overflow."},{"lang":"es","value":"El diseccionador iSNS de Ehtereal 0.10.3 a 0.10.4 permite a atacanttes remotos causar una denegación de servicio (aborto del proceso) mediante un desbordamiento de enteros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:as:*:*:*:*:*","matchCriteriaId":"5D90293F-9238-4A70-9A10-ADB960775D46"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12024","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010655","source":"cve@mitre.org"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00015.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-08.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/829422","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:067","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-378.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16630","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9931","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/829422","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-378.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9931","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0634","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference."},{"lang":"es","value":"La capacidad de \"fisgar\" (snoop)  el SID (Security ID) de SMB (Server Message Blok) en Etheral 0.9.15 a 0.10.4 permite a atacantes remotos causar una denegación de servicio (caída del proceso) mediante un manejador sin nombre de política, lo que causa una desrefernencia nula."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"CF5374A4-5194-45FD-895D-B04FDC7E853C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:as:*:*:*:*:*","matchCriteriaId":"5D90293F-9238-4A70-9A10-ADB960775D46"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12024","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010655","source":"cve@mitre.org"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00015.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-08.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/518782","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:067","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-378.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16631","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10252","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/518782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-378.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10252","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0635","sourceIdentifier":"cve@mitre.org","published":"2004-12-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malformed or (2) missing community string, which causes an out-of-bounds read."},{"lang":"es","value":"El diseccionador SNMP de Ethereal 0.8.15 a 0.10.4 permite a atacantes remotos causar una denegación de servicio (caída del proceso) mediante cadenas de comunidad (1) malformadas o (2) inexistentes, lo que causa una lectura fuera de límites."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*","matchCriteriaId":"11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.16:*:*:*:*:*:*:*","matchCriteriaId":"2E737F77-ABE6-4E3E-9156-4FAF841E8314"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.17:*:*:*:*:*:*:*","matchCriteriaId":"E4B5EB4E-D9D6-4324-BEB6-85C2845AC102"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*","matchCriteriaId":"9DC35478-9276-4732-9F0D-13CA958C617C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*","matchCriteriaId":"77000951-EF3E-41D8-8545-497BA3E5C5E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*","matchCriteriaId":"83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CB461B6B-B731-4732-AAD0-191BE50189D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"19961880-D38A-4785-A7C5-879A061119BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"831705D2-C4DE-475F-B908-8859064AFB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"A4622585-20E2-46E9-B773-74729FF22EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E86ADCB6-0940-4CB9-85F1-A7694210FB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"042B6289-D2E2-4369-BB40-EA6EE7025D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"F0A48938-30B8-4403-B08A-177FFCB9054B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"67B81EFD-27C1-411C-AFF3-E5340627E3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"680934CF-7F9B-41E4-AA03-ECD96F477AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"DBCCE368-64E6-4CEC-B068-9B8BA2527289"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"CF5374A4-5194-45FD-895D-B04FDC7E853C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*","matchCriteriaId":"338CEFD7-EBC0-43FB-B482-9A3D0834447E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"136FF83B-2B03-4E5F-95C1-84195BE8392A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:as:*:*:*:*:*","matchCriteriaId":"5D90293F-9238-4A70-9A10-ADB960775D46"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12024","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010655","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-528","source":"cve@mitre.org"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00015.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-08.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/835846","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:067","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-378.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16632","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9721","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/835846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/archives/fedora-announce-list/2004-July/msg00014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-378.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0636","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message."},{"lang":"es","value":"Desbordamiento de búfer en la función goaway en el manejador de URI aim:goaway en AOL Instant Messenger (AIM) 5.5, incluyendo 5.5.3595, permite a atacantes remotos ejecutar código de su elección mediante un mensaje \"Away\" largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:5.5:*:*:*:*:*:*:*","matchCriteriaId":"6955CC4D-1130-46DB-819A-EAFB3BBDAB74"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:5.5.3415_beta:*:*:*:*:*:*:*","matchCriteriaId":"1FDD88ED-D59C-4EA3-8C33-E255A39DC2F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:5.5.3595:*:*:*:*:*:*:*","matchCriteriaId":"3331131F-F11D-4F6B-9C61-710030273D44"}]}]}],"references":[{"url":"http://secunia.com/advisories/12198/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=121&type=vulnerabilities","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/735966","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16926","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12198/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=121&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/735966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16926","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0637","sourceIdentifier":"cve@mitre.org","published":"2004-09-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload package, which is publicly accessible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EF52682E-0AB7-4C3F-94D4-7B4A7E08F2C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EECAE774-22F3-4872-9E05-A14376F3883D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB739C3-A9BD-433F-8547-12BC615DB18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D0DE0FB4-3C1A-460D-B48E-11D7AF415A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F207CBC6-D186-418D-8F11-3E623530E00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7F64908D-FDAA-499B-8060-8A6EC2443418"}]}]}],"references":[{"url":"http://secunia.com/advisories/12409/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=136&type=vulnerabilities&flashstatus=true","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11099","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12409/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=136&type=vulnerabilities&flashstatus=true","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0638","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and 9.2.0.4, 9i Release 1 9.0.1.4 and 9.0.1.5, and 8i Release 1 8.1.7.4, allows remote authorized users to execute arbitrary code via a long second argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"CA3E2494-5BAE-425B-8F32-A4D2532B10C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"26FA45BE-C7AB-429C-A0A3-928BEC3E78E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"43C6FFA8-18A6-4EE1-BE10-A1B7F3C1A47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F90F6C4F-CEF5-4172-97FC-617B71EAA636"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6233345D-5100-404A-9B61-524D9679D9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB739C3-A9BD-433F-8547-12BC615DB18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DA77BC6D-661F-46E9-B144-1587C1192B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"16F9C7F3-8140-4FEF-8319-64CE51B830AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EA9F3EE8-DA8B-4605-B70B-CFCA25B07C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D0DE0FB4-3C1A-460D-B48E-11D7AF415A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB2708A-58D1-4F17-8504-3748D6667788"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E83B1C7A-287A-405F-B44E-85F891183D2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2D4D70A8-A6FE-4F82-82F1-AB1E9C28FB35"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7F64908D-FDAA-499B-8060-8A6EC2443418"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0178.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=135&type=vulnerabilities&flashstatus=false","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.red-database-security.com/advisory/advisory_20040903_3.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11100","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17254","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0178.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=135&type=vulnerabilities&flashstatus=false","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.red-database-security.com/advisory/advisory_20040903_3.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17254","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0639","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the $mailer variable in read_body.php, (2) the $senderNames_part variable in mailbox_display.php, and possibly other vectors including (3) the $event_title variable or (4) the $event_text variable."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados en Squirrelmail 1.2.10 y anteriores permiten a atacantes remotos inyectar HTML o script de su elección mediante (1) la variable $mailer en read_body.php, (2) la variable $senderNames_part en mailbox_display.php, y posiblemente otros vectores,incluyendo (3) la variable $event_text."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:2.30:*:*:*:*:*:*:*","matchCriteriaId":"9FCF6241-3F7C-4867-8D2E-CCA1BEFCA9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:2.31:*:*:*:*:*:*:*","matchCriteriaId":"EC478ABF-19F8-4195-AA37-23668E2474EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:2.32:*:*:*:*:*:*:*","matchCriteriaId":"E3A87C77-5F6E-497D-A6A0-7D68D5E27E33"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A55A98B3-34ED-4A90-BB78-50CB56B1B51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CC5143ED-D4C5-4830-9C96-0B54D03679CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9B765AEC-09E9-456C-8B57-09927E55D119"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0AAFC3B0-DCE3-4190-B279-E095C666FA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9291A565-0BD6-4B5E-B45F-9DE65AB8159D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B6F53A84-FC66-4963-A728-7285F63D4761"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"69A941FF-423E-49C5-AE1F-FE7ED016CA3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"B34FDB1D-881B-4343-A76E-F23B93A0469A"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1E4DCB20-2A7F-4EE4-BAFA-AD74CD4456AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"052914F8-B52C-4AB4-8F85-68D788B588C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"617C554F-8E7D-4F8A-AF63-C193934C8215"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"15F11950-A2E4-4F57-BF87-57788B841A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4:*:*:*:*:*:*:*","matchCriteriaId":"026730B8-3919-4100-8607-C640ADBDD662"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4AD31177-05BB-4623-AED7-765DB7E44E47"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"20247A22-9AB9-4BCE-BF28-350B52FBC62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.4.3_rc1:*:*:*:*:*:*:*","matchCriteriaId":"B08E51F1-3764-4146-89C1-20B9B8EE1222"},{"vulnerable":true,"criteria":"cpe:2.3:a:squirrelmail:squirrelmail:1.5_dev:*:*:*:*:*:*:*","matchCriteriaId":"49EA7F58-14C6-4860-B276-46C9FCF91B2E"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=257973","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108611554415078&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-535","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.rs-labs.com/adv/RS-Labs-Advisory-2004-1.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10450","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16285","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=257973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108611554415078&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.rs-labs.com/adv/RS-Labs-Advisory-2004-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16285","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0640","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the SSL_set_verify function in telnetd.c for SSLtelnet daemon (SSLtelnetd) 0.13 allows remote attackers to execute arbitrary code."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la función SSL_set_verify en telnetd.c de SSLtlenet daemon (SSLtelnetd) 0.13 permite a atacantes remotos ejecutar código de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netkit:linux_netkit:0.17:*:*:*:*:*:*:*","matchCriteriaId":"965ABB1F-BCD2-40F9-8029-3FE6785875A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netkit:linux_netkit:0.17.17:*:*:*:*:*:*:*","matchCriteriaId":"B8CBF543-23BC-4CFD-893E-8AD446239F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:ssltelnetd:secure_telnet:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"D827A914-CA67-45EE-8149-A975B0EAB419"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-529","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=114&type=vulnerabilities","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16653","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=114&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16653","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0641","sourceIdentifier":"cve@mitre.org","published":"2004-08-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:thomson:speedtouch:510_adsl_router:*:*:*:*:*:*:*","matchCriteriaId":"16BC42CC-7DB8-490E-B07C-D9E71463908E"}]}]}],"references":[{"url":"http://secunia.com/advisories/12238/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4299","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=120&type=vulnerabilities&flashstatus=true","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10881","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16919","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12238/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=120&type=vulnerabilities&flashstatus=true","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0642","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow remote attackers to execute arbitrary code."},{"lang":"es","value":"Vulnerabilidades de liberación doble en el código de manejo de errores de ASN.1 en (1) la librería del Centro de Distribución de Claves (KDC) y (2) librería de cliente de MIT Kerberos 5 (krb5) 1.3.4 y anteriores puede permitir a atacantes remotos ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-415"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.4","matchCriteriaId":"FA84AECB-75F3-4DC2-B0A8-F514E2F6240B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"397313C3-6BF5-4A87-90B3-55678E807171"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E2FE6DAA-4702-409A-98B6-DE13B12805A1"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=109508872524753&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2004-350.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-543","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/795632","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11078","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.trustix.net/errata/2004/0045/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-247A.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17157","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10709","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4936","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=109508872524753&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2004-350.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/795632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.trustix.net/errata/2004/0045/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-247A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10709","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-0643","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and earlier may allow local users to execute arbitrary code."},{"lang":"es","value":"Vulnerabilidad de doble liberación de memoria en la función krb5_rd_cred de MIT Kerberos 5 (krb5) 1.3.1 y anteriores pueden permitir a usuarios locales ejecutar código de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-415"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.3","matchCriteriaId":"864F0ECB-ADDD-4C3A-B19E-C95FD90AE321"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"397313C3-6BF5-4A87-90B3-55678E807171"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E2FE6DAA-4702-409A-98B6-DE13B12805A1"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=109508872524753&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2004-350.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-543","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/866472","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11078","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.trustix.net/errata/2004/0045/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-247A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17159","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10267","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3322","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=109508872524753&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2004-350.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/866472","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.trustix.net/errata/2004/0045/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-247A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3322","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-0644","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding."},{"lang":"es","value":"La función asn1buf_skiptail de la librería de decodificación de ASN.1 de MIT Kerberos 5 (krb5) 1.2.2 a 1.3.4 permite a atacantes remotos causar una denegación de servicio (bucle infinito) mediante cierta codificación BER."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D0B363A4-BB7A-48A2-AE6B-BD2DDD46E7CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"74EF42A5-EC47-4475-81D6-FD1E9C2B8A3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"30F2CBEF-6FA1-4E07-8163-6AFEDC93FCE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"D133CB0D-8A54-4DAA-9FE8-0B367544DE65"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"7B2C23BD-1995-4F09-B444-87DDDE21817E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"EEF118BE-6351-4768-A3F0-DFE0065273D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"2574FC48-C80A-427A-AD12-42676D125D62"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3:*:*:*:*:*:*:*","matchCriteriaId":"7F01A83F-3BD1-4DED-979A-B4B6B23039FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3:alpha1:*:*:*:*:*:*","matchCriteriaId":"6B1422F8-CC87-46EA-8649-A12D6E47335D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ACEB5A36-8F72-417A-AC92-149612EC7BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7B8704B5-F37B-4C61-A924-3774A29BFEB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F953CEBA-BAC0-48DF-A3D0-1FABCC9963E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"ED81A044-8A7B-4EEF-A4B3-EA49D76FAAED"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109508872524753&w=2","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-350.html","source":"cve@mitre.org"},{"url":"http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-003-asn1.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-543","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/550464","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11079","source":"cve@mitre.org"},{"url":"http://www.trustix.net/errata/2004/0045/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-247A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17160","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10014","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2139","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109508872524753&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2004-350.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-003-asn1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-543","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/550464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11079","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.net/errata/2004/0045/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-247A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0645","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field."},{"lang":"es","value":"Desbordamiento de búfer en la función wvHandleDateTimePicture en la librería wv (wvWare) 0.7.4 a 0.7.6 y 1.0.0 permite a atacantes remotos ejecutar código de su elección mediante un documento con un campo DateTime largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:abisource:community_abiword:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1FFD3D89-7EEF-44EF-8C99-0CF7A9C7E108"},{"vulnerable":true,"criteria":"cpe:2.3:a:abisource:community_abiword:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AFF61418-7350-4EE3-9BE3-2B897C3C897F"},{"vulnerable":true,"criteria":"cpe:2.3:a:abisource:community_abiword:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"28F8AF1F-0A8D-444D-B465-7344D978D98E"},{"vulnerable":true,"criteria":"cpe:2.3:a:abisource:community_abiword:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B516158E-AE28-4B45-ACA2-95C93E3D95E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:abisource:community_abiword:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"19771A94-FA65-4559-AA0F-DFCDB960E1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wvware:wvware:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"CD23CA6B-3D14-41D2-84A4-EC214459625C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wvware:wvware:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"E181EFCB-29D1-4515-9547-AE9980E13776"},{"vulnerable":true,"criteria":"cpe:2.3:a:wvware:wvware:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"95EB7EF3-C0F5-4E65-9A8E-6325CDD7256A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wvware:wvware:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F24D7C45-DCCF-4001-92B6-A40226243BDD"}]}]}],"references":[{"url":"http://cpan.cybercomm.nl/pub/gentoo-portage/app-text/wv/files/wv-1.0.0-fix_overflow.patch","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000863","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200407-11.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-579","source":"cve@mitre.org"},{"url":"http://www.freebsd.org/ports/portaudit/7a5430df-d562-11d8-b479-02e0185c0b53.html","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=115&type=vulnerabilities","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:077","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7761","source":"cve@mitre.org"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1906","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16660","source":"cve@mitre.org"},{"url":"http://cpan.cybercomm.nl/pub/gentoo-portage/app-text/wv/files/wv-1.0.0-fix_overflow.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200407-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-579","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.freebsd.org/ports/portaudit/7a5430df-d562-11d8-b479-02e0185c0b53.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=115&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0646","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields."},{"lang":"es","value":"Desbordamiento de búfer en la función WriteToLog de los conectores web JRun 3.0 a 4.0, como mod_jrun y mod_jrun20 para Apache con registro verboso activado, permite a atacantes remotos ejecutar código de su elección mediante una una cabecera HTTP Content-Type larga u otros campos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B79C39FD-D9A0-4CA4-BF37-D94D9F20E4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:*:*:*:*:*:*","matchCriteriaId":"B2C65BE0-32FA-4D51-AA2B-E7D630470D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4361030D-230A-45CD-AC84-9603DADC75BC"}]}]}],"references":[{"url":"http://secunia.com/advisories/12647/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/990200","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-09.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/377194","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11245","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17485","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12647/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/990200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-09.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/377194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0647","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file."},{"lang":"es","value":"shorewall 1.4.10c y anteriores, y 2.0.x anteriores a 2.0.3a permiten a usuarios locales sobreescribir ficheros de su elección mediante un ataque de enlaces simbólicos en el fichero temporal chain-$$."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shorewall:shorewall:1.4:*:*:*:*:*:*:*","matchCriteriaId":"B09DE7E2-CC5F-415B-A392-D68AB5D5183A"},{"vulnerable":true,"criteria":"cpe:2.3:a:shorewall:shorewall:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F9607C7E-6F86-4912-A376-08AF7BF02C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:shorewall:shorewall:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"36381169-72B8-4A24-BAF2-BEC34ED111CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:shorewall:shorewall:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"BB8C6C0C-AFFD-4245-9BC8-315449A93630"},{"vulnerable":true,"criteria":"cpe:2.3:a:shorewall:shorewall:1.4.3a:*:*:*:*:*:*:*","matchCriteriaId":"755E1346-339F-4910-A360-A54A7C7248CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:shorewall:shorewall:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"5484FDC1-69C9-4E41-AC5C-9F27AAAA21F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:shorewall:shorewall:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"27002D31-C070-438D-B673-883E53604484"},{"vulnerable":true,"criteria":"cpe:2.3:a:shorewall:shorewall:1.4.6:*:*:*:*:*:*:*","matchCriteriaId":"51856967-B4E8-492F-9A7D-ABEDA30DD002"},{"vulnerable":true,"criteria":"cpe:2.3:a:shorewall:shorewall:1.4.7:*:*:*:*:*:*:*","matchCriteriaId":"C908BE61-EC82-4FFA-9F70-A62DCB61B7E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:shorewall:shorewall:1.4.8:*:*:*:*:*:*:*","matchCriteriaId":"F5D91047-9FFE-434F-AA74-8CAD5FFA1D47"},{"vulnerable":true,"criteria":"cpe:2.3:a:shorewall:shorewall:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"F8AAC279-B154-4591-90C8-4026DFE486EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:shorewall:shorewall:1.4.10:*:*:*:*:*:*:*","matchCriteriaId":"A6FC0B9A-1B52-4983-A8DB-A27EDB16C399"},{"vulnerable":true,"criteria":"cpe:2.3:a:shorewall:shorewall:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FA74BD87-28A4-479B-A02C-C5EF0FE99033"},{"vulnerable":true,"criteria":"cpe:2.3:a:shorewall:shorewall:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FA3C10C9-AB0C-4CDB-82C2-606FC92799E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:shorewall:shorewall:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"444C2974-82B2-49D9-B6D2-6E6BB19A100B"},{"vulnerable":true,"criteria":"cpe:2.3:a:shorewall:shorewall:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FF76A1B4-3B30-408B-9E8D-627BA55B44B7"}]}]}],"references":[{"url":"http://lists.shorewall.net/pipermail/shorewall-announce/2004-June/000385.html","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-07.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:080","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16651","source":"cve@mitre.org"},{"url":"http://lists.shorewall.net/pipermail/shorewall-announce/2004-June/000385.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16651","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0648","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the shell: protocol."},{"lang":"es","value":"Mozilla (suite) anteriores a 1.7.1 y Firefox anteriores a 0.9.2, y Thunderbird anteriores a 0.7.2 permiten a atacantes remotos lanzar programas arbitrarios mediante una URI referenciando el protocolo shell:"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.2","matchCriteriaId":"51DBAAAE-0171-4251-ABE7-3FE54A2A6B33"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7.1","matchCriteriaId":"1BBE2C2D-BE31-44ED-A8EE-7AC68D24FAF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7.2","matchCriteriaId":"1EDB7FAB-1D7D-481E-83FD-DD4980278D2A"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023573.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108938712815719&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12027","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-175.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/927014","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/shell.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16655","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023573.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108938712815719&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-175.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/927014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/shell.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0649","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in write_packet in control.c for l2tpd may allow remote attackers to execute arbitrary code."},{"lang":"es","value":"Desbordamiento de búfer en write_packet en control.c de l2tpd puede permitir a atacantes remotos ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.62:*:*:*:*:*:*:*","matchCriteriaId":"1BA9CA27-499F-457F-AC0C-8F8F28FEDA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.63:*:*:*:*:*:*:*","matchCriteriaId":"86E97113-44A0-4A6A-A1E6-E91E46EB7E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.64:*:*:*:*:*:*:*","matchCriteriaId":"E2EA5E12-99C4-44ED-A6C7-B476A623E6EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.65:*:*:*:*:*:*:*","matchCriteriaId":"054C8F11-4519-4911-BEAF-B0597A93E1DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.66:*:*:*:*:*:*:*","matchCriteriaId":"DD8D78FD-6ABA-4F66-BFAC-E0E0E88EFACF"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.67:*:*:*:*:*:*:*","matchCriteriaId":"4A65824C-1648-4E0E-B9DA-2A45C24C3D3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.68:*:*:*:*:*:*:*","matchCriteriaId":"9343FDA3-6709-429C-96AC-2134FED40E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:l2tpd:l2tpd:0.69:*:*:*:*:*:*:*","matchCriteriaId":"FD711B92-6FF7-4348-A083-DBA9A50F73B8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108640917925735&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200407-17.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-530","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16326","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108640917925735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200407-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16326","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0650","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UploadServlet in Cisco Collaboration Server (CCS) running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL."},{"lang":"es","value":"UploadServlet en Cisco Collaboration Server (CSS) ejecutando ServletExec anteriores a 3.0E permite a atacantes remotos subir y ejecutar ficheros de su elección mediante una llamada directa a la URL UploadServlet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:newatlanta:servletexec:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7C7D28A5-B20D-4D7C-926D-8BB9C217570C"},{"vulnerable":true,"criteria":"cpe:2.3:a:newatlanta:servletexec:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CDDE0053-600F-4FC8-A4CA-4FF6E221B0A3"}]}]}],"references":[{"url":"http://secunia.com/advisories/11979/","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040630-CCS.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/718896","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10639","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16553","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11979/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040630-CCS.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/718896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16553","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0651","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Sun Java Runtime Environment (JRE) 1.4.2 through 1.4.2_03 allows remote attackers to cause a denial of service (virtual machine hang)."},{"lang":"es","value":"Vulnerabilidad desconocida en Sun Java Runtime Environment (JRE) 1.4.2 a 1.4.2_03 permite a atacantes remotos causar una denegación de servicio (cuelgue de la máquina virtual)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*","matchCriteriaId":"BED1009E-AE60-43A0-A0F5-38526EFCF423"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"002CA86D-3090-4C7A-947A-21CB5D1ADD98"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sdk:1.4.2_03:*:*:*:*:*:*:*","matchCriteriaId":"37A3D49A-BE20-47BF-A85F-122357BAB098"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108559041910233&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57555","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/118558","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/6773","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10301","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16085","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108559041910233&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57555","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/118558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/6773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0652","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods."},{"lang":"es","value":"BEA WebLogic Server y WebLogic Express 7.0 a 7.0 Service Pack 4, y 8.1 a 8.1 Service Pack 2 permiten a atacantes obtener el nombre de usuario y contraseña para arrancar el servidor accediendo directamente a ciertos métodos internos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*","matchCriteriaId":"FBDF3AC0-0680-4EEE-898C-47D194667BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*","matchCriteriaId":"8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6828CE4B-91E8-4688-977F-DC7BC21131C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*","matchCriteriaId":"BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*","matchCriteriaId":"9CD2BB36-AC0B-48E9-91E1-A4465896E87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*","matchCriteriaId":"6FB8930F-C6D8-40B9-8D08-751F5B47229B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*","matchCriteriaId":"A5C59B80-279B-45B3-9CC1-5A263681025B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"893D9D88-43C4-4F9F-A364-0585DE6FA9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*","matchCriteriaId":"D59F9859-7344-43F0-9348-E57FABB9E431"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*","matchCriteriaId":"D2D05BAB-AB3B-466E-8301-01A41644DE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"D34E2925-DE2A-437F-B349-BD7103F4C37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*","matchCriteriaId":"0A4EC87D-EF83-48C5-B516-A6A482D9F525"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*","matchCriteriaId":"935F28E3-9799-4EF6-AB83-62E9C214DD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:express:*:*:*:*:*","matchCriteriaId":"25C711BB-E7E0-41D8-985E-5DD386C54637"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:win32:*:*:*:*:*","matchCriteriaId":"38EFE72C-10E5-4EED-B016-D914FA52DE6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"32E8797D-1B62-4480-A79D-0345E65699E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:express:*:*:*:*:*","matchCriteriaId":"071FAD20-D502-4634-852A-4CD06FE8E114"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"97E6F518-D320-4655-B698-2D1A82CA3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"2FC1486C-6AC4-44F7-9015-40FD4A341C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:express:*:*:*:*:*","matchCriteriaId":"AB5909DB-B2E2-4358-9D45-C225C6B02360"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"04C3F96B-A1FF-4E3E-B059-366E176E5E19"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"5485722F-5DE4-4CD4-865F-32585537F523"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:express:*:*:*:*:*","matchCriteriaId":"BCB01060-2C29-4F75-8D0A-74F62E9F0A17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"3CCEDE54-97F3-457A-9886-5BD91C9AED2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:express:*:*:*:*:*","matchCriteriaId":"2269D44C-65EA-4ED0-9F03-A32AC5D44EEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*","matchCriteriaId":"ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*","matchCriteriaId":"A3DFE048-905E-4890-809D-F6BCEF7F83C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*","matchCriteriaId":"F7560131-A6AC-4BBB-AA2D-C7C63AB51226"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"D18E22CC-A0FC-4BC7-AD39-2645F57486C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*","matchCriteriaId":"893C2387-03E3-4F8E-9029-BC64C64239EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"D00633D1-4B38-48D9-B5CD-E8D66EA90599"}]}]}],"references":[{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11359","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009766","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/352110","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/5296","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10133","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15865","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009766","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/352110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/5296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10133","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15865","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0653","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an \"auth\" module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other user's passwords by reading log files."},{"lang":"es","value":"Solaris 9, cuando se configura como cliente Kerberos con parche 112908-12 o 115168-03 y usando pam_krd5 como módulo \"auth\" con la característica de depuración activada, registra contraseñas en texto plano, lo que podría permitir a usuarios locales ganar las contraseñas de otros usuarios leyendo ficheros de registro de sucesos (log)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"}]}]}],"references":[{"url":"http://secunia.com/advisories/11940/","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57587","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101519-1","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-172.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/523710","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10606","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16450","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2065","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A255","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11940/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57587","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101519-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-172.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/523710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A255","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0654","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Administrative (ad) or the System-Wide Administration (as) audit class in Solaris 7, 8, and 9, allows local users to cause a denial of service (kernel panic)."},{"lang":"es","value":"Vulnerabilidad desconocida en el Basic Security Module (BSM), cuando se configura para auditar las clases Administrativa (ad) o de todo el sistema (as) en Solaris 7,8 y 9, permite a usuarios locales causar una denegación de servicio (caída del kenel)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*","matchCriteriaId":"3F305CBD-4329-44DE-A85C-DE9FF371425E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://secunia.com/advisories/11930/","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57497","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/901582","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10594","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16483","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2426","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11930/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/901582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16483","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0655","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary file."},{"lang":"es","value":"eupdatedb en esearch 0.6.1 y anteriores permite a usuarios locales crear ficheros de su elección mediante un ataque de enlaces simbólicos en el fichero temporal eseachdb.py.tmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:esearch:emerge_search_tool:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"3F89DE89-0CA5-4C16-9565-B2EAB10EF5EB"},{"vulnerable":false,"criteria":"cpe:2.3:a:esearch:emerge_search_tool:0.4:*:*:*:*:*:*:*","matchCriteriaId":"37891D7A-1762-4D54-93CB-E7A12B870AE6"},{"vulnerable":false,"criteria":"cpe:2.3:a:esearch:emerge_search_tool:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"584A7AAE-11D0-4597-8327-CBD1F704532F"},{"vulnerable":false,"criteria":"cpe:2.3:a:esearch:emerge_search_tool:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"3085A8C9-CDB3-49BB-BDAD-B4F580929D76"},{"vulnerable":false,"criteria":"cpe:2.3:a:esearch:emerge_search_tool:0.5:*:*:*:*:*:*:*","matchCriteriaId":"9A76F202-230E-4B32-AE75-A6C4BC724CAA"},{"vulnerable":false,"criteria":"cpe:2.3:a:esearch:emerge_search_tool:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E5C58E0E-5FDD-4EBB-85F1-F759195E541F"},{"vulnerable":false,"criteria":"cpe:2.3:a:esearch:emerge_search_tool:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A08C6B58-EB25-48A4-883A-D04DC21E78ED"},{"vulnerable":false,"criteria":"cpe:2.3:a:esearch:emerge_search_tool:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"AF116F7C-5D1C-4F78-AA36-3F0DE66CB0E4"},{"vulnerable":false,"criteria":"cpe:2.3:a:esearch:emerge_search_tool:0.6:*:*:*:*:*:*:*","matchCriteriaId":"6B90D580-B992-4A17-862C-5502AD1CB205"},{"vulnerable":false,"criteria":"cpe:2.3:a:esearch:emerge_search_tool:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"BA877DE0-78D7-4ECD-BCBD-84701BB6279E"}]}]}],"references":[{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-01.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10644","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16584","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16584","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0656","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by exceeding the maximum number of connections."},{"lang":"es","value":"La función accpt_client en PureFTPd 1.0.18 y anteriores permite a atacantes remotos causar una denegación de servicio excediendo el máximo número de conexiones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:0.96:*:*:*:*:*:*:*","matchCriteriaId":"83BFFA9C-74F8-4CD3-8846-07795DAEA066"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6A934B47-2D3D-4464-88EC-2D738E2220C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"55C1B110-F5C8-4B2D-86E5-66617C4F6D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F4CCB444-9CBB-44AF-B742-A59827BDFEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6EB5B90C-961A-47B5-9AC1-0F0283EA4500"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"5DC3A0FD-2290-4AF9-814A-4B265C9540E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A64F72D9-EBE5-4A2B-BCE8-9DD8787D0447"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0.11:*:*:*:*:*:*:*","matchCriteriaId":"CB91FA0F-A402-4139-B115-2EE0457FA97D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0.12:*:*:*:*:*:*:*","matchCriteriaId":"D709CE96-FFF2-4C9E-90CB-35C6AFED6C69"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0.13a:*:*:*:*:*:*:*","matchCriteriaId":"5C6D4ACC-90AB-405C-8254-337B5424F71B"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"D0B2E6FF-5155-4E2D-8E48-F1B75A595B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0.15:*:*:*:*:*:*:*","matchCriteriaId":"278778A3-3BE3-464F-AA9C-66905BB21076"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"FBD52EC6-9606-4E7E-97CA-EA8DF3484876"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0.16a:*:*:*:*:*:*:*","matchCriteriaId":"AF1B2667-7D67-487D-87D6-6A2F7155F907"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0.16b:*:*:*:*:*:*:*","matchCriteriaId":"AF2FC6BA-4D69-4250-8E28-469F4BCAD1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0.16c:*:*:*:*:*:*:*","matchCriteriaId":"B9F22F3C-9129-4A93-A692-AA555830E9AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0.17a:*:*:*:*:*:*:*","matchCriteriaId":"DDB7C7D5-1A65-4FCA-AE42-270F7EADA318"},{"vulnerable":true,"criteria":"cpe:2.3:a:pureftpd:pureftpd:1.0.18:*:*:*:*:*:*:*","matchCriteriaId":"EFF3738C-2A3F-4521-97BF-8803D72A6D58"}]}]}],"references":[{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-04.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.pureftpd.org/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16611","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.pureftpd.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0657","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ntp:ntp:*:*:*:*:*:*:*:*","versionEndExcluding":"4.0","matchCriteriaId":"0C03E333-4134-45A7-BEBE-F11B6BAC23A1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64_unix:4.0f:patch_kit8:*:*:*:*:*:*","matchCriteriaId":"6C6010E5-384D-4C9F-A4F3-B0831E5FB52A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64_unix:4.0g:patch_kit4:*:*:*:*:*:*","matchCriteriaId":"BD8CD4EF-0EBA-4DFB-85A6-208AE5A110B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64_unix:5.1b:patch_kit2:*:*:*:*:*:*","matchCriteriaId":"4DBFB15C-D5A4-4003-8662-5AE9F17C3386"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64_unix:5.1b:patch_kit3:*:*:*:*:*:*","matchCriteriaId":"45BF8036-F75D-48F7-91ED-15866216ACE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64_unix:5.1b:patch_kit4:*:*:*:*:*:*","matchCriteriaId":"B8811ED0-6CA8-4BB9-A2F3-28290219B2FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64_unix:51.1a:patch_kit6:*:*:*:*:*:*","matchCriteriaId":"F3AB2950-9C18-4BAC-805D-D05B894F5AF7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108922292425219&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/584606","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15406","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=108922292425219&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/584606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0658","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) driver 2.4 and 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via the functions (1) raw1394_write, (2) state_connected, (3) handle_remote_request, or (4) hpsb_make_writebpacket."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*","matchCriteriaId":"C5FE15BF-91C7-452A-BE1B-7EC9632421C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*","matchCriteriaId":"15C1923C-D9C4-400D-9F0F-20B519EEC9C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D6F04081-D672-488E-A91D-5088DD04AA5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"9BDB59EF-74EF-462E-BC84-89201F734380"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0755A136-3DE3-4B61-B5EF-F6282AACD38E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B1531AD3-2525-4F6E-B77D-FE8863CBD3EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"81D950C3-0DDC-4549-99F8-1E206768219A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5C7E2A5B-6CF3-4748-BE4F-F63A4E59CB64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"195A133A-26C9-401E-913F-285BA220D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"B8D68E21-6C58-46A7-96F2-9A79DD880803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1E975B63-3D9C-4FA9-A6D0-C9865FDA7AC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"38D11B12-AFD7-4055-A366-D932CA1BA8C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*","matchCriteriaId":"BC990132-9DF2-4D23-B9DA-0819809A3CAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*","matchCriteriaId":"FFA51D40-E72C-40A4-B238-70F6806FA1B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1E1B7D68-E41E-4A5A-9606-F14F057B39E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*","matchCriteriaId":"7799A9CE-1948-4D71-BADB-A4A7ECAFF5FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*","matchCriteriaId":"70BCB10C-FD72-4F18-84C9-AE0603402426"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*","matchCriteriaId":"54A74CAB-2BD1-48BC-BCEB-983E72B3C56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*","matchCriteriaId":"CF742FF1-5504-41BB-8FAA-D71B83C791B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*","matchCriteriaId":"901C6D04-3226-4654-9A41-0325B48A2F7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*","matchCriteriaId":"072A77AD-BB27-4C24-91A0-A12D6E741593"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*","matchCriteriaId":"BF900D1D-E351-4407-8269-80E5403432B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*","matchCriteriaId":"44915F9F-88DF-4304-8F66-58A869654BDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*","matchCriteriaId":"4CC2D90D-2115-406C-B609-870B241F00B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*","matchCriteriaId":"EF681CC1-B3EC-467A-A10D-10840D3D4575"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*","matchCriteriaId":"8660C030-328E-4221-847E-AC4BDA08CE79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*","matchCriteriaId":"0EE83E4E-DBA6-47EB-80FF-9A41A2978DDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*","matchCriteriaId":"B58DE3A3-2BE0-45E3-8EFD-5A4439EAD6DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*","matchCriteriaId":"47AEC277-F9A4-412F-B2EA-C1AEA336A46C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*","matchCriteriaId":"7234AF29-BCDA-4728-A141-C169EE59CEC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*","matchCriteriaId":"E7D9064F-466F-4D66-AD5E-8BC2D31CD80D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*","matchCriteriaId":"374851C5-C61D-4964-8B4A-473B0A008F11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*","matchCriteriaId":"1FD55C81-3687-46BF-880E-58D7E005A185"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*","matchCriteriaId":"2953267F-16BF-404F-83F1-73E0908979B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*","matchCriteriaId":"9D953B61-3457-4A0E-A668-BA4937B79784"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*","matchCriteriaId":"5F5F3607-C0DD-494C-AB6E-46E383A6B17D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*","matchCriteriaId":"19138F52-25EA-42B6-89DC-692A8AF0A720"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*","matchCriteriaId":"4C2EBADC-0817-4E38-9F49-8446D8A20CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*","matchCriteriaId":"340368E7-0005-4F8A-8AF1-C20A1198288C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*","matchCriteriaId":"0DC860DD-57DF-4474-AE2B-9AADB9060175"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*","matchCriteriaId":"DC1D576A-0763-4611-B3CF-CD8514F18783"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*","matchCriteriaId":"4A61F3C5-EA3A-4AA2-8F4E-02E07864801F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*","matchCriteriaId":"6F570226-CA89-46F4-8C68-9A59BC0602A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*","matchCriteriaId":"162A88DA-E2EA-4E92-B174-9AD86BE8D983"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*","matchCriteriaId":"EBE19B6B-9537-4C76-80B2-98DAF2C15B5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*","matchCriteriaId":"5EE5C4F5-C64D-4714-B02E-689B435E3E5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*","matchCriteriaId":"BE4F20D3-77E7-4FC2-AF18-6A5E3AE08615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*","matchCriteriaId":"164F4483-9F28-491A-8F99-4242C9B9CBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*","matchCriteriaId":"34803A7D-45C4-4DBE-BF18-19CE9DE62A96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*","matchCriteriaId":"1178D6EE-A462-4CC1-B430-9A44C75D2336"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*","matchCriteriaId":"4360530E-6E07-48F9-B8F8-B36622331052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*","matchCriteriaId":"17508D09-AE14-4458-93A2-E2764452EA8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*","matchCriteriaId":"05F2CD4A-CCA9-4743-86C4-7675D2487E16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*","matchCriteriaId":"75C1504C-03C5-49E4-8192-E1E698CF07A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*","matchCriteriaId":"DB7CB4B0-1CF5-4AA7-A977-9C24AD6C486D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*","matchCriteriaId":"37A3172A-E663-42F6-90E7-51C3850AF9E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*","matchCriteriaId":"16F6692C-494F-44ED-97C6-A6CD05334DA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*","matchCriteriaId":"3B61C93E-84FE-46CE-A7DD-ACFEFB96BB62"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*","matchCriteriaId":"5E79FB38-5AE5-4ACD-B4F5-F533C0E1D503"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*","matchCriteriaId":"77231F8B-137F-4FAE-BCD9-658F32943CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*","matchCriteriaId":"552ED77A-F09A-4923-A907-8E0DF8445363"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*","matchCriteriaId":"CDD8EDD0-7817-4A5E-AE97-DA1941E859BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*","matchCriteriaId":"5DF940EA-676A-42C8-A6E0-7F53C8A34340"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*","matchCriteriaId":"BDC8FDE8-DB5A-4B2D-810D-73E91194E00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*","matchCriteriaId":"5CF7304E-AAA9-4BC3-AEF0-C9509E95ECA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*","matchCriteriaId":"29DCCFB1-054F-4BF0-92F1-78A2063415D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*","matchCriteriaId":"D3D3222C-7469-42F6-984D-3223BCD8080E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*","matchCriteriaId":"697B7069-D08D-41BD-8285-A1ABA0E1142F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*","matchCriteriaId":"72173CFB-BAB6-456C-B5F2-3AA31D799E74"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*","matchCriteriaId":"FDD08A67-195F-431B-98A5-42B2966055DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*","matchCriteriaId":"658C7317-D50B-475A-9E0E-E68AECD49B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*","matchCriteriaId":"1270F454-8E05-413C-BAF4-35D062CA5803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A0934C49-5F88-4189-BD88-2F32C39C2F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*","matchCriteriaId":"14B0A230-4054-4483-A3A7-9A5A286C7552"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108793792820740","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16480","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108793792820740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16480","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0659","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90:*:*:*:*:*:*:*","matchCriteriaId":"2AD73BA0-D315-4ADA-A942-8DCC2A920B28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_pre:*:*:*:*:*:*:*","matchCriteriaId":"710ACCE6-B3E3-474A-B78B-5A123EC24DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_rc:*:*:*:*:*:*:*","matchCriteriaId":"55D3C3E6-862E-470E-8CEA-4B333B906172"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.90_rc4:*:*:*:*:*:*:*","matchCriteriaId":"30D6A539-5523-4E52-854A-82CDCDBDFC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.91:*:*:*:*:*:*:*","matchCriteriaId":"CA841B0B-8FA9-45F9-9B60-7C9BD1A92E14"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.92:*:*:*:*:*:*:*","matchCriteriaId":"91907AEA-D84F-4DD9-AD22-41E563182FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"D200DE0F-D8BB-460D-928E-E59473F84B38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:0.92_cvs:*:*:*:*:*:*:*","matchCriteriaId":"5103A1E1-670A-4527-9FB8-9D8B0DA506D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre1:*:*:*:*:*:*:*","matchCriteriaId":"500E5BD7-3F17-455F-8463-50B145128873"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre2:*:*:*:*:*:*:*","matchCriteriaId":"3BE4C532-1756-4B2E-94EE-8F8253281F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre3:*:*:*:*:*:*:*","matchCriteriaId":"0E6875BE-67F1-4E0E-A610-7B6EDBAB6431"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre3try2:*:*:*:*:*:*:*","matchCriteriaId":"4E74EBC5-296E-4B20-8BCB-F104D06595AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:1.0_pre4:*:*:*:*:*:*:*","matchCriteriaId":"29A09BDA-DA05-4512-9E39-14819C410CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mplayer:mplayer:head_cvs:*:*:*:*:*:*:*","matchCriteriaId":"9B5D1CF3-66DF-4000-BEC7-760367856891"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108844316930791&w=2","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-01.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10615","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16532","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108844316930791&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16532","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0660","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in CuteNews 1.3.1 allows remote attackers to inject arbitrary script or HTML via the id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:0.88:*:*:*:*:*:*:*","matchCriteriaId":"35BB2223-5238-4E3D-895A-BE6793AE3A9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4254A63A-3202-4D06-90B3-12D10511BC2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9A2D600-BEA7-4936-B210-91629B2EFCDC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108844000409449&w=2","source":"cve@mitre.org"},{"url":"http://www.swp-zone.org/archivos/advisory-06.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16525","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108844000409449&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.swp-zone.org/archivos/advisory-06.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16525","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0661","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a denial of service (IP lease depletion) via a DHCP request with the LEASETIME option set to -1, which makes the DHCP lease valid for thirteen or more years."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:di-604:*:*:*:*:*:*:*:*","matchCriteriaId":"036BFC10-9508-4FC2-BA7F-2F59403354DE"},{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:di-614\\+:2.30:*:*:*:*:*:*:*","matchCriteriaId":"FFBD013A-695E-41C7-BD1A-9D684CE86C54"},{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:di-624:1.28:*:*:*:*:*:*:*","matchCriteriaId":"041452C5-9F6D-4D4F-959C-54A1EA4B79E1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108844250013785&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12018","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7294","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/367485","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10621","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16531","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108844250013785&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/367485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16531","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0662","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PowerPortal 1.x allows remote attackers to gain sensitive information via invalid or missing parameters in HTTP requests to (1) resize.php or (2) modules.php, which reveals the path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerportal:powerportal:1.1b:*:*:*:*:*:*:*","matchCriteriaId":"7894AF63-7158-49B6-957C-0F95628AF78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerportal:powerportal:1.3:*:*:*:*:*:*:*","matchCriteriaId":"D06B14A8-85BF-49EF-B261-FD70F05A2D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerportal:powerportal:1.3b:*:*:*:*:*:*:*","matchCriteriaId":"F62FED84-52E1-466B-9EE0-6679A84ED625"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108844362627811&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10622","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.swp-zone.org/archivos/advisory-07.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16529","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108844362627811&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.swp-zone.org/archivos/advisory-07.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16529","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0663","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in modules.php in PowerPortal 1.x allows remote attackers to inject arbitrary script or HTML via the (1) id parameter to the (a) private_messages module; (2) search parameter to the (b) links and (c) content modules; and (3) files parameter to the gallery module."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerportal:powerportal:1.1b:*:*:*:*:*:*:*","matchCriteriaId":"7894AF63-7158-49B6-957C-0F95628AF78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerportal:powerportal:1.3:*:*:*:*:*:*:*","matchCriteriaId":"D06B14A8-85BF-49EF-B261-FD70F05A2D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerportal:powerportal:1.3b:*:*:*:*:*:*:*","matchCriteriaId":"F62FED84-52E1-466B-9EE0-6679A84ED625"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108844362627811&w=2","source":"cve@mitre.org"},{"url":"http://www.swp-zone.org/archivos/advisory-07.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16528","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108844362627811&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.swp-zone.org/archivos/advisory-07.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16528","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0664","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to list arbitrary directories via a .. (dot dot) in the files parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerportal:powerportal:1.1b:*:*:*:*:*:*:*","matchCriteriaId":"7894AF63-7158-49B6-957C-0F95628AF78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerportal:powerportal:1.3:*:*:*:*:*:*:*","matchCriteriaId":"D06B14A8-85BF-49EF-B261-FD70F05A2D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerportal:powerportal:1.3b:*:*:*:*:*:*:*","matchCriteriaId":"F62FED84-52E1-466B-9EE0-6679A84ED625"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108844362627811&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10622","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.swp-zone.org/archivos/advisory-07.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16530","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108844362627811&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.swp-zone.org/archivos/advisory-07.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16530","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0665","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveals the path to the web server in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:csfaq:*:*:*:*:*:*:*:*","matchCriteriaId":"AB8F36F2-8CE0-4BCB-A2F3-96F41099A4E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cgiscript.net:csfaq:1.0:*:*:*:*:*:*:*","matchCriteriaId":"52C40A4E-6C30-412B-A44F-32652BCCFE77"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108844203121238&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10618","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.swp-zone.org/archivos/advisory-08.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16526","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108844203121238&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.swp-zone.org/archivos/advisory-08.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16526","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0666","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the POP3_readmsg function in popclient 3.0b6 allows remote attackers to cause a denial of service (application crash) via an e-mail message with a certain line length, which leads to a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:popclient:popclient:3.0_b6:*:*:*:*:*:*:*","matchCriteriaId":"0F882D78-98E8-4E82-ABF0-CC0C971A8524"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/023147.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108852915403293&w=2","source":"cve@mitre.org"},{"url":"http://www.grok.org.uk/advisories/popclient.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10625","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16538","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/023147.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108852915403293&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.grok.org.uk/advisories/popclient.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16538","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0667","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Rule Set Based Access Control (RSBAC) 1.2.2 through 1.2.3 allows access to sys_creat, sys_open, and sys_mknod inside jails, which could allow local users to gain elevated privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rsbac:rule_set_based_access_control:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D08BBFCC-CCB5-4A87-B47D-C3D918C3C04A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rsbac:rule_set_based_access_control:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"9DE501B0-1AA0-4509-880A-D7966CE6EB8C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108861182906067&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=108879977120430&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.rsbac.org/download/bugfixes/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10640","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16552","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=108861182906067&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=108879977120430&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.rsbac.org/download/bugfixes/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0668","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web Access in Lotus Domino 6.5.1 allows remote attackers to cause a denial of service (server crash) via a large e-mail message, as demonstrated using a large image attachment."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C00B8057-26DF-4064-A934-0AA88A0C1A6F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108871093704307&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10641","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16596","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108871093704307&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16596","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0669","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lotus Domino 6.5.0 and 6.5.1, with IMAP enabled, allows remote authenticated users to change their quota by using the IMAP setquota command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0766C3F9-D2A2-4A58-9FF7-11B57232DEA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C00B8057-26DF-4064-A934-0AA88A0C1A6F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108869022708571&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10642","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16575","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108869022708571&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16575","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0670","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Prestige 650HW-31 running Rompager 4.7 software allows remote attackers to cause a denial of service (device reboot) via a long password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige:650hw_31:*:*:*:*:*:*:*","matchCriteriaId":"10E80C0C-2418-4A74-8A63-03156E12F44E"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige:650r_11:*:*:*:*:*:*:*","matchCriteriaId":"38657B51-CFE4-4F34-B333-25406FB8A2CB"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/023196.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108862133005952&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10638","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16547","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/023196.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108862133005952&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16547","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0671","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Brightmail Spamfilter 6.0 and earlier beta releases allows remote attackers to read mail from other users by modifying the id parameter in a viewMsgDetails.do request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:brightmail_antispam:6.0:*:*:*:*:*:*:*","matchCriteriaId":"849782E0-9F26-411F-82B9-88B5FC4F4C92"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108880205115802&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108981452101353&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10657","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16609","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108880205115802&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108981452101353&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16609","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0672","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via (1) script that starts with %00 in the numOfExpressions parameter or (2) the mobjtype parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netegrity:identityminder:web_5.6:*:*:*:*:*:*:*","matchCriteriaId":"9FBCB3C8-1253-481D-955D-18DCA9D05082"},{"vulnerable":true,"criteria":"cpe:2.3:a:netegrity:identityminder:web_5.6_sp1:*:*:*:*:*:*:*","matchCriteriaId":"DB06565A-89F8-491F-B8F9-C9D5136C7693"},{"vulnerable":true,"criteria":"cpe:2.3:a:netegrity:identityminder:web_5.6_sp2:*:*:*:*:*:*:*","matchCriteriaId":"A74C03E3-3669-4548-A6EC-BFA68C2103A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:netegrity:policy_server:5.5:*:*:*:*:*:*:*","matchCriteriaId":"C3ACEAD7-6E5F-4981-A262-D78329074B2D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108881203114336&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10645","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16618","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108881203114336&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0673","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary web script as other users via an invalid request that is echoed in the resulting error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simm-comm:sci_photo_chat:3.4.9:*:*:*:*:*:*:*","matchCriteriaId":"8C99C3CD-A0E7-4E10-923F-C8CCC46DBC03"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108880460730833&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10648","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16602","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108880460730833&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0674","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote attackers to cause a denial of service (crash) via a packet with the IP record route option set."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:enterasys:xsr-1805:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"968645F7-0D10-49E6-B413-97B7EBA9A3D0"},{"vulnerable":true,"criteria":"cpe:2.3:h:enterasys:xsr-1850:7.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"68B80741-19E0-4DF5-B5C9-76F9BA972BBB"},{"vulnerable":true,"criteria":"cpe:2.3:h:enterasys:xsr-3000:*:*:*:*:*:*:*:*","matchCriteriaId":"C4FD7EE3-39C3-4D8A-8DF7-A51349E28EA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108886995627906&w=2","source":"cve@mitre.org"},{"url":"http://www.enterasys.com/support/security/incidents/2004/07/11036.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10653","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16616","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108886995627906&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.enterasys.com/support/security/incidents/2004/07/11036.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0675","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBuilds command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcmurtrey_whitaker_and_associates:cart32:2.5a:*:*:*:*:*:*:*","matchCriteriaId":"A1154E7D-BBC5-470E-8C45-4D00A464B4D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcmurtrey_whitaker_and_associates:cart32:2.6:*:*:*:*:*:*:*","matchCriteriaId":"D1B408F8-482A-4C1C-AE51-89E6E78F8F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcmurtrey_whitaker_and_associates:cart32:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6CF765E6-54DC-42DE-A853-2170F4F8A91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcmurtrey_whitaker_and_associates:cart32:3.1:*:*:*:*:*:*:*","matchCriteriaId":"77E6ED94-B344-451B-924F-841DDC3C3E7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcmurtrey_whitaker_and_associates:cart32:3.5:*:*:*:*:*:*:*","matchCriteriaId":"2876F196-E9F0-4721-B776-3837C60D6289"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcmurtrey_whitaker_and_associates:cart32:3.5_build619:*:*:*:*:*:*:*","matchCriteriaId":"CB7098C3-6A51-41C9-BFE1-75B07AC66CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcmurtrey_whitaker_and_associates:cart32:3.5a:*:*:*:*:*:*:*","matchCriteriaId":"C1006135-9A9A-4B61-8483-801520BA32BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcmurtrey_whitaker_and_associates:cart32:3.5a_build710:*:*:*:*:*:*:*","matchCriteriaId":"AA048580-DD52-46C7-9C02-617C09144CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcmurtrey_whitaker_and_associates:cart32:4.4:*:*:*:*:*:*:*","matchCriteriaId":"C4D4A709-2994-4757-B614-FA367E618240"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcmurtrey_whitaker_and_associates:cart32:5.0:*:*:*:*:*:*:*","matchCriteriaId":"89D05C4D-EC73-4E13-9B5D-AB8938F6516C"}]}]}],"references":[{"url":"http://drponidi.5u.com/advisory.htm","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108887778628398&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10617","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16535","source":"cve@mitre.org"},{"url":"http://drponidi.5u.com/advisory.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108887778628398&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16535","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0676","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via .. (dot dot) and // (double slash) sequences in the filename parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:netfile_ftp_web_server:6.5.1.980:*:*:*:*:*:*:*","matchCriteriaId":"B5091040-461C-4728-AB83-BDF1DC9E837D"},{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:netfile_ftp_web_server:6.5.1.981:*:*:*:*:*:*:*","matchCriteriaId":"DA9A458D-7881-4E04-B2ED-74ECD0312071"},{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:netfile_ftp_web_server:6.7.2.1085:*:*:*:*:*:*:*","matchCriteriaId":"04BB08A3-B939-4C1B-B0EE-F64A9D4E6696"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108904874104880&w=2","source":"cve@mitre.org"},{"url":"http://www.haxorcitos.com/Fastream_advisory.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/10658","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16613","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108904874104880&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.haxorcitos.com/Fastream_advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/10658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0677","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service (temporary hang) via the cd command with an unusual argument, possibly due to multiple leading slashes and/or an access to the floppy drive (\"A\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:netfile_ftp_web_server:*:*:*:*:*:*:*:*","versionEndIncluding":"6.7.2.1085","matchCriteriaId":"14D748E7-95A3-4CBE-90B5-405AE7C0DF81"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108904874104880&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16615","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108904874104880&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16615","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0678","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to execute arbitrary script as other users via the page parameter."},{"lang":"es","value":"Vulnerabilidad de XSS en one2planet.infolet.InfoServlet en 12Planet Chat Server 2.9 permite a atacantes remotos ejecutar secuencias de comandos arbitrarias como otros usuarios a través del parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:12planet:chat_server:2.9:*:*:*:*:*:*:*","matchCriteriaId":"AE512C4B-6058-4F9A-8B88-9F9369C4B936"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108904648728706&w=2","source":"cve@mitre.org"},{"url":"http://www.autistici.org/fdonato/advisory/12PlanetChatServer2.9-adv.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10659","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16605","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108904648728706&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.autistici.org/fdonato/advisory/12PlanetChatServer2.9-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0679","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses."},{"lang":"es","value":"La funcionalidad de encubrimiento de IP (cloak.c) en UnrealIRCd 3.2, y posiblemente otras versiones, utiliza una función hash débil para ocultar las direcciones IP, lo que podría permitir a atacantes remotos utilizar métodos de fuerza bruta para obtener las direcciones IP de otros usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unreal:unrealircd:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DF8B42EE-E34A-4EAE-9C17-48329AD21AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:unreal:unrealircd:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C7963064-253D-423C-810E-5737530D458D"},{"vulnerable":true,"criteria":"cpe:2.3:a:unreal:unrealircd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"BBCDD11F-6B5E-4B9D-919B-86AA8ADB8B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:unreal:unrealircd:3.2_.0_beta_10:*:*:*:*:*:*:*","matchCriteriaId":"6479BA75-BABF-44DF-82F8-0078BD93C291"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108904813003166&w=2","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/560","source":"cve@mitre.org"},{"url":"http://www.bandecon.com/advisory/unreal.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10663","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.unrealircd.com/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16610","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108904813003166&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.bandecon.com/advisory/unreal.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.unrealircd.com/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16610","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0680","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access."},{"lang":"es","value":"El módem ADSL Zoom X3 tiene un terminal en ejecución por el puerto 254 que puede ser accedido utilizando la contraseña de gestión HTML por defecto, incluso aunque haya sido cambiada a través del interfaz HTML, lo que podría obtener acceso no autorizado a atacantes remotos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zoom:model_5560_x3_ethernet_adsl_modem:*:*:*:*:*:*:*:*","matchCriteriaId":"2ACFA54E-21A0-42EE-8000-4DEA6D545C31"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108915255520924&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10669","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16639","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108915255520924&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16639","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0681","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is addressed in the following product update:\r\nComersus Open Technologies, Comersus Cart, 5.098","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportError.asp, or (4) comersus_message.asp in Comersus Cart 5.09 allow remote attackers to execute web script as other users via the message parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados en:\r\n\r\ncomersus_customerAuthenticateForm.asp\r\ncomersus_backoffice_message.asp\r\ncomersus_supportError.asp\r\ncomersus_message.asp\r\n\r\nen Comersus Cart 5.09 permite a atacantes remotos ejecutar web script como otros usuarios utilizando el parámetro message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comersus_open_technologies:comersus_cart:5.09:*:*:*:*:*:*:*","matchCriteriaId":"20485E31-8663-498B-906D-9A8D8DC3AB61"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108922169327403&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10674","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16646","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108922169327403&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16646","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0682","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the URL."},{"lang":"es","value":"comersus_gatewayPayPal.asp en Comersus Cart 5.09, y posiblemente otras versiones anteriores a la 5.098, permite a atacantes remotos cambiar los precios de los artículos modificándolos directamente en la URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comersus_open_technologies:comersus_cart:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"8570BAC6-64FE-43A5-A907-182E4A81DA48"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108922336529987&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10674","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16645","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108922336529987&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10674","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16645","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0683","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service (CPU consumption) via a compressed archive that contains a large number of directories."},{"lang":"es","value":"Symantec Norton AntiVirus 2002 y 2003 permite a atacantes remotos causar la Denegación de Servicio (por consumo de CPU) mediante un archivo comprimido que contiene un gran número de directorios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:*","matchCriteriaId":"8F6F3B3C-7C60-4A38-91F0-E09148DB4FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2003:*:pro:*:*:*:*:*","matchCriteriaId":"C1538C84-EB7B-407C-9B05-27B9B0A10F16"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108938579712894&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16658","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108938579712894&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16658","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0684","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebSphere Edge Component Caching Proxy in WebSphere Edge Server 5.02, with the JunctionRewrite directive enabled, allows remote attackers to cause a denial of service via an HTTP GET request without any parameters."},{"lang":"es","value":"WebSphere Edge Component Caching Proxy en WebSphere Edge Server 5.02con la directiva JunctionRewrite activada, permite a atacantes remotos causar una denegación de servicio mediante una petición HTTP GET sin parámetros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_caching_proxy_server:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7991F904-23D8-4B40-9E44-9134C5D1B569"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_edge_server_caching_proxy:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6454ED4D-05D1-4918-8525-6D78F8643009"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108938997528245&w=2","source":"cve@mitre.org"},{"url":"http://www.cybsec.com/vuln/IBM-WebSphere-Edge-Server-DOS.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16607","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108938997528245&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cybsec.com/vuln/IBM-WebSphere-Edge-Server-DOS.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16607","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0685","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage."},{"lang":"es","value":"Ciertos controladores USB en el kernel de Linux 2.4 usa la función copy_to_user con structuras no inicializadas, lo que podría permitir a usuarios locales obtener información sensible leyendo memoria que no ha sido borrada desde el uso anterior."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD7A6B55-2F3B-422E-B1F2-80B482FE89AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"70DCE8FF-40C3-44F7-8185-0422ADDA051B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7DAC3A7C-2092-46D4-908B-CF03F4217112"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"956B7F2F-DE46-492F-ACA3-BD5EE7EA14F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"DE77B8D6-EF2A-4EC2-AF75-B6FA48747781"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"AAEC8651-9291-4CAE-AA49-C1CA4C7AE450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5A6F3945-21ED-44C6-86D2-B7755A87014E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"C4919EB3-625C-4D83-8DCB-72BCF05DF2C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"A5DDB008-E88E-473C-B030-AF9B6F5E4E48"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"0E48C9A9-B7E6-4314-BCEF-8013BBB4276E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0EEF4480-D50B-464C-AE39-A12455DBC99F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"15928E10-7D41-45B2-87D6-8AA10190A8EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*","matchCriteriaId":"C18E13C4-F42D-4168-B25E-544E1549C46B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:*:*:*:*:*:*","matchCriteriaId":"1C4B2ABB-0283-4532-9E29-B37BFF5FDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:*:*:*:*:*:*:*","matchCriteriaId":"C4DADA29-DCD3-44C4-9BDB-B881D6FCE3A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*","matchCriteriaId":"F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:pre6:*:*:*:*:*:*","matchCriteriaId":"4BD794C6-11F5-4A2B-9A3C-E03069A1526B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*","matchCriteriaId":"C4947CDE-CB89-456B-8B5F-0E17B46BC893"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*","matchCriteriaId":"6ECB42B3-70C6-4019-8B8B-8EB7A84B39AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*","matchCriteriaId":"BF701E58-35E8-4DDE-B832-C5A23E61A3CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*","matchCriteriaId":"3C122CC4-B8CB-4AB9-8571-6F3D302F56A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*","matchCriteriaId":"2498D898-D243-4D0C-9AEF-0138D19A68B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.22:*:*:*:*:*:*:*","matchCriteriaId":"3924060B-1EC1-4003-B306-E327634E7797"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.23:*:*:*:*:*:*:*","matchCriteriaId":"D45B43DF-FD4C-4C37-9569-1CCE450B8987"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.24:*:*:*:*:*:*:*","matchCriteriaId":"99879B2B-7FFB-4181-8928-13B7E17F36C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.25:*:*:*:*:*:*:*","matchCriteriaId":"83A3E250-5BC6-4AD3-A3DE-7F876FD90BE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"BC74D465-3256-4D87-8F47-C4D7CEA6E2D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.99:*:*:*:*:*:*:*","matchCriteriaId":"4817429F-B24F-47E3-BB3B-7EF9036D5F93"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.99:pre1:*:*:*:*:*:*","matchCriteriaId":"1760ADC9-78A1-4133-9720-5319A4CF1DBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.99:pre2:*:*:*:*:*:*","matchCriteriaId":"28ECE0D4-624D-4804-8013-DBA9BAF659ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.99:pre3:*:*:*:*:*:*","matchCriteriaId":"3C115333-E386-4B4D-91C6-69ECE55666F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.99:pre4:*:*:*:*:*:*","matchCriteriaId":"C5D62621-2C12-40F0-8726-E48926E4DA44"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.99:pre5:*:*:*:*:*:*","matchCriteriaId":"614F1C35-94B2-4A86-AEB4-55C774445E2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.99:pre6:*:*:*:*:*:*","matchCriteriaId":"ECDD69D6-F79F-4F0E-BA3D-E721A1885A3E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.3.99:pre7:*:*:*:*:*:*","matchCriteriaId":"ABCD388A-1E43-492E-8EEC-4E14EDD7AB62"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*","matchCriteriaId":"C5FE15BF-91C7-452A-BE1B-7EC9632421C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*","matchCriteriaId":"15C1923C-D9C4-400D-9F0F-20B519EEC9C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*","matchCriteriaId":"E51913F9-FC7D-450A-9A82-5084AA74A5B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*","matchCriteriaId":"B62E02D5-9EEE-439B-A510-BEEE28A9F358"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*","matchCriteriaId":"02278C07-E649-427D-9E5C-F1738A01BCBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D6F04081-D672-488E-A91D-5088DD04AA5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"9BDB59EF-74EF-462E-BC84-89201F734380"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0755A136-3DE3-4B61-B5EF-F6282AACD38E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B1531AD3-2525-4F6E-B77D-FE8863CBD3EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"81D950C3-0DDC-4549-99F8-1E206768219A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5C7E2A5B-6CF3-4748-BE4F-F63A4E59CB64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"195A133A-26C9-401E-913F-285BA220D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"B8D68E21-6C58-46A7-96F2-9A79DD880803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1E975B63-3D9C-4FA9-A6D0-C9865FDA7AC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"38D11B12-AFD7-4055-A366-D932CA1BA8C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*","matchCriteriaId":"BC990132-9DF2-4D23-B9DA-0819809A3CAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*","matchCriteriaId":"FFA51D40-E72C-40A4-B238-70F6806FA1B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1E1B7D68-E41E-4A5A-9606-F14F057B39E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*","matchCriteriaId":"7799A9CE-1948-4D71-BADB-A4A7ECAFF5FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*","matchCriteriaId":"70BCB10C-FD72-4F18-84C9-AE0603402426"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*","matchCriteriaId":"54A74CAB-2BD1-48BC-BCEB-983E72B3C56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*","matchCriteriaId":"CF742FF1-5504-41BB-8FAA-D71B83C791B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*","matchCriteriaId":"901C6D04-3226-4654-9A41-0325B48A2F7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*","matchCriteriaId":"072A77AD-BB27-4C24-91A0-A12D6E741593"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*","matchCriteriaId":"BF900D1D-E351-4407-8269-80E5403432B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*","matchCriteriaId":"44915F9F-88DF-4304-8F66-58A869654BDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*","matchCriteriaId":"4CC2D90D-2115-406C-B609-870B241F00B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*","matchCriteriaId":"EF681CC1-B3EC-467A-A10D-10840D3D4575"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*","matchCriteriaId":"8660C030-328E-4221-847E-AC4BDA08CE79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*","matchCriteriaId":"0EE83E4E-DBA6-47EB-80FF-9A41A2978DDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*","matchCriteriaId":"B58DE3A3-2BE0-45E3-8EFD-5A4439EAD6DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*","matchCriteriaId":"47AEC277-F9A4-412F-B2EA-C1AEA336A46C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*","matchCriteriaId":"7234AF29-BCDA-4728-A141-C169EE59CEC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*","matchCriteriaId":"E7D9064F-466F-4D66-AD5E-8BC2D31CD80D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*","matchCriteriaId":"374851C5-C61D-4964-8B4A-473B0A008F11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*","matchCriteriaId":"1FD55C81-3687-46BF-880E-58D7E005A185"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*","matchCriteriaId":"2953267F-16BF-404F-83F1-73E0908979B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*","matchCriteriaId":"9D953B61-3457-4A0E-A668-BA4937B79784"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*","matchCriteriaId":"5F5F3607-C0DD-494C-AB6E-46E383A6B17D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*","matchCriteriaId":"19138F52-25EA-42B6-89DC-692A8AF0A720"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*","matchCriteriaId":"4C2EBADC-0817-4E38-9F49-8446D8A20CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*","matchCriteriaId":"340368E7-0005-4F8A-8AF1-C20A1198288C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*","matchCriteriaId":"0DC860DD-57DF-4474-AE2B-9AADB9060175"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*","matchCriteriaId":"DC1D576A-0763-4611-B3CF-CD8514F18783"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*","matchCriteriaId":"4A61F3C5-EA3A-4AA2-8F4E-02E07864801F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*","matchCriteriaId":"6F570226-CA89-46F4-8C68-9A59BC0602A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*","matchCriteriaId":"162A88DA-E2EA-4E92-B174-9AD86BE8D983"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*","matchCriteriaId":"EBE19B6B-9537-4C76-80B2-98DAF2C15B5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*","matchCriteriaId":"5EE5C4F5-C64D-4714-B02E-689B435E3E5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*","matchCriteriaId":"BE4F20D3-77E7-4FC2-AF18-6A5E3AE08615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*","matchCriteriaId":"164F4483-9F28-491A-8F99-4242C9B9CBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*","matchCriteriaId":"34803A7D-45C4-4DBE-BF18-19CE9DE62A96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*","matchCriteriaId":"1178D6EE-A462-4CC1-B430-9A44C75D2336"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*","matchCriteriaId":"4360530E-6E07-48F9-B8F8-B36622331052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*","matchCriteriaId":"17508D09-AE14-4458-93A2-E2764452EA8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*","matchCriteriaId":"05F2CD4A-CCA9-4743-86C4-7675D2487E16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*","matchCriteriaId":"75C1504C-03C5-49E4-8192-E1E698CF07A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*","matchCriteriaId":"DB7CB4B0-1CF5-4AA7-A977-9C24AD6C486D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*","matchCriteriaId":"37A3172A-E663-42F6-90E7-51C3850AF9E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*","matchCriteriaId":"16F6692C-494F-44ED-97C6-A6CD05334DA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*","matchCriteriaId":"3B61C93E-84FE-46CE-A7DD-ACFEFB96BB62"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*","matchCriteriaId":"5E79FB38-5AE5-4ACD-B4F5-F533C0E1D503"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*","matchCriteriaId":"77231F8B-137F-4FAE-BCD9-658F32943CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*","matchCriteriaId":"552ED77A-F09A-4923-A907-8E0DF8445363"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*","matchCriteriaId":"CDD8EDD0-7817-4A5E-AE97-DA1941E859BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*","matchCriteriaId":"5DF940EA-676A-42C8-A6E0-7F53C8A34340"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*","matchCriteriaId":"BDC8FDE8-DB5A-4B2D-810D-73E91194E00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*","matchCriteriaId":"5CF7304E-AAA9-4BC3-AEF0-C9509E95ECA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*","matchCriteriaId":"29DCCFB1-054F-4BF0-92F1-78A2063415D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*","matchCriteriaId":"D3D3222C-7469-42F6-984D-3223BCD8080E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*","matchCriteriaId":"697B7069-D08D-41BD-8285-A1ABA0E1142F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*","matchCriteriaId":"72173CFB-BAB6-456C-B5F2-3AA31D799E74"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*","matchCriteriaId":"FDD08A67-195F-431B-98A5-42B2966055DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*","matchCriteriaId":"658C7317-D50B-475A-9E0E-E68AECD49B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*","matchCriteriaId":"1270F454-8E05-413C-BAF4-35D062CA5803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A0934C49-5F88-4189-BD88-2F32C39C2F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*","matchCriteriaId":"14B0A230-4054-4483-A3A7-9A5A286C7552"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*","matchCriteriaId":"F90242EF-048B-4539-AA41-87AA84875A9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*","matchCriteriaId":"3C4E9325-2A70-4E15-9AAF-5588BF218055"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*","matchCriteriaId":"01402A85-B681-4DE0-B7BB-F52567DA29E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*","matchCriteriaId":"81B543F9-C209-46C2-B0AE-E14818A6992E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*","matchCriteriaId":"DB89C970-DE94-4E09-A90A-077DB83AD156"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127921","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20162","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20163","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20202","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20338","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/981134","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-504.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-505.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10892","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityspace.com/smysecure/catid.html?id=14580","source":"cve@mitre.org"},{"url":"http://www.trustix.net/errata/2004/0041/","source":"cve@mitre.org"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2336","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16931","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10665","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/981134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-504.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-505.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityspace.com/smysecure/catid.html?id=14580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.net/errata/2004/0041/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16931","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0686","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the \"mangling method = hash\" option is enabled in smb.conf, has unknown impact and attack vectors."},{"lang":"es","value":"Desbordamiento de búfer en Samba 2.2.x a 2.2.9 y 3.0.0 a 3.0.4, cuando la opción \"mangling method = hash\" está establecida en smb.conf, con impacto y vectores de ataque desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"2.2.0","versionEndExcluding":"2.2.10","matchCriteriaId":"9DF58209-1ECB-4090-A263-C2B4AB552E29"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.0.5","matchCriteriaId":"4AEE1F34-E1DD-4365-86BB-5D7DA9242CC6"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*","matchCriteriaId":"39605B96-BAD6-45C9-BB9A-43D6E2C51ADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000851","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000854","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109051340810458&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109051533021376&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109052891507263&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109094272328981&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109785827607823&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2004_22_samba.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-259.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2004/0039/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16786","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10461","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109051340810458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109051533021376&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109052891507263&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109094272328981&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109785827607823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2004_22_samba.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-259.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2004/0039/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-0687","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file."},{"lang":"es","value":"Múltiples desbordamientos de búfer basados en la pila en (1) xpmParseColors en parse.c, (2) ParseAndPutPixels en create.c, y (3) ParsePixels en parse.c de libXpm anteriores a 6.8.1 permite a atacantes remotos ejecutar código de su elección mediante una imagen XPM malformada."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11r6:6.7.0:*:*:*:*:*:*:*","matchCriteriaId":"76FFBC43-2178-48DF-B61E-CCBA4682AC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11r6:6.8:*:*:*:*:*:*:*","matchCriteriaId":"8F506308-E878-4AA5-B5D5-A7E148D63947"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"0946A224-6A0C-4DE3-89F9-200682431737"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F33E5444-E178-4F49-BDA1-DE576D8526EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1BCC09AA-AB01-4583-8052-66DBF0E1861D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"0E49FAA6-E146-4AD5-845E-9445C7D9F088"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"43425C85-806B-4823-AD74-D0A0465FC8DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"90FA67D9-8296-4534-8354-51B830DE3499"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"8A000C67-7EA3-47A7-9068-1C8744C182D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"25EDDB93-DD20-4DBE-962B-6334D5A7CB45"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4AC4F566-5D54-4364-B5AA-F846A0C8FCEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7F9D1BD9-4300-43B5-A87B-E2BF74E55C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:errata:*:*:*:*:*","matchCriteriaId":"F4B7E143-E24B-40D2-897B-6D516566B7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"837EBF15-6C7D-46B8-8A90-9DFBF2C09FF3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D2E2EF3C-1379-4CBE-8FF5-DACD47834651"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"F7446746-87B7-4BD3-AABF-1E0FAA8265AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000924","source":"cve@mitre.org"},{"url":"http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2005/May/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109530851323415&w=2","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/170620/Solaris-10-dtprintinfo-libXm-libXpm-Security-Issues.html","source":"cve@mitre.org"},{"url":"http://scary.beasts.org/security/CESA-2004-003.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20235","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57653-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-560","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-34.xml","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200502-07.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/882750","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:098","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-537.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-004.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/434715/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/434715/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11196","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-136A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2006/1914","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17414","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9187","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/27-1/","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2005/May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109530851323415&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/170620/Solaris-10-dtprintinfo-libXm-libXpm-Security-Issues.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scary.beasts.org/security/CESA-2004-003.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57653-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-34.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200502-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/882750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-537.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/434715/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/434715/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-136A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2006/1914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17414","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/27-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0688","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file."},{"lang":"es","value":"Múltiples desbordamientos de búfer en xpmParseColors en parse.c de libXpm anteriores a 6.8.1 permite a atacantes remotos ejecutar código arbitrario mediante un fichero de imagen XPM malformado."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11r6:6.7.0:*:*:*:*:*:*:*","matchCriteriaId":"76FFBC43-2178-48DF-B61E-CCBA4682AC5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:x.org:x11r6:6.8:*:*:*:*:*:*:*","matchCriteriaId":"8F506308-E878-4AA5-B5D5-A7E148D63947"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:3.3.6:*:*:*:*:*:*:*","matchCriteriaId":"0946A224-6A0C-4DE3-89F9-200682431737"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F33E5444-E178-4F49-BDA1-DE576D8526EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1BCC09AA-AB01-4583-8052-66DBF0E1861D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.0.2.11:*:*:*:*:*:*:*","matchCriteriaId":"0E49FAA6-E146-4AD5-845E-9445C7D9F088"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"43425C85-806B-4823-AD74-D0A0465FC8DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"90FA67D9-8296-4534-8354-51B830DE3499"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.11:*:*:*:*:*:*:*","matchCriteriaId":"8A000C67-7EA3-47A7-9068-1C8744C182D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.1.12:*:*:*:*:*:*:*","matchCriteriaId":"25EDDB93-DD20-4DBE-962B-6334D5A7CB45"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4AC4F566-5D54-4364-B5AA-F846A0C8FCEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"7F9D1BD9-4300-43B5-A87B-E2BF74E55C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.2.1:*:errata:*:*:*:*:*","matchCriteriaId":"F4B7E143-E24B-40D2-897B-6D516566B7F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:xfree86_project:x11r6:4.3.0:*:*:*:*:*:*:*","matchCriteriaId":"837EBF15-6C7D-46B8-8A90-9DFBF2C09FF3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D2E2EF3C-1379-4CBE-8FF5-DACD47834651"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"F7446746-87B7-4BD3-AABF-1E0FAA8265AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000924","source":"cve@mitre.org"},{"url":"http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2005/May/msg00001.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109530851323415&w=2","source":"cve@mitre.org"},{"url":"http://scary.beasts.org/security/CESA-2004-003.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20235","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57653-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-560","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-34.xml","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200502-07.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/537878","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:098","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-537.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-004.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/434715/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/434715/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11196","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-136A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2006/1914","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17416","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11796","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/27-1/","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2005/May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109530851323415&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scary.beasts.org/security/CESA-2004-003.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57653-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-34.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200502-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/537878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_34_xfree86_libs_xshared.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-537.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/434715/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/434715/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-136A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2006/1914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17416","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/27-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0689","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KDE before 3.3.0 does not properly handle when certain symbolic links point to \"stale\" locations, which could allow local users to create or truncate arbitrary files."},{"lang":"es","value":"KDE 3.3.0 no maneja adecuadamente ciertos enlaces simbólicos que apuntan a localizaciones \"gastadas\", lo que podría permitir a usaurios locales crear o truncar ficheros arbitrarios."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:*:*:*:*:*:*:*:*","versionEndExcluding":"3.3","matchCriteriaId":"517F497F-7335-4433-AAAC-9B4D32CABA6C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=109225538901170&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/12276/","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200408-13.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-539","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20040811-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16963","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9334","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=109225538901170&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/12276/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200408-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kde.org/info/security/advisory-20040811-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0690","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory."},{"lang":"es","value":"El servidor DCOP en KDE 3.2.3 y anteriores permite a usuarios locales ganar acceso autorizado mediante un ataque de enlaces simbólicos en ficheros DCOP en el directorio /tmp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"ACEE0AED-7918-41E9-A902-AC4070E03132"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261386","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109225538901170&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12276","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200408-13.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/330638","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kde.org/info/security/advisory-20040811-2.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:086","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10924","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16962","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109225538901170&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200408-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/330638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kde.org/info/security/advisory-20040811-2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16962","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0691","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code."},{"lang":"es","value":"Desbordamiento de búfer basado en el montón en el procesador de formato de imagen BMP de la librería QT (qt3) anteriores a 3.3.3 permite a atacantes remotos causar una denegación de servicio (caída de aplicación) y posiblemente ejecutar código de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:qt:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.3","matchCriteriaId":"1A34F9FC-4968-4A8A-ACCB-2AC2C234EF6C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109295309008309&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200408-20.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-542","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:085","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_27_qt3.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-414.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17040","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9485","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109295309008309&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200408-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_27_qt3.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-414.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0692","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XPM parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0693."},{"lang":"es","value":"El procesador XPM en la librería QT (qt3) en versiónes anteriores a 3.3.3 permite a atacantes remotos causar una denegación de servicio (caída de aplicación) mediante un fichero de imagen malformado que dispara una desreferencia nula, una vulnerabilidad distinta de CAN-2004-0693."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:qt:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.3","matchCriteriaId":"1A34F9FC-4968-4A8A-ACCB-2AC2C234EF6C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110979666528890&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200408-20.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-542","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:085","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_27_qt3.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-414.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17041","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10327","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110979666528890&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200408-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_27_qt3.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-414.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10327","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0693","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The GIF parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0692."},{"lang":"es","value":"El procesador GIF en la librería QT (qt3) en versiónes anteriores a 3.3.3 permite a atacantes remotos causar una denegación de servicio (caída de aplicación) mediante un fichero de imagen malformado que dispara una desreferencia nula, una vulnerabilidad distinta de CAN-2004-0692."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trolltech:qt:*:*:*:*:*:*:*:*","versionEndIncluding":"3.3.3","matchCriteriaId":"1A34F9FC-4968-4A8A-ACCB-2AC2C234EF6C"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200408-20.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-542","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:085","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_27_qt3.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-414.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17042","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10883","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200408-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_27_qt3.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-414.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10883","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0695","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command."},{"lang":"es","value":"Desbordamiento de búfer basado en la pila en el servicio FTP de 4D WebSTAR 5.3.2 y anteriores permite a atacantes remotos ejecutar código de su elección mediante un comando FTP largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F8B87C95-4B34-4628-AD03-67D1DE13E097"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2:*:*:*:*:*:*:*","matchCriteriaId":"758F95DB-E619-4B08-86FA-6CF2C1B0CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4F04471C-732F-44EE-AD1B-6305C1DD7DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3499913B-5DCD-4115-8C7B-9E8AFF79DE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E237919A-416B-4039-AAD2-7FAE1F4E100D"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"39149924-188C-40C1-B598-A9CD407C90DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3:*:*:*:*:*:*:*","matchCriteriaId":"15D5780C-4E29-4BCA-A47E-29FF6EAF33FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E6501108-5455-48FE-AA82-37AFA5D7EC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"711E924F-7802-4FEB-9CBC-A28046036284"}]}]}],"references":[{"url":"ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2004/a071304-1.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16686","source":"cve@mitre.org"},{"url":"ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/2004/a071304-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16686","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0696","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a \"*\" (asterisk) character."},{"lang":"es","value":"El script ShellExample.cgi en WebSTAR 5.3.2 y anteriores permite a un atacante remotos listar directorios arbitrarios mediante una URL con la ruta deseada y un carácter \"*\" (asterisco)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F8B87C95-4B34-4628-AD03-67D1DE13E097"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2:*:*:*:*:*:*:*","matchCriteriaId":"758F95DB-E619-4B08-86FA-6CF2C1B0CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4F04471C-732F-44EE-AD1B-6305C1DD7DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3499913B-5DCD-4115-8C7B-9E8AFF79DE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E237919A-416B-4039-AAD2-7FAE1F4E100D"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"39149924-188C-40C1-B598-A9CD407C90DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3:*:*:*:*:*:*:*","matchCriteriaId":"15D5780C-4E29-4BCA-A47E-29FF6EAF33FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E6501108-5455-48FE-AA82-37AFA5D7EC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"711E924F-7802-4FEB-9CBC-A28046036284"}]}]}],"references":[{"url":"ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2004/a071304-1.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10721","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16687","source":"cve@mitre.org"},{"url":"ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/2004/a071304-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16687","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0697","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sensitive information."},{"lang":"es","value":"Vulnerabilidad desconocida en 4D WebSTAR 5.3.2 y anteriores permite a atacantes remotos leer el fichero de configuración php.ini y posiblemente obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F8B87C95-4B34-4628-AD03-67D1DE13E097"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2:*:*:*:*:*:*:*","matchCriteriaId":"758F95DB-E619-4B08-86FA-6CF2C1B0CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4F04471C-732F-44EE-AD1B-6305C1DD7DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3499913B-5DCD-4115-8C7B-9E8AFF79DE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E237919A-416B-4039-AAD2-7FAE1F4E100D"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"39149924-188C-40C1-B598-A9CD407C90DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3:*:*:*:*:*:*:*","matchCriteriaId":"15D5780C-4E29-4BCA-A47E-29FF6EAF33FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E6501108-5455-48FE-AA82-37AFA5D7EC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"711E924F-7802-4FEB-9CBC-A28046036284"}]}]}],"references":[{"url":"ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2004/a071304-1.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16688","source":"cve@mitre.org"},{"url":"ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/2004/a071304-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16688","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0698","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack."},{"lang":"es","value":"4D WebSTAR 5.3.2 y anteriores permiten a usuarios locales leer y modificar ficheros de su elección mediante una ataque de enlaces simbólicos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F8B87C95-4B34-4628-AD03-67D1DE13E097"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2:*:*:*:*:*:*:*","matchCriteriaId":"758F95DB-E619-4B08-86FA-6CF2C1B0CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4F04471C-732F-44EE-AD1B-6305C1DD7DDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3499913B-5DCD-4115-8C7B-9E8AFF79DE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"E237919A-416B-4039-AAD2-7FAE1F4E100D"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.2.4:*:*:*:*:*:*:*","matchCriteriaId":"39149924-188C-40C1-B598-A9CD407C90DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3:*:*:*:*:*:*:*","matchCriteriaId":"15D5780C-4E29-4BCA-A47E-29FF6EAF33FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E6501108-5455-48FE-AA82-37AFA5D7EC24"},{"vulnerable":true,"criteria":"cpe:2.3:a:4d:webstar:5.3.2:*:*:*:*:*:*:*","matchCriteriaId":"711E924F-7802-4FEB-9CBC-A28046036284"}]}]}],"references":[{"url":"ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt","source":"cve@mitre.org"},{"url":"http://www.atstake.com/research/advisories/2004/a071304-1.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16689","source":"cve@mitre.org"},{"url":"ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.atstake.com/research/advisories/2004/a071304-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16689","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0699","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data."},{"lang":"es","value":"Desbordamiento de búfer basado en el montón en la librería de decodificación ASN.1 de productos CheckPoint VPN-1, cuando se ha implementado IKE agresivo, permite a atacantes remotos ejecutar código de su elección iniciando una negociación IKE y enviando un paquete IKE  con datos ASN.1 malformados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp6:*:*:*:*:*:*","matchCriteriaId":"8505646A-6118-4274-9281-FC3C383E30E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:vpn-1:*:*:*:*:*:*:*:*","matchCriteriaId":"A19E9E90-E765-47F0-9D37-479C5D8846E6"}]}]}],"references":[{"url":"http://secunia.com/advisories/12177/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Jul/1010799.html","source":"cve@mitre.org"},{"url":"http://www.checkpoint.com/techsupport/alerts/asn1.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-190.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/435358","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=8290","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10820","source":"cve@mitre.org"},{"url":"http://xforce.iss.net/xforce/alerts/id/178","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16824","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12177/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2004/Jul/1010799.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.checkpoint.com/techsupport/alerts/asn1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-190.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/435358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=8290","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10820","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xforce.iss.net/xforce/alerts/id/178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0700","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function."},{"lang":"es","value":"Vulnerabilidad de cadena de formateo en la función ssl_log en ssl_engine_log.c en mod_ssl 2.8.10 de Apache 1.3.31 puede permitir a atacantes remotos ejecutar mensajes de su elección mediante especificadores de cadena de formato en ciertos mensajes de registro de HTTPS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.3.11:*:*:*:*:*:*:*","matchCriteriaId":"2B29D8AB-D664-4AF1-8967-03572ECBBA38"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E78D69A6-3F25-4048-8739-E8A064C5614D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0229B381-1AD6-4AEC-8B94-0D2AF77DC60A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"E257E1DB-C60A-4BD4-9FE9-F3D784D30BEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"8FC3770C-D06D-496D-8F28-9A4036B498E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"AC894E0F-1CC9-43BF-8E83-673034BB0211"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"ABA6F650-DDBD-4A93-A4AF-73A07F362BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"3234A39B-79B9-4A41-A72F-8FD1477E21C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"C4A08F3D-CAB6-4F10-B7E3-6580FB2A6CA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"8B9C8865-9A18-4507-B9E3-48F4F19C18EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"F57A822D-E474-49B1-A262-BDA9829ED2CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"049AADD4-CBBB-4CA3-8105-D3D94649C6BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"67FCB442-61F5-42B3-849D-70638627B7CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8F910BD4-B1C5-458B-9540-8F9E32C1FC7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2DC707E0-4F4D-45C2-86C4-F6764668FDB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"61731D0A-2C38-4C2A-8FC0-0634D7EFA0E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"92D81C48-613B-4021-95A9-F049CDC63E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"1D73CD68-2C38-4FE8-9ABE-5558E7BF135B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"C1B98B05-AEE6-4753-B3F3-8B09DE91985B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"E3061E09-41FD-4477-B8DA-AA019F63C5F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"F810E15C-61CF-40D0-9F40-12B1A65F8EAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.7.0:*:*:*:*:*:*:*","matchCriteriaId":"3BDE0520-8E51-4DFF-8CA2-5EF32281DD15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB888875-1AFC-4569-B783-CDE92B717882"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.0:*:*:*:*:*:*:*","matchCriteriaId":"FD6F68B8-B03D-43F9-BD40-1C30829597A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"C39E94EF-FEF4-41CA-BCD5-F3273D40D0F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.1.2:*:*:*:*:*:*:*","matchCriteriaId":"5778FC41-73B9-46E8-8A75-1BB09D36D081"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.2:*:*:*:*:*:*:*","matchCriteriaId":"08A7DE9F-3088-445E-A09A-FC8E155C4E95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"3906A1FB-3105-4248-B9D2-B915AEF90E9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"F1DB98C0-A15B-4186-8DAC-D906ABBEC2F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"15B615EC-D5AF-4C62-AF0A-453F7FD11DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A56EBBAA-30C7-4872-9966-F2DA78FC4AC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.5.2:*:*:*:*:*:*:*","matchCriteriaId":"77AC8014-D4BE-498B-A684-D2C2AA9CDB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.6:*:*:*:*:*:*:*","matchCriteriaId":"50211658-1959-4E97-9FF5-6ABAF3B98C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.7:*:*:*:*:*:*:*","matchCriteriaId":"CFC67365-5E6C-4BA2-B50F-5D6A6B3E7E72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"4A320B10-6961-4A6F-BE8E-B4C1E90C0291"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.9:*:*:*:*:*:*:*","matchCriteriaId":"6535C201-61AE-4C2F-950F-D55C554DF4DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.10:*:*:*:*:*:*:*","matchCriteriaId":"7E038ED0-981E-4107-A0CC-59CBCF32D618"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.12:*:*:*:*:*:*:*","matchCriteriaId":"7F857736-54C2-45DF-B93C-CA8152E433A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.14:*:*:*:*:*:*:*","matchCriteriaId":"01DDB4D6-07E4-4EF6-BF70-363543373003"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.15:*:*:*:*:*:*:*","matchCriteriaId":"A691D1FB-75BB-400A-994A-CFAC2C276085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.16:*:*:*:*:*:*:*","matchCriteriaId":"E8D44D44-51B2-479E-BC44-128B4340A93E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.17:*:*:*:*:*:*:*","matchCriteriaId":"BAA93449-5248-45FB-AD18-F407BADBC500"},{"vulnerable":true,"criteria":"cpe:2.3:a:mod_ssl:mod_ssl:2.8.18:*:*:*:*:*:*:*","matchCriteriaId":"D680A59D-4BA8-4F9B-95E5-49F15B6A1388"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857","source":"cve@mitre.org"},{"url":"http://marc.info/?l=apache-modssl&m=109001100906749&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109005001205991&w=2","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0407-advisories/modsslFormat.txt","source":"cve@mitre.org"},{"url":"http://virulent.siyahsapka.org/","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-532","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/303448","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7929","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-405.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-408.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10736","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-177-1","source":"cve@mitre.org"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1888","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16705","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=apache-modssl&m=109001100906749&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109005001205991&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0407-advisories/modsslFormat.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://virulent.siyahsapka.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/303448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-405.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-408.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-177-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16705","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0701","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access."},{"lang":"es","value":"Sun Ray Server Software (SRSS) 1.3 y 2.0 de Solaris 2.6, 7 y 8 no detecta adecuadamente la extracción de una smartcard cuando la tarjeta es rápidamente extraida, insertada y extraída de nuevo, lo que podría permitir que una sesión de usuario permanezca abierta y que usuarios locales ganaran acceso no autorizado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:1.3:*:*:*:*:*:*:*","matchCriteriaId":"341C2AE7-FE84-4038-86F3-0C1393E77A9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:ray_server_software:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0ECEA7ED-53D2-4AD2-896A-86BF2816411B"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F53922","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/100780","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/7457","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11905","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F53922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/100780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/7457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0702","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could allow remote attackers to gain sensitive information."},{"lang":"es","value":"DBI de Bugzilla 2.17.1 a 2.17.7 muestra la contraseña de la base de datos en un mensaje de error cuando el servidor SQL no está corriendo, lo que podría permitir a atacantes remotos obtener información sensible."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*","matchCriteriaId":"F86EE5DB-442B-4C78-8152-AF1048C6A974"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*","matchCriteriaId":"19B82A1A-56EB-41D5-8619-2A717E3A6ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*","matchCriteriaId":"9B2FC5C7-B218-4B87-9805-F90AC0E7A281"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108965446813639&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10698","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16673","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108965446813639&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16673","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0703","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with \"grant membership\" privileges to grant memberships to groups that the user does not control."},{"lang":"es","value":"Vulnerabilidad desconocida en los controles administrativos de Bugzilla 2.17.1 a 2.17.7 permite a usuarios con privilegios \"grant membership\" hacer miembros a grupos que el usuario no controla."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*","matchCriteriaId":"F86EE5DB-442B-4C78-8152-AF1048C6A974"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*","matchCriteriaId":"19B82A1A-56EB-41D5-8619-2A717E3A6ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*","matchCriteriaId":"9B2FC5C7-B218-4B87-9805-F90AC0E7A281"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108965446813639&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10698","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16672","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108965446813639&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16672","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0704","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, when configured to hide products, allows remote attackers to view hidden products."},{"lang":"es","value":"Vulnerabilidad desconocida en (1)duplicates.cgi y (2) buglist.cgi de Bugzilla 2.16.x anteriores a 2.16.6, 2.18 anteriores a 2.19rc1, cuando se configuran para esconder productos, permite a atacantes remotos ver los productos ocultos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*","matchCriteriaId":"F86EE5DB-442B-4C78-8152-AF1048C6A974"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*","matchCriteriaId":"19B82A1A-56EB-41D5-8619-2A717E3A6ECF"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*","matchCriteriaId":"9B2FC5C7-B218-4B87-9805-F90AC0E7A281"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108965446813639&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10698","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16671","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108965446813639&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0705","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.cgi, (4) editproducts.cgi, (5) editusers.cgi, and (6) editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other users via a URL parameter."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de órdenes en sitios cruzados (XSS) en (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.cgi, (4) editproducts.cgi, (5) editusers.cgi, y (6) editversions.cgi de Bugzilla 2.16.x anteriores a 2.16.6 y 2.18 anteriores a 2.18rc1, permite a atacantes remotos ejecutar código JavaScritp de su elección como otros usuarios mediante una parámetro en la URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*","matchCriteriaId":"F86EE5DB-442B-4C78-8152-AF1048C6A974"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*","matchCriteriaId":"19B82A1A-56EB-41D5-8619-2A717E3A6ECF"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*","matchCriteriaId":"9B2FC5C7-B218-4B87-9805-F90AC0E7A281"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=235265","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108965446813639&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10698","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16670","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=235265","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108965446813639&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16670","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0706","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log files."},{"lang":"es","value":"Bugzilla 2.17.5 a 2.17.7 incluye la contaseña en una URL de una imagen, lo que podría permitir a usuarios locales ver la contraseña en los ficheros de registro del servidor web."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*","matchCriteriaId":"F86EE5DB-442B-4C78-8152-AF1048C6A974"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*","matchCriteriaId":"19B82A1A-56EB-41D5-8619-2A717E3A6ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*","matchCriteriaId":"9B2FC5C7-B218-4B87-9805-F90AC0E7A281"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=235510","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108965446813639&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10698","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16669","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=235510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108965446813639&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16669","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0707","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en editusers.cgi en Bugzilla 2.16.x anteriores a 2.16.6, y 2.18 anterioresa a 2.18rc1, permite a atacantes remotos con privilegios otorgar privilegio de pertenencia a cualquier grupo para ejecutar SQL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*","matchCriteriaId":"F86EE5DB-442B-4C78-8152-AF1048C6A974"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*","matchCriteriaId":"19B82A1A-56EB-41D5-8619-2A717E3A6ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*","matchCriteriaId":"9B2FC5C7-B218-4B87-9805-F90AC0E7A281"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=244272","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108965446813639&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10698","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16668","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=244272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108965446813639&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16668","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0708","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges."},{"lang":"es","value":"MoinMoin 1.2.1 y anteiores permite a atacantes remotos ganar privilegios creando un usuario con el mismo nombre de un grupo existente con privilegios mayores."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7F7EF155-C5E0-4473-B635-C551BF3F8EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2:*:*:*:*:*:*:*","matchCriteriaId":"ABFA7F26-835B-4454-91A2-1DBB80C53492"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C92D8510-CA34-4E6D-B432-997860C63B89"}]}]}],"references":[{"url":"http://secunia.com/advisories/11807","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=948103&group_id=8482&atid=108482","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-09.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6704","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10568","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16465","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=948103&group_id=8482&atid=108482","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0709","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which could allow remote attackers to bypass access restrictions."},{"lang":"es","value":"HP OpenView Select Access 5.0 a 6.0 no decodifica correctamente caractéres unicode en una URL, lo que podría permitir a atacantes remotos saltarse restricciones de acceso."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_select_access:5.0:patch_4:*:*:*:*:*:*","matchCriteriaId":"312148B1-981A-425C-BD17-2F7C834F032B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_select_access:5.1:patch_1:*:*:*:*:*:*","matchCriteriaId":"31AA0DA8-52DA-403C-86E0-58973227F594"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_select_access:5.2:*:*:*:*:*:*:*","matchCriteriaId":"83B8A16E-1B74-4E37-B72E-5A77BBCD2BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_select_access:6.0:*:*:*:*:*:*:*","matchCriteriaId":"0B944350-61B4-46BB-A240-301861954309"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/205766","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/6774","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10414","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16247","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/205766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/6774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16247","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0710","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IP Security VPN Services Module (VPNSM) in Cisco Catalyst 6500 Series Switch and the Cisco 7600 Series Internet Routers running IOS before 12.2(17b)SXA, before 12.2(17d)SXB, or before 12.2(14)SY03 could allow remote attackers to cause a denial of service (device crash and reload) via a malformed Internet Key Exchange (IKE) packet."},{"lang":"es","value":"El Módulo de Servicios de Seguridad VPN (VPNSM) del Cisco Catalyst 6500 Series Switch y el Cisco 7600 Series Internet Routers corriendo IOS anterioreas a 12.2(17b)SXA, anteriores a 12.2(17d)SXB, o anteriores a before 12.2(14)SY03) podría permitir a atacantes remotos causar una denegación de servicio (caída y reinicio del dispositivo) mediante un paquete Internet Key Exchange (IKE) malformado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sy:*:*:*:*:*:*:*","matchCriteriaId":"CD1F4148-E772-4708-8C1F-D67F969C11DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)za:*:*:*:*:*:*:*","matchCriteriaId":"26835676-2738-47CB-A364-78D1964FEC4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)za2:*:*:*:*:*:*:*","matchCriteriaId":"209A1BE7-EEFC-476E-84E4-4EFD68DD7E81"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(17a\\)sxa:*:*:*:*:*:*:*","matchCriteriaId":"CE7F49F3-0A0A-4270-A657-CDE987637684"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxa:*:*:*:*:*:*:*","matchCriteriaId":"E7A672BD-87AE-424D-8735-073BBE9CE164"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sxb:*:*:*:*:*:*:*","matchCriteriaId":"95C033E3-184B-4AC1-B10D-8318FEAF73FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*","matchCriteriaId":"09458CD7-D430-4957-8506-FAB2A3E2AA65"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*","matchCriteriaId":"62626BB6-D4EA-4A8A-ABC1-F86B37F19EDB"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040408-vpnsm.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/904310","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10083","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15797","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5696","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040408-vpnsm.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/904310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5696","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0711","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in \"*\" as wildcards as if they were the legal \"/*\" pattern, which could cause WebLogic 7.x to allow remote attackers to bypass intended access restrictions because the illegal patterns are properly rejected."},{"lang":"es","value":"La característica de coincidencia de patrones en URL de WebLogic Server 6.x encuentra coincidencias en patrones ilegales terminados en \"*\" como comodines como si fueran el patrón legal \"/\", lo que podría causar que usuarios remotos se saltaran las restricciones de acceso pretendidas porque los patrones ilegales son rechazados adecuadamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*","matchCriteriaId":"FBDF3AC0-0680-4EEE-898C-47D194667BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*","matchCriteriaId":"8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6828CE4B-91E8-4688-977F-DC7BC21131C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*","matchCriteriaId":"BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*","matchCriteriaId":"9CD2BB36-AC0B-48E9-91E1-A4465896E87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*","matchCriteriaId":"6FB8930F-C6D8-40B9-8D08-751F5B47229B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*","matchCriteriaId":"A5C59B80-279B-45B3-9CC1-5A263681025B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"893D9D88-43C4-4F9F-A364-0585DE6FA9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*","matchCriteriaId":"D59F9859-7344-43F0-9348-E57FABB9E431"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*","matchCriteriaId":"D2D05BAB-AB3B-466E-8301-01A41644DE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"D34E2925-DE2A-437F-B349-BD7103F4C37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*","matchCriteriaId":"0A4EC87D-EF83-48C5-B516-A6A482D9F525"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*","matchCriteriaId":"935F28E3-9799-4EF6-AB83-62E9C214DD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*","matchCriteriaId":"ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*","matchCriteriaId":"A3DFE048-905E-4890-809D-F6BCEF7F83C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*","matchCriteriaId":"F7560131-A6AC-4BBB-AA2D-C7C63AB51226"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"}]}]}],"references":[{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_56.00.jsp","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/184558","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10184","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15927","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_56.00.jsp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/184558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15927","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0712","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The configuration tools (1) config.sh in Unix or (2) config.cmd in Windows for BEA WebLogic Server 8.1 through SP2 create a log file that contains the administrative username and password in cleartext, which could allow local users to gain privileges."},{"lang":"es","value":"Las herramientes de configuracion (1) config.sh en Unix o (2) config.cmd en Windows de BEA WebLogic Server 8.1 a SP2 crean un fichero de registro que contiene el nombre y la contraseña del administrador en texto claro, lo que podría permitir a usuarios locales ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*","matchCriteriaId":"ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*","matchCriteriaId":"A3DFE048-905E-4890-809D-F6BCEF7F83C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*","matchCriteriaId":"F7560131-A6AC-4BBB-AA2D-C7C63AB51226"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"D18E22CC-A0FC-4BC7-AD39-2645F57486C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*","matchCriteriaId":"893C2387-03E3-4F8E-9029-BC64C64239EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"D00633D1-4B38-48D9-B5CD-E8D66EA90599"}]}]}],"references":[{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_58.00.jsp","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/574222","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10188","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15926","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_58.00.jsp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/574222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15926","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0713","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic Express version 8.1 through SP2, 7.0 through SP4, and 6.1 through SP6, does not properly check EJB permissions before unexporting a bean, which allows remote authenticated users to remove EJB objects from remote views before the security exception is thrown."},{"lang":"es","value":"El método remove en una Enterprise JavaBean (EJB) con estado  en BEA WebLogic Server y WebLogic Express version 8.1 hasta SP2, 7.0 hasta SP4, y 6.1 a SP6, no comprueba adecuadamente permisos EJB antes de dejar de exportar una habichuela (bean), lo que permite a usuarios remotos autenticados eliminar objetos EJB de vistas remotas antes de que se lance la excepción de seguridad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*","matchCriteriaId":"05AFBE78-C611-4EA2-8B00-5F8B61696CBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*","matchCriteriaId":"AC5439C1-D06F-44C6-94F5-2BD8598A506C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*","matchCriteriaId":"C3B7752C-B297-480A-B3FC-948EA081670C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"E40C38EC-ECA4-4F0C-8468-16191CDB9997"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*","matchCriteriaId":"63017BF8-D681-45EC-9C31-09D029F1126D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*","matchCriteriaId":"71892EC0-E6B1-4214-AC53-06489F711829"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"C4FD8871-680E-40F9-85AB-417B5195D4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*","matchCriteriaId":"8E0B1791-974A-4967-8CF9-33BE8183200B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*","matchCriteriaId":"696F52AE-FEB9-4090-872E-FDFD969F5604"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*","matchCriteriaId":"2B4BC3F5-BFE8-4834-B427-B6260D5B7A85"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*","matchCriteriaId":"7B12A8B1-F78E-46B3-8872-4C6484345477"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*","matchCriteriaId":"DCED03B6-7565-4F53-8D85-F3391BF66988"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*","matchCriteriaId":"D2FE768F-363B-49BC-8410-739B164FB32E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*","matchCriteriaId":"CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*","matchCriteriaId":"B70F0353-635F-465B-A7E5-AF2D017AB008"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*","matchCriteriaId":"D3DA28D0-18CC-4F99-AABB-EC7863CBD455"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*","matchCriteriaId":"6B091903-943F-4822-9F24-9D109B2D76A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*","matchCriteriaId":"CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*","matchCriteriaId":"FBDF3AC0-0680-4EEE-898C-47D194667BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*","matchCriteriaId":"8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6828CE4B-91E8-4688-977F-DC7BC21131C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*","matchCriteriaId":"BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*","matchCriteriaId":"9CD2BB36-AC0B-48E9-91E1-A4465896E87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*","matchCriteriaId":"6FB8930F-C6D8-40B9-8D08-751F5B47229B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*","matchCriteriaId":"A5C59B80-279B-45B3-9CC1-5A263681025B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"893D9D88-43C4-4F9F-A364-0585DE6FA9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*","matchCriteriaId":"D59F9859-7344-43F0-9348-E57FABB9E431"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*","matchCriteriaId":"D2D05BAB-AB3B-466E-8301-01A41644DE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"D34E2925-DE2A-437F-B349-BD7103F4C37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*","matchCriteriaId":"0A4EC87D-EF83-48C5-B516-A6A482D9F525"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*","matchCriteriaId":"935F28E3-9799-4EF6-AB83-62E9C214DD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*","matchCriteriaId":"ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*","matchCriteriaId":"A3DFE048-905E-4890-809D-F6BCEF7F83C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*","matchCriteriaId":"F7560131-A6AC-4BBB-AA2D-C7C63AB51226"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"D18E22CC-A0FC-4BC7-AD39-2645F57486C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*","matchCriteriaId":"893C2387-03E3-4F8E-9029-BC64C64239EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"D00633D1-4B38-48D9-B5CD-E8D66EA90599"}]}]}],"references":[{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_57.00.jsp","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/658878","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10185","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15928","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_57.00.jsp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/658878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0714","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Internetwork Operating System (IOS) 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports (UDP 162 and a randomly chosen UDP port), which allows remote attackers to cause a denial of service (device reload and memory corruption)."},{"lang":"es","value":"Cisco Internetwork Operating System (IOS) 12.0S a 12.3T intenta procesar operaciones SNMP solicitadas en puertos inapropiados (UDP 162 y un puerto UDP escogido aleatoriamente), lo que permite a atacantes remotos causar una denegación de servicio (recarga del dispositivo y corrupción de memoria)"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(23\\)s4:*:*:*:*:*:*:*","matchCriteriaId":"332C413B-7AC7-4475-A968-9D0B7EF14B6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(23\\)s5:*:*:*:*:*:*:*","matchCriteriaId":"35999D5E-F831-446C-B509-F1531A2D1DCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(24\\)s4:*:*:*:*:*:*:*","matchCriteriaId":"58DF5979-73D5-4B2E-B98E-CD0AB8517F45"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(24\\)s5:*:*:*:*:*:*:*","matchCriteriaId":"1EA92F7A-C14E-4186-8E96-51D2BDC40DE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(26\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"179CEE21-E5CA-466A-BAF0-8936F2E0B06F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(27\\)s:*:*:*:*:*:*:*","matchCriteriaId":"00682210-2C86-4912-A423-5F7011C2FA2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(27\\)sv:*:*:*:*:*:*:*","matchCriteriaId":"498F4C0D-393D-4406-9752-4E49D6BB42B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(27\\)sv1:*:*:*:*:*:*:*","matchCriteriaId":"E9C87916-D186-4E36-A4B6-5FA858FFC7E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sv:*:*:*:*:*:*:*","matchCriteriaId":"3999B90E-FE66-4B5D-8186-66C658855D7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)e:*:*:*:*:*:*:*","matchCriteriaId":"D0C3B6E2-3D33-457E-B85D-8C2FC9DA2FE4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)e1:*:*:*:*:*:*:*","matchCriteriaId":"C41AB141-A566-4738-8E07-E6410590FB0A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)e2:*:*:*:*:*:*:*","matchCriteriaId":"F074DF74-81FA-4F09-A6E5-18DD9A4E76C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ea1:*:*:*:*:*:*:*","matchCriteriaId":"E4041EB0-F402-4C01-9337-212E3E461AF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ec:*:*:*:*:*:*:*","matchCriteriaId":"0DEB16EF-D0C1-4C56-85B1-3C07D8CFD493"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ec1:*:*:*:*:*:*:*","matchCriteriaId":"DFCFD88F-4320-4F4F-9CAD-BA8A5AA5D389"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)eo:*:*:*:*:*:*:*","matchCriteriaId":"ABF2BEC0-6D37-4BC2-9A78-FC0D06CE7573"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ew:*:*:*:*:*:*:*","matchCriteriaId":"379E0F70-EE01-48F9-A4F0-BFCF9BDAB4AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1\\(20\\)ew1:*:*:*:*:*:*:*","matchCriteriaId":"17CD0C63-7500-4A32-BD85-27E6C2F70FB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*","matchCriteriaId":"E90C0554-1A50-4341-AB07-80AA854673D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eb:*:*:*:*:*:*:*","matchCriteriaId":"4A8C5149-40F8-40C9-9FC3-7E7C68801320"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*","matchCriteriaId":"46FF39C5-CC37-4573-BB18-36254D38509B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eo:*:*:*:*:*:*:*","matchCriteriaId":"C1AF45D8-A32A-482F-8183-F0DC3C4FB5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1eu:*:*:*:*:*:*:*","matchCriteriaId":"B377A8B9-90F2-41B7-9098-5ABEB621E2E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ew:*:*:*:*:*:*:*","matchCriteriaId":"E2B15FCC-1BB3-41CA-9550-6D55DD381F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*","matchCriteriaId":"E4BC49F2-3DCB-45F0-9030-13F6415EE178"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12g\\):*:*:*:*:*:*:*","matchCriteriaId":"9B7CC6B5-44B7-4DCA-86C8-F032AF65FDAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(12h\\):*:*:*:*:*:*:*","matchCriteriaId":"208A52BF-BAE3-4F5F-9279-88C360FDCBC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)s:*:*:*:*:*:*:*","matchCriteriaId":"10151339-0261-4F5D-9601-F048C0B70908"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(20\\)s1:*:*:*:*:*:*:*","matchCriteriaId":"2498113D-65B7-4144-AD1C-9FCB6534B7BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(21\\):*:*:*:*:*:*:*","matchCriteriaId":"9324BF58-67E2-410D-AA71-F280B3D64498"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(21a\\):*:*:*:*:*:*:*","matchCriteriaId":"060D7CA2-0A02-49E3-BCFB-EFE7F6EC08F6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(23\\):*:*:*:*:*:*:*","matchCriteriaId":"947062EE-A5CF-4A7F-8EF7-921F45118268"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*","matchCriteriaId":"2D035A35-D53E-4C49-B4E4-F40B85866F27"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2sw:*:*:*:*:*:*:*","matchCriteriaId":"5DEF14D5-1327-4012-913F-DA0E12C4E953"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2zq:*:*:*:*:*:*:*","matchCriteriaId":"94E748F5-FA9B-4627-AB30-5414A2952ADB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)t3:*:*:*:*:*:*:*","matchCriteriaId":"19940BFF-0888-4717-AC5F-87A85BE165A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)xc1:*:*:*:*:*:*:*","matchCriteriaId":"9E5A2A58-D7B2-4018-BAAE-D6CB49A3A709"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)xc2:*:*:*:*:*:*:*","matchCriteriaId":"1C268494-F83A-488D-AEE6-AF7D319B6F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)t:*:*:*:*:*:*:*","matchCriteriaId":"68BCC003-3F88-4369-A387-6B8D0FDFBE32"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"8DD45AA0-EEE1-43FF-B04D-4063769D71AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"7873D1DB-80D0-4076-8716-7618D7161EE2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)t3:*:*:*:*:*:*:*","matchCriteriaId":"DF292613-B9BC-4CF1-A6FA-4AFC077D8632"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xd:*:*:*:*:*:*:*","matchCriteriaId":"23B1AF9D-106A-43CB-972C-5E85ADFC355D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xd1:*:*:*:*:*:*:*","matchCriteriaId":"25C6BBA6-8D45-4BA7-B88E-44D9ECE88009"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"8CF0189B-964F-46EC-BE5F-8076CFE7AB8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5a\\):*:*:*:*:*:*:*","matchCriteriaId":"53430E70-FBAD-42F7-8614-7AB04E566810"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5a\\)b:*:*:*:*:*:*:*","matchCriteriaId":"B670057C-7A86-4F61-8FF5-88E6BFE2B5F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5b\\):*:*:*:*:*:*:*","matchCriteriaId":"4403BFFB-8A89-4512-8030-5DEDC0C0FF93"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"2D9B4FE3-7A03-430F-AE68-743559D74DEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*","matchCriteriaId":"292F6F99-19B3-4106-A432-5DE916CCDD56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*","matchCriteriaId":"A9F12741-69FB-46DD-A670-8461492B338A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xd:*:*:*:*:*:*:*","matchCriteriaId":"7EC2D158-6174-4AE8-83DA-125B072B6980"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*","matchCriteriaId":"A5688D88-A550-43EB-8854-2E132EC71156"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xf:*:*:*:*:*:*:*","matchCriteriaId":"8218E2D3-4F1E-440F-A2B2-A68D4692BB17"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xg:*:*:*:*:*:*:*","matchCriteriaId":"6BE2132D-CF21-49F1-BC66-FA6CDB6D72BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xh:*:*:*:*:*:*:*","matchCriteriaId":"E2E3044F-3CE8-4970-9A7F-FDF555F622A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xk:*:*:*:*:*:*:*","matchCriteriaId":"1018E04C-5575-4D1A-B482-D1CDB9AD6A50"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xq:*:*:*:*:*:*:*","matchCriteriaId":"86B9E611-3F06-424C-96EF-EE4997C70AB9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8B0A4FA3-45F4-47B7-BA5B-6AEC8DB14C9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6509622E-7E8D-4238-92F2-7DB88A3DB4DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B80C7D72-D0D1-4328-967C-20EA7590CEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0993B9A9-599B-4662-AEC2-EC771BCE8200"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"04472ED2-EB97-47E1-938E-D69C363E81C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"10988AA9-A807-4E70-8197-6F9EFC13AE86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"C8951276-CDEF-4F54-93DF-B96DB10E6530"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5D886A75-5A73-4B1C-8B2A-45D589267B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"D5A594C2-98BB-4AC5-9CC5-89FE97D63323"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"9B35325A-98F6-41DF-ADD8-91ED992A3ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"F0B06C5B-73C2-47F1-9ED6-B59F9C1C5AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"D9758019-F6EA-4552-B070-5A9EBE73BB86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"E75DB3F4-94A8-4341-9C01-1F0DC25A3402"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ons_15454e_optical_transport_platform:*:*:*:*:*:*:*:*","matchCriteriaId":"9442E2B1-6D21-46FC-9782-CD441254EEFB"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040420-snmp.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/162451","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10186","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-111B.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15921","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5845","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040420-snmp.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/162451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-111B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15921","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5845","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0715","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly clear member relationships when a group is deleted, which can cause a new group with the same name to have the members of the old group, which allows group members to gain privileges."},{"lang":"es","value":"El proveedor de Autenticación WebLogic en BEA WebLogic Server y WebLogic Express 8.1 hasta SP2 y 7.0 hasta SP4 no elimina relaciones entre miembros cuando se borra un grupo, lo que puede causar que un nuevo grupo con el mismo nombre tenga miembros del grupo antiguo, lo que permite a miembros del grupo ganar privilegios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*","matchCriteriaId":"FBDF3AC0-0680-4EEE-898C-47D194667BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*","matchCriteriaId":"8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6828CE4B-91E8-4688-977F-DC7BC21131C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*","matchCriteriaId":"BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*","matchCriteriaId":"9CD2BB36-AC0B-48E9-91E1-A4465896E87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*","matchCriteriaId":"6FB8930F-C6D8-40B9-8D08-751F5B47229B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*","matchCriteriaId":"A5C59B80-279B-45B3-9CC1-5A263681025B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"893D9D88-43C4-4F9F-A364-0585DE6FA9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*","matchCriteriaId":"D59F9859-7344-43F0-9348-E57FABB9E431"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*","matchCriteriaId":"D2D05BAB-AB3B-466E-8301-01A41644DE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"D34E2925-DE2A-437F-B349-BD7103F4C37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*","matchCriteriaId":"0A4EC87D-EF83-48C5-B516-A6A482D9F525"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*","matchCriteriaId":"935F28E3-9799-4EF6-AB83-62E9C214DD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*","matchCriteriaId":"ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*","matchCriteriaId":"A3DFE048-905E-4890-809D-F6BCEF7F83C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*","matchCriteriaId":"F7560131-A6AC-4BBB-AA2D-C7C63AB51226"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"D18E22CC-A0FC-4BC7-AD39-2645F57486C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*","matchCriteriaId":"893C2387-03E3-4F8E-9029-BC64C64239EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"D00633D1-4B38-48D9-B5CD-E8D66EA90599"}]}]}],"references":[{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_52.01.jsp","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11356","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009763","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/470470","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/5299","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10130","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15861","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_52.01.jsp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/470470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/5299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15861","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0716","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the DCE daemon (DCED) for the DCE endpoint mapper (epmap) on HP-UX 11 allows remote attackers to execute arbitrary code via a request with a small fragment length and a large amount of data."},{"lang":"es","value":"Desbordamiento de búfer en el demonio DCE (DCED) del mapeador de punto final (epmap) de HP-UX 11 permite a atacantes remotos ejecutar código arbitrario mediante una petición con una longitud de fragmento pequeña y una cantidad de datos grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11:*:*:*:*:*:*:*","matchCriteriaId":"87FB80D8-1BE7-46F7-9F7E-B7DA88D039F8"}]}]}],"references":[{"url":"http://support.entegrity.com/private/patches/dce/ssrt4741.asp","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.atstake.com/research/advisories/2004/a072204-1.txt","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/259796","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://support.entegrity.com/private/patches/dce/ssrt4741.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.atstake.com/research/advisories/2004/a072204-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/259796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2004-0717","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 7.51 for Windows and 7.50 for Linux does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability."},{"lang":"es","value":"Opera 7.51 para Windows y 7.50 para Linux no previene apropiadamente que un marco de un dominio inyecte contenido en un marco que pertenece a otro dominio, lo que facilita la suplantación de sitios web y otros ataques. También conocida como vulnerabilidad de inyección en marcos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.50:*:*:*:*:*:*:*","matchCriteriaId":"FD889EC7-E5D2-4137-B85C-86D7DB5CED27"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"http://secunia.com/advisories/11978","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1598","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/11978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0718","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability."},{"lang":"es","value":"Los navegadores web (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 no previenen adecuadamente que un marco de un dominio inyecte contenido en un marco que pertenece a otro dominio, lo que facilita la suplantación de sitios web y otros ataques. Vulnerabilidad también conocida como \"de inyección de marco\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"F374AF9E-BBBC-4C0E-B00C-5DB7FC83B445"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6BF63077-4E98-497D-8CE6-B84B022DB21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4C1BC491-9C5A-46D5-B6C3-5A8E5A1A0AF3"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=246448","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2005/dsa-777","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2005/dsa-810","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:082","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/15495","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1598","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4756","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9997","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=246448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2005/dsa-777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2005/dsa-810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9997","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0719","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability."},{"lang":"es","value":"Internet Explorer para Mac 5.2.3, Internet Explorer 6 en Windows XP, u posiblemente otras versiones,  no previenen adecuadamente que un marco de un dominio inyecte contenido en un marco que pertenece a otro dominio, lo que facilita la suplantación de sitios web y otros ataques. Vulnerabilidad también conocida como \"de inyección de marco\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://secunia.com/advisories/11966","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1598","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1598","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0720","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability."},{"lang":"es","value":"Safari 1.2.2 no previene adecuadamente que un marco de un dominio inyecte contenido en un marco que pertenece a otro dominio, lo que facilita la suplantación de sitios web y otros ataques. Vulnerabilidad también conocida como \"de inyección de marco\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC83309-3A97-4619-B5C1-574610838BC6"}]}]}],"references":[{"url":"http://secunia.com/advisories/11978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1598","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1598","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0721","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability."},{"lang":"es","value":"Konqueror 3.1.3, 3.2.2, y posiblemente otras versiones no previenen adecuadamente que un marco de un dominio inyecte contenido en un marco que pertenece a otro dominio, lo que facilita la suplantación de sitios web y otros ataques. Vulnerabilidad también conocida como \"de inyección de marco\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C8D57D87-3E6A-4A73-85BA-EE679E9DA8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D3AA19A3-CB04-4267-A8D3-49BEC5892CD8"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109225538901170&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11978","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200408-13.xml","source":"cve@mitre.org"},{"url":"http://www.kde.org/info/security/advisory-20040811-3.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1598","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11371","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109225538901170&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200408-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kde.org/info/security/advisory-20040811-3.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/1598","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11371","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0722","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code."},{"lang":"es","value":"Desbordamiento de enteros en el constructor de objeto SOAPParameter en (1) Netscape version 7.0 y 7.1 y (2) Mozilla 1.6, y posiblemente versiones anteriores, permite a atacantes remotos ejecutar código de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6BF63077-4E98-497D-8CE6-B84B022DB21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:7.0:*:*:*:*:*:*:*","matchCriteriaId":"30A0231A-B664-46C2-9602-B60EAD6AEC12"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4C1BC491-9C5A-46D5-B6C3-5A8E5A1A0AF3"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=236618","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=117&type=vulnerabilities","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/15495","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16862","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4629","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9378","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=236618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=117&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9378","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0723","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Java virtual machine (VM) 5.0.0.3810 allows remote attackers to bypass sandbox restrictions to read or write certain data between applets from different domains via the \"GET/Key\" and \"PUT/Key/Value\" commands, aka \"cross-site Java.\""},{"lang":"es","value":"La máquina virtual (VM) Java de Microsoft 5.0.0.3810 permite a atacantes remotos saltarse restricciones de la caja de arena o escribir ciertos datos entre applets de diferentes dominios mediante órdenes \"GET/Key\" y \"PUT/Key/Value\". Vulnerabilidad también conocidad como \"cross-site Java\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:java_virtual_machine:5.0.0.3810:*:*:*:*:*:*:*","matchCriteriaId":"E9FF106F-2958-493F-B5EA-5BA0C4A2632E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108948405808522&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10688","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16666","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108948405808522&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0724","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service (server or client crash) via an empty fragmented packet."},{"lang":"es","value":"El motor de Half-Life antes del 7 de julio de 2004 permite a atacantes remotos causar una denegación de servicio (caída del cliente o el servidor) mediante un paquete fragmentado vació."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life:1.1.0.4:*:linux:*:*:*:*:*","matchCriteriaId":"15DFE5E2-45B0-49BA-B76A-8446C2482529"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life:1.1.0.4:*:windows:*:*:*:*:*","matchCriteriaId":"B8FCB99C-0328-4486-9AA4-704B21CF4F1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life:1.1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4D0DDA2B-891D-4F79-BAB4-071749D70C00"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life:1.1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"1E7A86C9-1E30-4D45-B600-D00931DDF92E"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life:1.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"65FE3BD9-49DF-4F0F-9236-7C87D8C165A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"B77C3FAC-EE71-4789-B354-D06217BA06C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:3.1.0.4:*:linux:*:*:*:*:*","matchCriteriaId":"D42F54A0-E04D-4F02-B91B-578BE3FFB37C"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:3.1.0.5:*:linux:*:*:*:*:*","matchCriteriaId":"68B2988D-BD5F-4C3B-B17A-F43FA28EB81C"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:3.1.0.6:*:linux:*:*:*:*:*","matchCriteriaId":"C4EC0448-FC5B-4042-88ED-30EB420FA58E"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:3.1.0.7:*:linux:*:*:*:*:*","matchCriteriaId":"7B9FCF25-85B5-4B39-B14A-48430B108014"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:3.1.0.8:*:linux:*:*:*:*:*","matchCriteriaId":"0E1BE53D-F02E-41A8-AC6A-84A209147BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:3.1.0.9:*:linux:*:*:*:*:*","matchCriteriaId":"1C61E020-7C5C-4888-8864-4772E8842D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:3.1.1.0:*:linux:*:*:*:*:*","matchCriteriaId":"BBD3F806-BEFB-4074-BBE6-1213931E869F"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:3.1.1.1c1:*:linux:*:*:*:*:*","matchCriteriaId":"99A173C9-2621-4362-8DAD-13443931869E"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:3.1.1.1d:*:linux:*:*:*:*:*","matchCriteriaId":"A8A70515-9A18-4D50-AF51-3CB92C3F8F54"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:3.1.1.1e:*:linux:*:*:*:*:*","matchCriteriaId":"03038E35-1993-4510-B9D4-37C545104848"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:3.1.1.1e:*:win32:*:*:*:*:*","matchCriteriaId":"4397F8AB-8111-4DC7-B744-2F2D563E3F68"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0CA42F82-2F19-4253-B9B2-AED23607672E"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:4.1.0.4:*:win32:*:*:*:*:*","matchCriteriaId":"2BFFB022-E229-49A0-9585-DCD81C0B1425"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:4.1.0.6:*:win32:*:*:*:*:*","matchCriteriaId":"7EC4695F-5B5E-4045-961D-E8881CF3359B"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:4.1.0.7:*:win32:*:*:*:*:*","matchCriteriaId":"4FB856BD-0F7C-498D-AD3A-9BD1DF6E303F"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:4.1.0.8:*:win32:*:*:*:*:*","matchCriteriaId":"91F0E963-0A50-4668-BF1D-3E63C27636F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:4.1.0.9:*:win32:*:*:*:*:*","matchCriteriaId":"452A32D5-D4E8-41B4-B1D6-19135BC91EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:4.1.1.0:*:win32:*:*:*:*:*","matchCriteriaId":"D352B50C-3491-4899-9277-E9A01CFAD845"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:4.1.1.1c1:*:win32:*:*:*:*:*","matchCriteriaId":"71CB65A0-1DBC-42DE-930D-4318E9FF7F38"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:4.1.1.1d_beta:*:win32:*:*:*:*:*","matchCriteriaId":"A5B54ED4-D2EE-48BE-AF7D-0BBDD8C0C2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:4.1.1.1e:*:linux:*:*:*:*:*","matchCriteriaId":"7CE33A49-6756-48E0-9FD3-5BCA065B6CEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:valve_software:half-life_dedicated_server:4.1.1.1e:*:win32:*:*:*:*:*","matchCriteriaId":"F8D573B9-D8B9-40D3-8778-5BB4744BF4A1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108966465302107&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10700","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16674","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108966465302107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16674","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0725","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbitrary web script or HTML via the file parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en help.php de Moodle 1.3.2 y 1.4 dev permite a atacantes remotos inyectar script web o HTML de su elección  mediante el parámetro fichero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"044E2E34-470C-45C9-8136-22493077D842"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5FB2555-7146-4A75-9D24-250BBC09244A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"949F0BC0-A79E-4B1D-894D-650CF68109F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"616AE17F-F5B4-4D64-B287-0AAB189C802A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"74246580-F351-4EAE-9406-2386CFF1819D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"077FFAAB-BACD-43F4-B146-DBFFD58CE619"}]}]}],"references":[{"url":"http://cvs.sourceforge.net/viewcvs.py/moodle/moodle/help.php","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108973588000027&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10718","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16684","source":"cve@mitre.org"},{"url":"http://cvs.sourceforge.net/viewcvs.py/moodle/moodle/help.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108973588000027&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16684","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0726","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone via an ASX filename that contains javascript, which is executed in the local context in a preview panel."},{"lang":"es","value":"El control de Windows Media Player en Windows 2000 permite a atacantes remotos ejecutar script de su elección en la zona de ordenador local mediante un nombre de fichero ASX que contiene javascript, que es ejecuado en el contexto local en el panel de vista previa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108965512912175&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10693","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16704","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108965512912175&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0727","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the \"Similar Method Name Redirection Cross Domain Vulnerability.\""},{"lang":"es","value":"Microsoft Internet Explorer 6.0.2800.1106 sobre Windows XP SP2 permite a servidores web remotos saltarse restricciones de zona y ejecutar código de su elección en la zona del PC local redirigiendo una función a otra función con el mismo nombre, como se ha demostrado por SimilarMethodNameRedir"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*","matchCriteriaId":"F86E7189-CE21-4007-A3FA-39A6B51A5AB9"}]}]}],"references":[{"url":"http://freehost07.websamba.com/greyhats/similarmethodnameredir.htm","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108966512815373&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12048","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/207264","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16681","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4702","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6829","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7084","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7448","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7496","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7906","source":"cve@mitre.org"},{"url":"http://freehost07.websamba.com/greyhats/similarmethodnameredir.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108966512815373&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/207264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6829","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7906","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0728","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of service (crash) via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address."},{"lang":"es","value":"El servicio de Cliente de Control Remoto de Microsoft's Systems Management Server (SMS) 2.50.2726.0  permite a atacantes remotos causar una denegación de servicio (caída) mediante un paquete de datos al puerto TCP 2702 que causa que el servidor lea o escriba de una dirección de memoria inválida."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:systems_management_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"F714FC20-0412-472D-B4A3-EA548EE14E81"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:systems_management_server:1.2:sp1:*:*:*:*:*:*","matchCriteriaId":"DCC15CE2-708F-4BB2-A4A5-A055B9541C12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:systems_management_server:1.2:sp2:*:*:*:*:*:*","matchCriteriaId":"7D334FC1-DA2E-4A78-98A6-81C36713F977"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:systems_management_server:1.2:sp3:*:*:*:*:*:*","matchCriteriaId":"2E75A5E5-3C2A-4182-B5C4-FD58579587EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:systems_management_server:1.2:sp4:*:*:*:*:*:*","matchCriteriaId":"CCD1E3C3-B7AC-411B-8600-A51E2264409B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:systems_management_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"43E8A8EF-B54F-4413-9BC8-A6A479951313"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:systems_management_server:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"9B010774-CFB9-43F9-B5C4-2FE489B1FBE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:systems_management_server:2.50.2726:*:*:*:*:*:*:*","matchCriteriaId":"E5081CEE-911E-447A-9457-A5AAF34A8A9F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108983763710315&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16696","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108983763710315&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16696","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0729","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid (1) category_rows parameter to index.php, (2) faq parameter to faq.php, or (3) ranksrow parameter to profile.php, which reveal the full path in an error message."},{"lang":"es","value":"phpBB 2.0.8 permiteaatacantes remotos obtener información sensible mediante parámetros inválidos:\r\n(1) category_rows a index.php,\r\n(2) faq a faq.php, o\r\n(3) ranksrow a profile.php,\r\nlo que revela la ruta completa en el mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"3BF566D7-4537-49F6-91BF-F56D64DAE6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*","matchCriteriaId":"18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108999024506020&w=2","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=34","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16716","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16720","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16723","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108999024506020&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=34","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0730","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PhpBB 2.0.8 allow remote attackers to inject arbitrary web script or HTML via (1) the cat_title parameter in index.php, (2) the faq[0][0] parameter in lang_faq.php as accessible from faq.php, or (3) the faq[0][0] parameter in lang_bbcode.php as accessible from faq.php."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en phpBB 2.0.8 permite a atacantes remotos inyectar scritp web o HTML de su elección mediante \r\n(1) el parámetro cat_title en index.php\r\n(2) el parámetro faq[0][0] en lang_faq.php, cuando se accede desde faq.php, o \r\n(3) el parámetro faq[0][0] en lang_bbcode cuando se accede desde faq.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"3BF566D7-4537-49F6-91BF-F56D64DAE6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*","matchCriteriaId":"18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108999024506020&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10738","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=34","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16724","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16725","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16726","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108999024506020&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=34","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16725","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0731","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in the Search module for Php-Nuke allows remote attackers to inject arbitrary script as other users via the input field."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en index.php del módulo de búsqueda de Php-Nuke permite a atacantes remotos inyectar script de su elección como otros usuarios mediante el campo entrada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:8.0_final:*:*:*:*:*:*:*","matchCriteriaId":"C0E8268D-8E87-42B0-A0CD-D55DAD8F0FA9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109002107329823&w=2","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=35","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16721","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109002107329823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=35","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0732","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the Search module for Php-Nuke allows remote attackers to execute arbitrary SQL statements via the instory parameter."},{"lang":"es","value":"Vulnerabilidad de inyección de SQL en index.php del módúlo de búsqueda de Php-Nuke permite a atacantes remotos ejecuatar código SQL de su elección mediante el parámetro \"instory\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:8.0_final:*:*:*:*:*:*:*","matchCriteriaId":"C0E8268D-8E87-42B0-A0CD-D55DAD8F0FA9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109002107329823&w=2","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=35","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16728","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109002107329823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=35","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16728","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0733","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers that are directly provided to the OutputDebugString function call."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en OllyDbg 1.10 permite a atacantes remotos causar una denegación de servicio (caída) y posiblemente ejecutar código arbitrairo mediante esfecificadores de cadena que son provistos directamente a la llamada de la función OutputDebugString"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ollydbg:ollydbg:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1C6EE65B-4ADE-47D2-A482-D2F589F187F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ollydbg:ollydbg:1.0.8b:*:*:*:*:*:*:*","matchCriteriaId":"9BEC988D-B269-410A-AB82-4935FBD464E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ollydbg:ollydbg:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"8398DB1F-65F9-4AC8-8B40-BCB93F136933"},{"vulnerable":true,"criteria":"cpe:2.3:a:ollydbg:ollydbg:1.10:*:*:*:*:*:*:*","matchCriteriaId":"232FC92A-8541-4EEA-9CC1-D94D0A88C972"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0711.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109007978822810&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10742","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16711","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/3757","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0711.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109007978822810&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/3757","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0734","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web_Store.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter."},{"lang":"es","value":"Web_Store.cgi permite a atacantes remotos ejecutar comandos arbitrarios mediante metacaractéres de shell en el parámetro page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:extropia:extropia_webstore:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F5C64FF0-0D27-453A-A2AF-BEE1605A4DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:extropia:extropia_webstore:2.0:*:*:*:*:*:*:*","matchCriteriaId":"401F0F91-4227-4A89-8C00-55D99E9D1C24"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109008402715874&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10744","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16710","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109008402715874&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16710","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0735","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and earlier, when playing on a Local Area Network (LAN), allows remote attackers to execute arbitrary code via vectors such as (1) the getinfo query, (2) the connect packet, and other unknown vectors."},{"lang":"es","value":"Desbordamiento de búfer en Medal of Honor (1) Allied Assault 1.11v9 y anteriores, (2) Breakthrough 2.40b y anteriores, and (3) Spearhead 2.15 y anteriores, cuando se juega en una red de área local, permite a atacantes remotos ejecutar código arbitrario mediante vectores como (1) la consulta getinfo, (2), el paquete connect, y otros vectores desconocidos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:electronic_arts:medal_of_honor_allied_assault:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2ABB2616-D45D-48E0-AA59-5FEB44F783DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:electronic_arts:medal_of_honor_allied_assault:1.1:*:*:*:*:*:*:*","matchCriteriaId":"D758C35F-D787-43D6-9F5A-FC2065570867"},{"vulnerable":true,"criteria":"cpe:2.3:a:electronic_arts:medal_of_honor_allied_assault:1.11_v9:*:*:*:*:*:*:*","matchCriteriaId":"614B3CE8-724A-42A7-BEF3-60871C11C3D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:electronic_arts:medal_of_honor_allied_assault:breakthrough_2.40_b:*:*:*:*:*:*:*","matchCriteriaId":"D7B50D8A-0076-4872-8814-19A782D8F7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:electronic_arts:medal_of_honor_allied_assault:spearhead_2.15:*:*:*:*:*:*:*","matchCriteriaId":"A441807B-BC93-4AE5-A67C-817DFA4726F4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109008314631518&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10743","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16715","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109008314631518&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16715","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0736","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The search module in Php-Nuke allows remote attackers to gain sensitive information via the (1) \"**\" or (2) \"+\" search patterns, which reveals the path in an error message."},{"lang":"es","value":"El módulo de búsqueda en Php-Nuke permite a atacantes remotos obtener información sensible mediante patrones de búsqueda (1) \"**\" o \"+\", que revelan la ruta en el mensaje de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:8.0_final:*:*:*:*:*:*:*","matchCriteriaId":"C0E8268D-8E87-42B0-A0CD-D55DAD8F0FA9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109026609504767&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16736","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109026609504767&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16736","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0737","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting vulnerabilities in index.php in the Search module for Php-Nuke allows remote attackers to inject arbitrary web script or HTML via the (1) sid, (2) max, (3) sel1, (4) sel2, (5) sel3, (6) sel4, (7) sel5, (8) match, (9) mod1, (10) mod2, or (11) mod3 parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en index.php del módulo Busqueda de Php-Nuke permite a atacantes remotos inyectar script web o HTML de su elección mdiante los parámetros (1) sid, (2) max, (3) sel1, (4) sel2, (5)sel3, (6) sel4, (7) sel5, (8) match, (9) mod1, (10) mod2, o (11) mod3 ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:8.0_final:*:*:*:*:*:*:*","matchCriteriaId":"C0E8268D-8E87-42B0-A0CD-D55DAD8F0FA9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109026609504767&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16721","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109026609504767&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0738","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in the Search module in Php-Nuke allow remote attackers to execute arbitrary SQL via the (1) min or (2) categ parameters."},{"lang":"es","value":"Multiples vulnerabilidades de inyección de SQL en el módulo Busqueda de Php-Nuke permiten a atacantes remotos ejecutar SQL arbitrario mediante los parámetros (1) min o (2) categ."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:8.0_final:*:*:*:*:*:*:*","matchCriteriaId":"C0E8268D-8E87-42B0-A0CD-D55DAD8F0FA9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109026609504767&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16737","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109026609504767&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0739","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Whisper FTP Surfer 1.0.7 allows remote FTP servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long filename."},{"lang":"es","value":"Desbordamiento de búfer en el Whisper FTP Surfer 1.0.7 permite a servidores FTP remotos causar una denegación de servicio (cáida de cliente) y posiblemente ejecutar código de su elección mediante un nombre de fichero largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snapfiles:whisper_ftp_surfer:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"516EB2B5-C5FA-410B-97DE-94592C80B150"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/024087.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109035224715409&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16742","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/024087.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109035224715409&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0740","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP server in Lexmark T522 and possibly other models allows remote attackers to cause a denial of service (server crash, reload, or hang) via an HTTP header with a long Host field, possibly triggering a buffer overflow."},{"lang":"es","value":"El servidor HTTP en Lexmark T522 y posiblemente otros modelos permite a atacantes remotos causar una denegación de servicio (caída, reinicio o cuelgue del servidor) mediante una cabecera HTTP con un campo Host largo, posiblemente disparando un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:lexmark:t522_network_printer:*:*:*:*:*:*:*:*","matchCriteriaId":"5A930D52-770F-40EC-9AAC-1084C5AABD9E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109035701329111&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16752","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109035701329111&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16752","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0741","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LionMax Software WWW File Share Pro 2.60 allows remote attackers to cause a denial of service (crash or hang) via a long URL, possibly triggering a buffer overflow."},{"lang":"es","value":"LionMax Software WWW File Share Pro 2.60 permite a atacantes remotos causar una denegación de servicio (caída o cuelgue) mediante una URL larga, posiblemente disparando un desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lionmax_software:www_file_share_pro:2.6:*:*:*:*:*:*:*","matchCriteriaId":"B21AFD8D-EBEF-405D-AED1-9F986A84FB0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:lionmax_software:www_file_share_pro:2.40:*:*:*:*:*:*:*","matchCriteriaId":"452334E7-2031-483B-9299-8EB6D2D5ADE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lionmax_software:www_file_share_pro:2.41:*:*:*:*:*:*:*","matchCriteriaId":"869AFE1F-4874-4579-97F7-1861D2C65E97"},{"vulnerable":true,"criteria":"cpe:2.3:a:lionmax_software:www_file_share_pro:2.42:*:*:*:*:*:*:*","matchCriteriaId":"CC8D8A4B-134B-47DD-8B3A-94EE4C7F610A"},{"vulnerable":true,"criteria":"cpe:2.3:a:lionmax_software:www_file_share_pro:2.46:*:*:*:*:*:*:*","matchCriteriaId":"CACF2450-6072-44E1-976B-DBBA51BD99D4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109035774701051&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16754","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109035774701051&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0742","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Java System Portal Server 6.2 (formerly Sun ONE) allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default view."},{"lang":"es","value":"Sun Java Portal Sever 6.2 (anteriormente Sun One) permite a usuarios remotos autenticados obtener prilegios de Calendar Server y modificar datos del calendario cambiando las opciones de visualización a una vista no predeterminada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6.2:*:*:*:*:*:*:*","matchCriteriaId":"E654A976-789A-46FC-A262-CC0A3FD149DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_calendar_server:6.2:*:x86:*:*:*:*:*","matchCriteriaId":"DBCEE6E5-D5BB-448A-991B-BCAB96E542C3"}]}]}],"references":[{"url":"http://secunia.com/advisories/12134","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57586","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/881254","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10788","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16776","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/881254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16776","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0743","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Safari in Mac OS X before 10.3.5, after sending form data using the POST method, may re-send the data to a GET method URL if that URL is redirected after the POST data and the user uses the forward or backward buttons, which may cause an information leak."},{"lang":"es","value":"Safari para Mac OS X anteriores a 10.3.5, despues de enviar datos de formualarios con el método POST, puede reenviar los datos a un método GET si esa URL es redirigida después de que los datos POST y el usuario utiliza los botones \"Atrás\" y \"Adelante\", lo que puede causar un filtrado de información."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"}]}]}],"references":[{"url":"http://lists.apple.com/mhonarc/security-announce/msg00056.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/128414","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16944","source":"cve@mitre.org"},{"url":"http://lists.apple.com/mhonarc/security-announce/msg00056.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/128414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0744","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service (memory and resource consumption) via a \"Rose Attack\" that involves sending a subset of small IP fragments that do not form a complete, larger packet."},{"lang":"es","value":"El componente de red TCP/IP de Mac OS X anteriores a 10.3.5 permite a atacantes remotos causar una denegación de servicio (consumición de recursos) mediante un \"Ataque de Rosa\" en el que se usan ciertos fragmentos IP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"}]}]}],"references":[{"url":"http://digital.net/~gandalf/Rose_Frag_Attack_Explained.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108075899619193&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108308604119618&w=2","source":"cve@mitre.org"},{"url":"http://www.auscert.org.au/render.html?it=4291","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16946","source":"cve@mitre.org"},{"url":"http://digital.net/~gandalf/Rose_Frag_Attack_Explained.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108075899619193&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108308604119618&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.auscert.org.au/render.html?it=4291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16946","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0745","sourceIdentifier":"cve@mitre.org","published":"2004-09-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its name."},{"lang":"es","value":"LHA 1.14 y anteriores permiten a atacantes ejecutar comandos arbitrarios mediante un directorio con metacaracteres de shell en su nombre."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tsugio_okamoto:lha:*:*:*:*:*:*:*:*","versionEndIncluding":"1.14","matchCriteriaId":"B01C733D-FFA9-46C9-B18F-46AA485F8667"}]}]}],"references":[{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-323.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-440.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1833","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17198","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11088","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-323.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-440.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17198","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11088","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0746","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session."},{"lang":"es","value":"Konqueror en KDE 3.2.3 Y anteriores pemiten a sitios web establecer cookies para dominios de nivel superior específicos de países, como ltd.uk o com.es, lo que podría permitir a atacantes remotos realizar un ataque de fijación de sesión y secuestrar una sesión HTTP de un usuario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8AD68BAB-8945-4A22-938E-12C01D0111D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7B3220BF-B0AF-4C90-89BD-B425EE58021D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA53FB7A-AF7F-45B2-AF23-11B1FC4EC289"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"619EB7F6-8694-4344-A4C9-A35DA58391AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7FED2DFC-592C-4FD3-B0B7-C670C78F56DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.5b:*:*:*:*:*:*:*","matchCriteriaId":"9EC65385-B190-44BE-9AF8-B14F48303046"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0F7BAE27-7AB1-4DBD-98AD-6109F0D9A458"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AF8A54F6-96A9-44B8-97C8-50DA7276708D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1001754B-8EDB-41A2-9D5D-6E2A2B556DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C8D57D87-3E6A-4A73-85BA-EE679E9DA8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"99E4FC9B-F47C-4BD5-B2C7-23CBAD2D5488"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0172B167-5780-4F80-ACC9-2FB8B60D6717"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3C0DB31D-D075-409C-9ED9-A9E1D96332CA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4A3096F2-B0F1-45E1-806D-6434DE56619A"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.2:*:*:*:*:*:*:*","matchCriteriaId":"82F69843-978D-4686-BC5B-1D09DA4A21BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D2E2EF3C-1379-4CBE-8FF5-DACD47834651"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"F7446746-87B7-4BD3-AABF-1E0FAA8265AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109327681304401&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12341","source":"cve@mitre.org"},{"url":"http://www.kde.org/info/security/advisory-20040823-1.txt","source":"cve@mitre.org"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:086","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10991","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17063","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11281","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109327681304401&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kde.org/info/security/advisory-20040823-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:086","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17063","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0747","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables."},{"lang":"es","value":"Desbordamiento de búfer en Apache 2.0.50 y anteriores permite a usuarios locales ganar privilegios mediante un fichero .htaccess que causa un desbordamiento durante la expansión de variables de entorno."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.51:\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-131"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-131"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.35","versionEndExcluding":"2.0.51","matchCriteriaId":"A5A9EAAF-A5F4-493E-9530-8A448E55CDCC"}]}]}],"references":[{"url":"http://secunia.com/advisories/12540","source":"cve@mitre.org","tags":["Broken Link","Not Applicable"]},{"url":"http://secunia.com/advisories/34920","source":"cve@mitre.org","tags":["Broken Link","Not Applicable"]},{"url":"http://securitytracker.com/id?1011303","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=205147","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/481998","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2004_32_apache2.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-463.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2004/0047/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1233","source":"cve@mitre.org","tags":["Broken Link","Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17384","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11561","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://secunia.com/advisories/12540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Not Applicable"]},{"url":"http://secunia.com/advisories/34920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Not Applicable"]},{"url":"http://securitytracker.com/id?1011303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=205147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/481998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2004_32_apache2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-463.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2004/0047/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2009/1233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Permissions Required"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-0748","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop."},{"lang":"es","value":"mod_ssl en Apache 2.0.50 y anteriores permite a atacantes remotos causar un denegación de servicio (consuminción de CPU) abortando un conexión SSL de cierta manera que causa que un proceso hijo de apache entre en un bucle infinito."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.51:\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.35","versionEndExcluding":"2.0.51","matchCriteriaId":"A5A9EAAF-A5F4-493E-9530-8A448E55CDCC"}]}]}],"references":[{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2004_30_apache2.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-349.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2004/0047/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=130750","source":"cve@mitre.org","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17200","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11126","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2004_30_apache2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-349.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2004/0047/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=130750","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11126","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-0749","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames."},{"lang":"es","value":"El módulo mod_authz_svn en Subversion 1.0.7 y anteriores no restringe adecuadamente el acceso a todos los metadatos en rutas ilegibles, lo que podría permitir a atacantes remotos ganar información sensible mediante (1) svn log -v, (2) svn propget, o (3) svn blame, y otras órdenes que siguen cambios de de nombre."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4F10E314-3897-4A63-AE40-F4E34C3F0BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"47B95A69-2535-4844-B819-082D4349708C"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"930953B4-E972-48FB-913B-169E91F93FD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6B41D875-F515-4A3F-9AA5-79BD09F74C30"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3A8CCC20-8986-4028-B125-66F371A4A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6E07F13C-A6FC-49E8-B10E-E4FC1F182DA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"04AB9C70-10CB-460B-91AD-1D79C9153194"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E1E718DB-2A79-4277-BA15-6E6A904E483A"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.1.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"286B7EBD-D663-440C-859B-1E0EE839AEB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.1.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"408EC889-4D8B-49FC-9281-AC85559BB774"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.1.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"F1E2A83E-A244-4F1E-85E9-6EA075D32C5B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:0.5:*:*:*:*:*:*:*","matchCriteriaId":"980553F2-8662-47CF-95F0-645141746AEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:0.7:*:*:*:*:*:*:*","matchCriteriaId":"40EBF1CD-B392-4262-8F06-2C784ADAF0F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.1a:*:*:*:*:*:*:*","matchCriteriaId":"9C00F84A-FCD4-4935-B7DE-ECBA6AE9B074"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"960DC6C2-B285-41D4-96F7-ED97F8BD5482"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D1FD0EB4-E744-4465-AFEE-A3C807C9C993"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*","matchCriteriaId":"1D866A7D-F0B9-4EA3-93C6-1E7C2C2A861F"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*","matchCriteriaId":"57772E3B-893C-408A-AA3B-78C972ED4D5E"}]}]}],"references":[{"url":"http://fedoranews.org/updates/FEDORA-2004-318.shtml","source":"cve@mitre.org"},{"url":"http://subversion.tigris.org/security/CAN-2004-0749-advisory.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-35.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11243","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17472","source":"cve@mitre.org"},{"url":"http://fedoranews.org/updates/FEDORA-2004-318.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://subversion.tigris.org/security/CAN-2004-0749-advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-35.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17472","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0750","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the all_squash option from being applied."},{"lang":"es","value":"Vulnerabilidad desconocida en redhat-config-nfs anteriores a 1.0.13, cuando los recursos compartido se exportan a múltiples máquinas, puede producir permisos incorrectos y prevenir que la opción all_squash sea aplicada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*","matchCriteriaId":"81B543F9-C209-46C2-B0AE-E14818A6992E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*","matchCriteriaId":"DB89C970-DE94-4E09-A90A-077DB83AD156"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"}]}]}],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2004-434.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/419762/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11240","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17478","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10696","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-434.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/419762/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11240","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10696","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0751","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault)."},{"lang":"es","value":"La función char_buffer_read en el módulo mod_ssl de Apache 2.x, cuando se usa un proxy inverso con un servidor SSL, permite a atacantes remotos causar una denegación de permiso (fallo de segmentación)."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.51:\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.44","versionEndExcluding":"2.0.51","matchCriteriaId":"F7941DFB-5C61-4E17-BA7D-C88149F29CF8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-09/0096.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://issues.apache.org/bugzilla/show_bug.cgi?id=30134","source":"cve@mitre.org","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2004_30_apache2.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-463.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2004/0047/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17273","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11864","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-09/0096.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://issues.apache.org/bugzilla/show_bug.cgi?id=30134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2004_30_apache2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-463.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2004/0047/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-0752","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users."},{"lang":"es","value":"OpenOffice (OOo) 1.12 crea nombres de directorios predecibles con permisos inseguros durante el inicio, lo que puede permitir a usuarios locales leer o listar ficheros de otros usuarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openoffice:openoffice:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2F0436BF-D4B6-4437-A509-FEBB779E4B3A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109483308421566&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12302/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12546/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12668/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12914/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12932/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011205","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openoffice.org/issues/show_bug.cgi?id=33357","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9804","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-446.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11151","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17312","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10294","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109483308421566&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12302/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12546/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12668/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12914/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12932/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openoffice.org/issues/show_bug.cgi?id=33357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9804","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-446.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10294","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0753","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted BMP file."},{"lang":"es","value":"El procesador de imágenes BMP de (1) gdk-pixbuf anteriores a 0.22 y (2) gtk2 anteriores a 2.2.4 permite a atacantes remotos causar una denegación de servicio (bucle infinito) mediante un fichero BMP artesanal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.17:*:*:*:*:*:*:*","matchCriteriaId":"5AA48440-1F4A-4F3D-AA56-2F7A4B10FB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.18:*:*:*:*:*:*:*","matchCriteriaId":"8A45519F-F073-4722-B40D-C29C0862ED2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.20:*:*:*:*:*:*:*","matchCriteriaId":"202DC858-A31A-4790-80CA-16F033E1B7FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.22:*:*:*:*:*:*:*","matchCriteriaId":"A033173F-C1F9-48D3-8506-CF4A901FFE14"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gtk:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.2.4","matchCriteriaId":"01C87ADC-64AC-48FD-AA1A-5B29B6788D17"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/17657","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-546","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/825374","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:214","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-447.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-466.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/419771/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/11195","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2005","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17383","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10585","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/17657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/825374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-447.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-466.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/419771/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/11195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0754","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the size variable in Groupware server messages."},{"lang":"es","value":"Desbordamiento de enteros en Gaim anteriores a 0.82 permite a atacantes remotos ejecutar código arbitrario mediante una la varible de tamaño en mensajes de servidor Groupware."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.10:*:*:*:*:*:*:*","matchCriteriaId":"6D1EE775-471F-4D9F-9635-41CB581168D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"5E56639E-2F96-4110-8846-0EA887D2967B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.50:*:*:*:*:*:*:*","matchCriteriaId":"A2FDCAE1-0B5D-449F-A83A-5028E7701109"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.51:*:*:*:*:*:*:*","matchCriteriaId":"F984C4C7-6431-48DD-A0E0-0DC5F6052EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.52:*:*:*:*:*:*:*","matchCriteriaId":"E955A141-DAEB-40EA-BE35-A5EED928E030"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.53:*:*:*:*:*:*:*","matchCriteriaId":"E3F02AE7-7A9C-4219-9472-9FAC8CBC637B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.54:*:*:*:*:*:*:*","matchCriteriaId":"E94CDB8A-7120-41C6-95AF-5DBAD74F3204"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.55:*:*:*:*:*:*:*","matchCriteriaId":"F4A3A068-BEBB-4E31-9CAD-4A2008CFBC91"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.56:*:*:*:*:*:*:*","matchCriteriaId":"DA529226-9252-41EE-8543-692F3119CF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.57:*:*:*:*:*:*:*","matchCriteriaId":"C6FDD0E8-D0CB-4B4C-8E4C-A4979B116CC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.58:*:*:*:*:*:*:*","matchCriteriaId":"7366C749-E27C-422C-BFE0-DCC4B4D9C8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.59:*:*:*:*:*:*:*","matchCriteriaId":"5622F4C0-43C8-44B1-A7C7-D3A7F1199FA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.59.1:*:*:*:*:*:*:*","matchCriteriaId":"2A2E8C61-B01A-482A-9B8D-0072AB6BB7DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.60:*:*:*:*:*:*:*","matchCriteriaId":"30E40E9A-950B-4D6E-A748-5F76F7B97AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.61:*:*:*:*:*:*:*","matchCriteriaId":"C4FF2E49-7561-461A-98BD-4778C6764020"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.62:*:*:*:*:*:*:*","matchCriteriaId":"4168D220-61A9-4E9F-A5A8-4832822E35EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.63:*:*:*:*:*:*:*","matchCriteriaId":"253631B3-8A0C-48DC-851A-F5A6AB490BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.64:*:*:*:*:*:*:*","matchCriteriaId":"1266BD64-E19D-4686-9E00-42CC9AF94756"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.65:*:*:*:*:*:*:*","matchCriteriaId":"C62BCA03-A187-432B-B2B3-40DE99A9986C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.66:*:*:*:*:*:*:*","matchCriteriaId":"92762951-6F9E-426D-8157-55C65A561417"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.67:*:*:*:*:*:*:*","matchCriteriaId":"00AFDEF5-5E42-4BF6-8EC6-FE7FCD4DD4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.68:*:*:*:*:*:*:*","matchCriteriaId":"7A4B3DA2-9ECB-454D-8775-9571B158007F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.69:*:*:*:*:*:*:*","matchCriteriaId":"A041E262-E36F-44C3-B83B-2E79653B74EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.70:*:*:*:*:*:*:*","matchCriteriaId":"333D0BA1-7676-417D-BB92-AAA1AAED2D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.71:*:*:*:*:*:*:*","matchCriteriaId":"BF449EC2-A6F2-405F-BEE7-0516E092E6F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.72:*:*:*:*:*:*:*","matchCriteriaId":"840C5668-D951-4A62-B555-EB3D91A08B61"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.73:*:*:*:*:*:*:*","matchCriteriaId":"BC715625-C4E7-49AC-9F3E-7306114878D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.74:*:*:*:*:*:*:*","matchCriteriaId":"C8834643-F682-4FC1-93DE-BE4754E993AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.75:*:*:*:*:*:*:*","matchCriteriaId":"42DC59A0-4BD8-42AC-B2E0-BFC32FCE7396"}]}]}],"references":[{"url":"http://gaim.sourceforge.net/security/?id=2","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12383","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12480","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13101","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011083","source":"cve@mitre.org"},{"url":"http://www.fedoranews.org/updates/FEDORA-2004-278.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fedoranews.org/updates/FEDORA-2004-279.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/9260","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-400.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11056","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17140","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10220","source":"cve@mitre.org"},{"url":"http://gaim.sourceforge.net/security/?id=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fedoranews.org/updates/FEDORA-2004-278.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fedoranews.org/updates/FEDORA-2004-279.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/9260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-400.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0755","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions."},{"lang":"es","value":"La capacidad FileStore en CGI::Session de Ruby anteriores a 1.8.1, y posiblemente PStore, crea ficheros con permisos no seguros, lo que puede permitir a usuarios locales robar información de sesión secuestrar sesiones."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yukihiro_matsumoto:ruby:1.6:*:*:*:*:*:*:*","matchCriteriaId":"46EE9BA9-DE82-4461-8D05-8B4DA2BAFE19"},{"vulnerable":true,"criteria":"cpe:2.3:a:yukihiro_matsumoto:ruby:1.8:*:*:*:*:*:*:*","matchCriteriaId":"05A4185F-1CE1-48D1-B967-01A96527417B"}]}]}],"references":[{"url":"http://secunia.com/advisories/12290/","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-537","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-08.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:128","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16996","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11128","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12290/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16996","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11128","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0757","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, may allow remote POP3 mail servers to execute arbitrary code."},{"lang":"es","value":"Desbordamiento de búfer basado en el montón en SenUidl en la capacidad POP3 de Mozilla anteriores a 1.7, Firefox anteriores a 0.9, y Thunderbird anteriores a 0.7, puede permitir a servidores POP3 remotos ejecutar código arbitrario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9","matchCriteriaId":"FF711F75-74B8-4CF6-9580-8B51F5A2F2EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7","matchCriteriaId":"A9239E8A-8155-462A-A409-D66FF6B94B04"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7","matchCriteriaId":"5723A6C5-70AB-4F54-BCCB-DD3498446AD2"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=229374","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10856","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/561022","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/15495","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16869","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11042","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3250","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=229374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/561022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0758","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid."},{"lang":"es","value":"Mozilla 1.5 a 1.7 permiten que un certificado de AC (Autoridad Certificadora) sea importado incluso cuando su DN es el mismo de la AC raíz propia, lo que permite a atacantes remotos causar una denegación de servicio a páginas SSL porque el certificado malicioso es tratado como inválido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","matchCriteriaId":"10E59CDD-9F95-4E38-95B3-AC5C35075378"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=249004","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/784278","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/15495","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127186","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16706","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10304","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3134","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=249004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/784278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0759","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla before 1.7 allows remote web servers to read arbitrary files via Javascript that sets the value of an <input type=\"file\"> tag."},{"lang":"es","value":"Mozilla anteriores a 1.7 permiten a servidores web remotos leer ficheros de su elección mediante JavaScript que establece el valor de una etiqueta <input type=\"file\">."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","matchCriteriaId":"10E59CDD-9F95-4E38-95B3-AC5C35075378"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=241924","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/15495","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16870","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11153","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=241924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11153","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0760","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null character (%00) in an FTP URI."},{"lang":"es","value":"Mozilla permite a atacantes remotos causar que Mozilla abra una URI como de un tipo MIME distinto al esperado mediante un carácter nulo (%00) en una URI FTP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","matchCriteriaId":"10E59CDD-9F95-4E38-95B3-AC5C35075378"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=250906","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/15495","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16691","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11090","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1227","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=250906","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1227","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0761","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect sequences to spoof the security lock icon that makes a web page appear to be encrypted."},{"lang":"es","value":"Mozilla anteriores a 1.7, Firefox anteriores a 0.9, y Thunderbird anteriores a 0.7 permiten a atacantes remotos usar ciertas secuencias de redirección para suplantar el icono de la cerradura de seguridad que se muestra cuando una página está cifrada."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9","matchCriteriaId":"FF711F75-74B8-4CF6-9580-8B51F5A2F2EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7","matchCriteriaId":"A9239E8A-8155-462A-A409-D66FF6B94B04"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7","matchCriteriaId":"5723A6C5-70AB-4F54-BCCB-DD3498446AD2"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=240053","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/15495","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16871","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3603","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9240","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=240053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3603","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9240","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0762","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box."},{"lang":"es","value":"Mozilla anteriores a 1.7, Firefox anteriores a 0.9, y Thunderbird anteriores a 0.7 permiten a sitios web remotos instalar extensiones de su elección usando eventes interactivos para manipular el cuadro de diálogo de Seguridad XPInstall."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9","matchCriteriaId":"FF711F75-74B8-4CF6-9580-8B51F5A2F2EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7","matchCriteriaId":"A9239E8A-8155-462A-A409-D66FF6B94B04"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7","matchCriteriaId":"5723A6C5-70AB-4F54-BCCB-DD3498446AD2"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=162020","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11999/","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/15495","source":"cve@mitre.org"},{"url":"http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16623","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10032","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4403","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=162020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11999/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10032","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4403","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0763","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the \"onunload\" method."},{"lang":"es","value":"Mozilla Firefox 0.9.1 y 0.9.2 permite a sitios web remotos suplantar certificados de sitios web de confianza mediante redirecciones y JavaScript que usa el método \"onunload\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=253121","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/024372.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109087067730938&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12160/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cipher.org.uk/index.php?p=advisories/Certificate_Spoofing_Mozilla_FireFox_25-07-2004.advisory","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/15495","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16796","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3989","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9436","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=253121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/024372.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109087067730938&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12160/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cipher.org.uk/index.php?p=advisories/Certificate_Spoofing_Mozilla_FireFox_25-07-2004.advisory","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16796","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0764","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the \"chrome\" flag and XML User Interface Language (XUL) files."},{"lang":"es","value":"Mozilla anteriores a 1.7, Firefox anteriores a 0.9, y Thunderbird anteriores a 0.7, permiten a sitios web remotos secuestrar el interfaz del usuario mediante la bandera \"chrome\" y ficheros de Interfaz de Usuario XML (XUL)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9","matchCriteriaId":"FF711F75-74B8-4CF6-9580-8B51F5A2F2EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7","matchCriteriaId":"A9239E8A-8155-462A-A409-D66FF6B94B04"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7","matchCriteriaId":"5723A6C5-70AB-4F54-BCCB-DD3498446AD2"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=244965","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12188","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/262350","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10832","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/15495","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16837","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2418","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9419","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=244965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/262350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10832","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9419","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0765","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The cert_TestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, only checks the hostname portion of a certificate when the hostname portion of the URI is not a fully qualified domain name (FQDN), which allows remote attackers to spoof trusted certificates."},{"lang":"es","value":"La función cet_TestHostName en Mozilla anteriores a 1.7, Firefox anteriores a 0.9, y Thunderbird anteriores a 0.7, sólo comprueba la porción de nombre de máquina de un certificado cuando la porción de nombre de máquina de la URI no es un nombre de dominio completamente cualificado (FQDN - fully qualified domain name), lo que permite a atacantes remotos suplantar certificados de confianza."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9","matchCriteriaId":"FF711F75-74B8-4CF6-9580-8B51F5A2F2EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","versionEndIncluding":"1.7","matchCriteriaId":"A9239E8A-8155-462A-A409-D66FF6B94B04"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7","matchCriteriaId":"5723A6C5-70AB-4F54-BCCB-DD3498446AD2"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=234058","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16868","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11162","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=234058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-421.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0766","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NGSEC StackDefender 2.0 allows attackers to cause a denial of service (system crash) via an invalid address for the BaseAddress parameter to the hooks for the (1) ZwAllocateVirtualMemory or (2) ZwProtectVirtualMemory functions."},{"lang":"es","value":"NGSEC StackDefender 2.0 permite a atacantes causar una denegación de servicio (caída del sistema) mediante una dirección inválida del parámetro BaseAddress en los ganchos de las funciones (1)ZwAllocateVirtualMemory o (2)ZwProtectVirtualMemory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ngsec:stackdefender:2.0:*:*:*:*:*:*:*","matchCriteriaId":"835E70F8-376E-4FC3-BE05-ED5E31702904"}]}]}],"references":[{"url":"http://www.idefense.com/application/poi/display?id=119&type=vulnerabilities&flashstatus=false","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16892","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=119&type=vulnerabilities&flashstatus=false","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0767","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NGSEC StackDefender 1.10 allows attackers to cause a denial of service (system crash) via an invalid address for the ObjectAttribues parameter to the hooks for the (1) ZwCreateFile or (2) ZwOpenFile functions."},{"lang":"es","value":"NGSEC StackDefender 1.10 permite a atacantes causar una denegación de servicio (caída del sistema) mediante una dirección inválida en el parámetro ObjectAttributes a los ganchos de las funciones (1) ZwCreateFile o (2) ZwOpenFile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ngsec:stackdefender:1.10:*:*:*:*:*:*:*","matchCriteriaId":"0C63F41B-BC5A-435E-ABAD-F8198C9CA23B"}]}]}],"references":[{"url":"http://www.idefense.com/application/poi/display?id=118&type=vulnerabilities&flashstatus=false","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16879","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=118&type=vulnerabilities&flashstatus=false","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16879","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0768","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack."},{"lang":"es","value":"libpng 1.2.5 y anteriores no calculan adecuadamente ciertos desplazamientos de búfer, lo que podría permitir a atacantes remotos ejecutar código arbitrario mediante un ataque de desbordamiento de búfer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng3:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"41FF0D8A-5DCC-494B-A97D-58C5FD288462"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng3:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C96453B9-3278-4063-BD27-2890CCEC338B"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng3:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"33500CD3-355B-4CC0-9C2C-DCC0737D5C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng3:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"1CDAAAC1-C4AD-45F4-AB05-D79AAFDBDD4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng3:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"2BF52AFA-4E5C-4604-9991-49B0A3914C5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:greg_roelofs:libpng3:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"E441AA95-93C0-4907-AF04-89B334D2048D"}]}]}],"references":[{"url":"http://secunia.com/advisories/33137","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200812-15.xml","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-536","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1943","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16914","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/33137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200812-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16914","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0769","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ archive, as originally demonstrated using the \"x\" option but also exploitable through \"l\" and \"v\", and fixed in header.c, a different issue than CVE-2004-0771."},{"lang":"es","value":"Desbordamiento de búfer en LHA permite a atacantes remotos ejecutar código arbitrario mediante nombres de ruta largos en cabeceras de formato 2 LHarc en un archivo .LHZ, como se ha demostrado originalmente usando la opción \"x\" pero también explotable mediante \"l\" y \"v\" en header.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:*:*:*:*:*:*:*:*","matchCriteriaId":"558D05E1-A3A5-4C12-89AF-88D6442930AA"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=51285","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://lw.ftw.zamosc.pl/lha-exploit.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108745217504379&w=2","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-323.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-440.html","source":"cve@mitre.org"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1833","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16917","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11047","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=51285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://lw.ftw.zamosc.pl/lha-exploit.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108745217504379&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-323.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-440.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0771","sourceIdentifier":"cve@mitre.org","published":"2004-11-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working directory) command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries."},{"lang":"es","value":"Desbordamiento de búfer en la función extract_one de lhext.c en LHA puede permitr a atacantes ejecutar código de su elección mediante un parámetro de línea de comandos \"w\" (directorio de trabajo) larga, un problema distinto de CAN-2004-0769. \r\nNOTA: Esta entrada puede ser RECHAZADA si no hay casos en los que LHA utilize setuid o en que sea usado de otra manera a través de límites de seguridad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tsugio_okamoto:lha:1.14:*:*:*:*:*:*:*","matchCriteriaId":"081C75A4-FDB1-4941-8276-985570632A82"},{"vulnerable":true,"criteria":"cpe:2.3:a:tsugio_okamoto:lha:1.15:*:*:*:*:*:*:*","matchCriteriaId":"A623BD1B-DB9A-4545-9970-E3492AA39A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:tsugio_okamoto:lha:1.17:*:*:*:*:*:*:*","matchCriteriaId":"8984B914-9850-405C-AAE6-A7C266F13BA3"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=51285","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108668791510153","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-323.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-440.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/363418","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10354","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1833","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16196","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9595","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=51285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108668791510153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-323.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-440.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/363418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=1833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9595","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0772","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code."},{"lang":"es","value":"Vulnerabilidad de doble liberación en el código de manejo de errores en krb524d de MIT Kerberos (krb5) 1.2.8 y anteriores puede permitir a atacantes remotos ejecutar código de su elección."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-415"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.8","matchCriteriaId":"AE06908B-D3E5-4D0D-9511-8C24CE030671"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:*","matchCriteriaId":"48A4B336-2D5B-4D9B-AA87-E5266FED05BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:2.1:*:*:*:*:*:*:*","matchCriteriaId":"37042CDE-E4FE-442E-891A-CD84433D36E2"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=109508872524753&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-543","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/350792","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:088","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/11078","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.trustix.net/errata/2004/0045/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-247A.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17158","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4661","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=109508872524753&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/350792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/11078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.trustix.net/errata/2004/0045/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-247A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4661","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0774","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with a Content-Length header set to -1."},{"lang":"es","value":"RealNetworks Helix Universal Server 9.0.2 para Linux y 9.0.3 for Windows permite a atacantes remotos causar una denegación de servicio (consumición de memoria y CPU) mediante peticiones POST con una cabecera Content-Length puesta a -1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_universal_mobile_server_and_gateway:*:*:*:*:*:*:*:*","versionEndIncluding":"10.3.1.716","matchCriteriaId":"7418D2B2-E90F-4460-BF5B-8C1D0599DDDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_universal_server:*:*:*:*:*:*:*:*","versionEndIncluding":"9.0.4.958","matchCriteriaId":"CBE15C8F-4E6C-4060-8652-892FC4AB02CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_universal_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6971157F-B1A5-4565-A90B-29FC3F74DD2C"}]}]}],"references":[{"url":"http://www.idefense.com/application/poi/display?id=151&type=vulnerabilities","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17648","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=151&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0775","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in WIDCOMM Bluetooth Connectivity Software, as used in products such as BTStackServer 1.3.2.7 and 1.4.2.10, Windows XP and Windows 98 with MSI Bluetooth Dongles, and HP IPAQ 5450 running WinCE 3.0, allows remote attackers to execute arbitrary code via certain service requests."},{"lang":"es","value":"Desbordamiento de búfer en WIDCOMM Bluetooth Connectivity Software, usado en productos como BTStackServer 1.3.2.7 y 1.4.2.10, Windows XP y Windows 98 con mochilas Bluetooth MSI, y  HP IPAQ 5450 con WinCE 3.0, permite a atacantes remotos ejecutar código de su elección mediante ciertas peticiones de servicio."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:widcomm:bluetooth_communication_software:1.4.1.03:*:*:*:*:*:*:*","matchCriteriaId":"45325BE4-B4A6-47D0-833C-2F7D3E0130CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:widcomm:btstackserver:1.3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"24CC0755-E558-4AC6-8BFD-55974739C16B"},{"vulnerable":true,"criteria":"cpe:2.3:a:widcomm:btstackserver:1.4.2.10:*:*:*:*:*:*:*","matchCriteriaId":"90B93A7A-A1E0-417E-812E-CF2DFA106C32"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0029.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109223783402624&w=2","source":"cve@mitre.org"},{"url":"http://www.internetnews.com/security/article.php/3394181","source":"cve@mitre.org"},{"url":"http://www.pentest.co.uk/documents/ptl-2004-03.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/418633/100/0/threaded","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16953","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0029.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109223783402624&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.internetnews.com/security/article.php/3394181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pentest.co.uk/documents/ptl-2004-03.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/418633/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16953","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0777","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled, allows remote attackers to execute arbitrary code."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en la función auth_debug en Courier-IMAP 1.6.0 a 2.2.1, cuando se activa el registro de depuración (DEBUG_LOGIN), permite a atacantes remotos ejecutar código de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:courier-imap:1.6:*:*:*:*:*:*:*","matchCriteriaId":"CE124EB9-DA25-459A-83A2-43E8A0AC0EF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:courier-imap:1.7:*:*:*:*:*:*:*","matchCriteriaId":"6A41204F-5DF0-48C3-A6EA-BEB9F16AD819"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:courier-imap:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D2EEAB62-A508-4138-8633-9EC55FA9BA70"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:courier-imap:2.1:*:*:*:*:*:*:*","matchCriteriaId":"FB2AC82C-77EE-4FF1-BFCB-F3C05FE7D77D"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:courier-imap:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"1CBF3328-97BF-4C82-B99A-1C0C55E63716"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:courier-imap:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C2C8E71C-8CD0-491F-9531-EBB909F540BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:courier-imap:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4EE24695-FA49-4323-8A57-E4E618FAD45E"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:courier-imap:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"803700EC-E4E9-45DB-9024-4FDE322BB783"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200408-19.xml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10976","source":"cve@mitre.org"},{"url":"http://www.trustix.net/errata/2004/0043/","source":"cve@mitre.org"},{"url":"http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=131","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17034","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200408-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.net/errata/2004/0043/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0778","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned."},{"lang":"es","value":"CVS 1.11.x anteriores a 1.11.17 y 1.12.x anteriores a 1.12.9 permite a atacantes remotos determinar la existencia de ficheros y directorios de su elección mediante el comando -X de un fichero de historia alternativo, lo que hace que devuelve diferentes mensajes de error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cvs:*:*:*:*:*:*:*:*","versionStartIncluding":"1.11.0","versionEndExcluding":"1.11.17","matchCriteriaId":"762D9099-1589-48C0-A362-CA4501FBAD1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cvs:*:*:*:*:*:*:*:*","versionStartIncluding":"1.12.0","versionEndExcluding":"1.12.9","matchCriteriaId":"EB6BA553-1360-4C42-B90A-C7D719F36827"}]}]}],"references":[{"url":"http://www.idefense.com/application/poi/display?id=130&type=vulnerabilities","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/579225","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:108","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10955","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17001","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10688","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.idefense.com/application/poi/display?id=130&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/579225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0779","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted sessions to the site, which allows a remote attacker to cause a cached password to be sent in cleartext to a spoofed site."},{"lang":"es","value":"Los navegadores Mozilla 1.6, Firebird 0.7 y Firefox 0.8 no verifican adecuadamente que las contraseñas almacenadas en caché de sitios cifrados con SSL sean sólo enviadas mediante sesiones cifradas con el sitio, lo que permite a atacantes remotos hacer que contraseñas en caché sean enviadas en texto plano al sitio suplantado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"F374AF9E-BBBC-4C0E-B00C-5DB7FC83B445"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6BF63077-4E98-497D-8CE6-B84B022DB21D"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=226278","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:082","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17018","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=226278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0780","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in uustat in Sun Solaris 8 and 9 allows local users to execute arbitrary code via a long -S command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://secunia.com/advisories/18371","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/19087","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1015455","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101933-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-056.htm","source":"cve@mitre.org"},{"url":"http://www.idefense.com/intelligence/vulnerabilities/display.php?id=366","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/16193","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2006/0113","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24045","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/18371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/19087","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1015455","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101933-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-056.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/intelligence/vulnerabilities/display.php?id=366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/16193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vupen.com/english/advisories/2006/0113","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24045","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0781","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in list.cgi in the Icecast internal web server (icecast-server) 1.3.12 and earlier allows remote attackers to inject arbitrary web script via the UserAgent parameter."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en list.cgi en el servidor web interno de Icecast (icecast-server) 1.3.12 y anteriores permite a atacantes remotos inyectar script web de su elección mediante el parámetro UserAgent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F32DB53A-7E27-4856-A4D7-909CF121F332"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"D05505BF-6437-421A-90B3-9766E707ADDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6D5E2224-2844-420F-A51E-DED27A50A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"9C35E7B3-C898-4127-9188-65E691148EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FD812E67-7373-474C-8A05-1827C19BD6F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"BE04F78D-A908-4F5E-A9AE-4B9996B304B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"AD3DCBD8-26FB-4098-8EFE-8C8C025E3B6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.9.1:*:*:*:*:*:*:*","matchCriteriaId":"C30157ED-6C29-42D0-8F4B-D5498A5BFF50"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B2ABBD7E-50EB-4CFD-BA92-4C7172E82C50"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"85B1944C-E99D-4FF2-AE5B-2887F9BE1E80"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.10.1:*:*:*:*:*:*:*","matchCriteriaId":"17888040-F0ED-491C-98D7-3BA0F7318D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"D86170BC-3616-4B26-832B-6F6C41D02081"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"AB7336AF-1276-41F6-8BC9-68B2110A92A5"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-541","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11021","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17086","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0782","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that enable a heap-based buffer overflow.  NOTE: this identifier is ONLY for gtk+.  It was incorrectly referenced in an advisory for a different issue (CVE-2004-0687)."},{"lang":"es","value":"Desbordamiento de enteros en pixbuf_create_from_xpm (io-xpm.c) en el decodificador de imágenes XPM de gtk+ 2.4.4 (gtk2) y anteriores, y gdk-pixbuf anteriores a 0.22 permite a atacantes remotos ejecutar código de su elección mediante ciertos valores n_col y cpp que permiten un desbordamiento de búfer basado en el montón."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.17:*:*:*:*:*:*:*","matchCriteriaId":"5AA48440-1F4A-4F3D-AA56-2F7A4B10FB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.18:*:*:*:*:*:*:*","matchCriteriaId":"8A45519F-F073-4722-B40D-C29C0862ED2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.20:*:*:*:*:*:*:*","matchCriteriaId":"202DC858-A31A-4790-80CA-16F033E1B7FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.22:*:*:*:*:*:*:*","matchCriteriaId":"A033173F-C1F9-48D3-8506-CF4A901FFE14"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gtk:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6E511D1A-953C-4B5E-97A8-14F877F147C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gtk:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"198F75F0-AB90-4C20-B444-812C94D0525A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gtk:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2C02EA95-4879-4A9C-8F25-979D30E712A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gtk:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"49EFF6F8-030B-402C-9787-73B3C0EA94D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gtk:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"FFDE421C-A500-4FE0-BCD6-2F01A653296B"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109528994916275&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2004-005.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/17657","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101776-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-546","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/729894","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:214","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-447.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-466.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/419771/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/11195","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2005","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17386","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11539","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1617","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109528994916275&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2004-005.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/17657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101776-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/729894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-447.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-466.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/419771/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/11195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0783","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string.  NOTE: this identifier is ONLY for gtk+.  It was incorrectly referenced in an advisory for a different issue (CVE-2004-0688)."},{"lang":"es","value":"Vulnerabilidad basada en la pila en xpm_extract_color (io-xpm.c) en el decodificador de imagen XPM de gtk+ 2.4.4 (gtk2) y anteriores, y gdk-pixbuf anteriores a 0.22, puede permitir a atacantes remtoso ejecutar código arbitrario mediante una cierta cadena de color."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.17:*:*:*:*:*:*:*","matchCriteriaId":"5AA48440-1F4A-4F3D-AA56-2F7A4B10FB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.18:*:*:*:*:*:*:*","matchCriteriaId":"8A45519F-F073-4722-B40D-C29C0862ED2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.20:*:*:*:*:*:*:*","matchCriteriaId":"202DC858-A31A-4790-80CA-16F033E1B7FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.22:*:*:*:*:*:*:*","matchCriteriaId":"A033173F-C1F9-48D3-8506-CF4A901FFE14"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gtk:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"6E511D1A-953C-4B5E-97A8-14F877F147C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gtk:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"198F75F0-AB90-4C20-B444-812C94D0525A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gtk:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2C02EA95-4879-4A9C-8F25-979D30E712A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gtk:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"49EFF6F8-030B-402C-9787-73B3C0EA94D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gtk:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"FFDE421C-A500-4FE0-BCD6-2F01A653296B"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109528994916275&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2004-005.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/17657","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101776-1","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/369358","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:214","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-447.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-466.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/419771/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/11195","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2005","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17385","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1786","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9348","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109528994916275&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://scary.beasts.org/security/CESA-2004-005.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/17657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101776-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/369358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-447.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-466.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/419771/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/11195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17385","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0784","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector."},{"lang":"es","value":"La funcionalidad de temas de iconos gestuales (smileys) de Gaim anteriores a 0.82 permite a atacantes remotos ejecutar comandos de su elección mediante metacaractéres de shell en el nombre del fichero o del fichero tar que es arrastrado al selector del icono."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.10:*:*:*:*:*:*:*","matchCriteriaId":"6D1EE775-471F-4D9F-9635-41CB581168D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"5E56639E-2F96-4110-8846-0EA887D2967B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.50:*:*:*:*:*:*:*","matchCriteriaId":"A2FDCAE1-0B5D-449F-A83A-5028E7701109"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.51:*:*:*:*:*:*:*","matchCriteriaId":"F984C4C7-6431-48DD-A0E0-0DC5F6052EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.52:*:*:*:*:*:*:*","matchCriteriaId":"E955A141-DAEB-40EA-BE35-A5EED928E030"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.53:*:*:*:*:*:*:*","matchCriteriaId":"E3F02AE7-7A9C-4219-9472-9FAC8CBC637B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.54:*:*:*:*:*:*:*","matchCriteriaId":"E94CDB8A-7120-41C6-95AF-5DBAD74F3204"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.55:*:*:*:*:*:*:*","matchCriteriaId":"F4A3A068-BEBB-4E31-9CAD-4A2008CFBC91"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.56:*:*:*:*:*:*:*","matchCriteriaId":"DA529226-9252-41EE-8543-692F3119CF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.57:*:*:*:*:*:*:*","matchCriteriaId":"C6FDD0E8-D0CB-4B4C-8E4C-A4979B116CC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.58:*:*:*:*:*:*:*","matchCriteriaId":"7366C749-E27C-422C-BFE0-DCC4B4D9C8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.59:*:*:*:*:*:*:*","matchCriteriaId":"5622F4C0-43C8-44B1-A7C7-D3A7F1199FA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.59.1:*:*:*:*:*:*:*","matchCriteriaId":"2A2E8C61-B01A-482A-9B8D-0072AB6BB7DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.60:*:*:*:*:*:*:*","matchCriteriaId":"30E40E9A-950B-4D6E-A748-5F76F7B97AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.61:*:*:*:*:*:*:*","matchCriteriaId":"C4FF2E49-7561-461A-98BD-4778C6764020"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.62:*:*:*:*:*:*:*","matchCriteriaId":"4168D220-61A9-4E9F-A5A8-4832822E35EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.63:*:*:*:*:*:*:*","matchCriteriaId":"253631B3-8A0C-48DC-851A-F5A6AB490BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.64:*:*:*:*:*:*:*","matchCriteriaId":"1266BD64-E19D-4686-9E00-42CC9AF94756"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.65:*:*:*:*:*:*:*","matchCriteriaId":"C62BCA03-A187-432B-B2B3-40DE99A9986C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.66:*:*:*:*:*:*:*","matchCriteriaId":"92762951-6F9E-426D-8157-55C65A561417"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.67:*:*:*:*:*:*:*","matchCriteriaId":"00AFDEF5-5E42-4BF6-8EC6-FE7FCD4DD4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.68:*:*:*:*:*:*:*","matchCriteriaId":"7A4B3DA2-9ECB-454D-8775-9571B158007F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.69:*:*:*:*:*:*:*","matchCriteriaId":"A041E262-E36F-44C3-B83B-2E79653B74EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.70:*:*:*:*:*:*:*","matchCriteriaId":"333D0BA1-7676-417D-BB92-AAA1AAED2D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.71:*:*:*:*:*:*:*","matchCriteriaId":"BF449EC2-A6F2-405F-BEE7-0516E092E6F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.72:*:*:*:*:*:*:*","matchCriteriaId":"840C5668-D951-4A62-B555-EB3D91A08B61"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.73:*:*:*:*:*:*:*","matchCriteriaId":"BC715625-C4E7-49AC-9F3E-7306114878D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.74:*:*:*:*:*:*:*","matchCriteriaId":"C8834643-F682-4FC1-93DE-BE4754E993AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.75:*:*:*:*:*:*:*","matchCriteriaId":"42DC59A0-4BD8-42AC-B2E0-BFC32FCE7396"}]}]}],"references":[{"url":"http://gaim.sourceforge.net/security/?id=1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fedoranews.org/updates/FEDORA-2004-278.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fedoranews.org/updates/FEDORA-2004-279.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-400.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17144","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10008","source":"cve@mitre.org"},{"url":"http://gaim.sourceforge.net/security/?id=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fedoranews.org/updates/FEDORA-2004-278.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fedoranews.org/updates/FEDORA-2004-279.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-400.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0785","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) Rich Text Format (RTF) messages, (2) a long hostname for the local system as obtained from DNS, or (3) a long URL that is not properly handled by the URL decoder."},{"lang":"es","value":"Múltiples desbordamientos de búfer en Gaim anteriores a 0.82 permite a atacantes remotos causar una dengación de servicio y posiblemente ejecutar código de su elección mediante (1) mensajes en Formato de Texto Enriquecido (RTF), (2) un nombre de máquina largo obtenido del DNS, o (3) una URL larga que no es manejada adecuadamente por el decodificador de URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.10:*:*:*:*:*:*:*","matchCriteriaId":"6D1EE775-471F-4D9F-9635-41CB581168D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"5E56639E-2F96-4110-8846-0EA887D2967B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.50:*:*:*:*:*:*:*","matchCriteriaId":"A2FDCAE1-0B5D-449F-A83A-5028E7701109"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.51:*:*:*:*:*:*:*","matchCriteriaId":"F984C4C7-6431-48DD-A0E0-0DC5F6052EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.52:*:*:*:*:*:*:*","matchCriteriaId":"E955A141-DAEB-40EA-BE35-A5EED928E030"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.53:*:*:*:*:*:*:*","matchCriteriaId":"E3F02AE7-7A9C-4219-9472-9FAC8CBC637B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.54:*:*:*:*:*:*:*","matchCriteriaId":"E94CDB8A-7120-41C6-95AF-5DBAD74F3204"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.55:*:*:*:*:*:*:*","matchCriteriaId":"F4A3A068-BEBB-4E31-9CAD-4A2008CFBC91"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.56:*:*:*:*:*:*:*","matchCriteriaId":"DA529226-9252-41EE-8543-692F3119CF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.57:*:*:*:*:*:*:*","matchCriteriaId":"C6FDD0E8-D0CB-4B4C-8E4C-A4979B116CC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.58:*:*:*:*:*:*:*","matchCriteriaId":"7366C749-E27C-422C-BFE0-DCC4B4D9C8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.59:*:*:*:*:*:*:*","matchCriteriaId":"5622F4C0-43C8-44B1-A7C7-D3A7F1199FA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.59.1:*:*:*:*:*:*:*","matchCriteriaId":"2A2E8C61-B01A-482A-9B8D-0072AB6BB7DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.60:*:*:*:*:*:*:*","matchCriteriaId":"30E40E9A-950B-4D6E-A748-5F76F7B97AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.61:*:*:*:*:*:*:*","matchCriteriaId":"C4FF2E49-7561-461A-98BD-4778C6764020"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.62:*:*:*:*:*:*:*","matchCriteriaId":"4168D220-61A9-4E9F-A5A8-4832822E35EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.63:*:*:*:*:*:*:*","matchCriteriaId":"253631B3-8A0C-48DC-851A-F5A6AB490BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.64:*:*:*:*:*:*:*","matchCriteriaId":"1266BD64-E19D-4686-9E00-42CC9AF94756"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.65:*:*:*:*:*:*:*","matchCriteriaId":"C62BCA03-A187-432B-B2B3-40DE99A9986C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.66:*:*:*:*:*:*:*","matchCriteriaId":"92762951-6F9E-426D-8157-55C65A561417"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.67:*:*:*:*:*:*:*","matchCriteriaId":"00AFDEF5-5E42-4BF6-8EC6-FE7FCD4DD4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.68:*:*:*:*:*:*:*","matchCriteriaId":"7A4B3DA2-9ECB-454D-8775-9571B158007F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.69:*:*:*:*:*:*:*","matchCriteriaId":"A041E262-E36F-44C3-B83B-2E79653B74EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.70:*:*:*:*:*:*:*","matchCriteriaId":"333D0BA1-7676-417D-BB92-AAA1AAED2D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.71:*:*:*:*:*:*:*","matchCriteriaId":"BF449EC2-A6F2-405F-BEE7-0516E092E6F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.72:*:*:*:*:*:*:*","matchCriteriaId":"840C5668-D951-4A62-B555-EB3D91A08B61"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.73:*:*:*:*:*:*:*","matchCriteriaId":"BC715625-C4E7-49AC-9F3E-7306114878D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.74:*:*:*:*:*:*:*","matchCriteriaId":"C8834643-F682-4FC1-93DE-BE4754E993AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.75:*:*:*:*:*:*:*","matchCriteriaId":"42DC59A0-4BD8-42AC-B2E0-BFC32FCE7396"}]}]}],"references":[{"url":"http://gaim.sourceforge.net/security/?id=3","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://gaim.sourceforge.net/security/?id=4","source":"cve@mitre.org"},{"url":"http://gaim.sourceforge.net/security/?id=5","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12383","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12480","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12929","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13101","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011083","source":"cve@mitre.org"},{"url":"http://www.fedoranews.org/updates/FEDORA-2004-278.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fedoranews.org/updates/FEDORA-2004-279.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/9261","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9262","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9263","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-400.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11056","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17141","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17142","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17143","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10907","source":"cve@mitre.org"},{"url":"http://gaim.sourceforge.net/security/?id=3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://gaim.sourceforge.net/security/?id=4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gaim.sourceforge.net/security/?id=5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12929","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.fedoranews.org/updates/FEDORA-2004-278.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.fedoranews.org/updates/FEDORA-2004-279.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-27.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/9261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-400.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17141","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10907","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0786","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (child process crash) via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool."},{"lang":"es","value":"Las reglas de procesado de IPv6 en la biblioteca apr-util de Apache 2.0.50 y anteriores permite a atacantes remotos causar una denegación de servicio (caída de proceso hijo) mediante una cierta URI, como se ha demostrado utilizando la herramienta de pruebas HTTP Codenomicon."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.51:\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.35","versionEndExcluding":"2.0.51","matchCriteriaId":"A5A9EAAF-A5F4-493E-9530-8A448E55CDCC"}]}]}],"references":[{"url":"http://secunia.com/advisories/12540","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2004_32_apache2.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-463.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2004/0047/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17382","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11380","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/12540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2004_32_apache2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-463.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2004/0047/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-0787","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the form input fields."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el interfaz web de OpenCA 0.9.1-8 y anteriores, y 0.9.2 y anteriores permite a atacantes remotos inyectar script web o HTML mediante los campos de entrada de formulario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"C2091E6F-DCEF-4A0B-B9D5-8C68462FF198"},{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"583D6CE9-76CA-4469-A608-60FB5C20A099"},{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"0BC6D293-6140-435D-9AA9-1579CBD01FEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"C28F5B50-380E-4569-B939-A18B28646E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca:0.9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB46AC2D-15B6-4C6E-B073-4DE2FEB4D42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca:0.9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AE3B0051-6082-4B40-B3F2-268866E1784A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"8A01AEDA-B58B-4823-883A-CA43281EDAD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca:0.9.1.2:*:*:*:*:*:*:*","matchCriteriaId":"63E8A9C3-DCD8-4B7A-97C6-85CFD808E9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca:0.9.1.3:*:*:*:*:*:*:*","matchCriteriaId":"9919778A-F611-483F-AA1D-81154289EE14"},{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca:0.9.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CFF9CC49-10A9-4EC2-A4A0-74AE178A3EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca:0.9.1.5:*:*:*:*:*:*:*","matchCriteriaId":"923B7984-C4FE-4352-A769-64C20F78B865"},{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca:0.9.1.6:*:*:*:*:*:*:*","matchCriteriaId":"EC9AD902-1E0D-4E63-BDA4-1AC0EF7D16B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca:0.9.1.7:*:*:*:*:*:*:*","matchCriteriaId":"8EBFF2C6-5EB5-4E8D-A334-0ED0ABA6766B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca:0.9.1.8:*:*:*:*:*:*:*","matchCriteriaId":"DD0AE47F-2235-41B7-8164-66079B5E1BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:openca:openca:0.9.2_rc6:*:*:*:*:*:*:*","matchCriteriaId":"4B0F9412-163E-48E8-9E1B-3AE1E8C35D2B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109448767123954&w=2","source":"cve@mitre.org"},{"url":"http://www.openca.org/news/CAN-2004-0787.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11113","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17274","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109448767123954&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openca.org/news/CAN-2004-0787.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17274","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0788","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted ICO file."},{"lang":"es","value":"Vulnerabilidad de desbordamiento de enteros en el decodificador de imagen ICO de (1) gdk-pixbuf anteriores a 0.22 y (2) gtk2 anteriores a 2.2.4 permite a atacantes remotos causar una denegación de servicio (caída de aplicación) mediante un fichero ICO artesanal."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.17:*:*:*:*:*:*:*","matchCriteriaId":"5AA48440-1F4A-4F3D-AA56-2F7A4B10FB49"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.18:*:*:*:*:*:*:*","matchCriteriaId":"8A45519F-F073-4722-B40D-C29C0862ED2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.20:*:*:*:*:*:*:*","matchCriteriaId":"202DC858-A31A-4790-80CA-16F033E1B7FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gdkpixbuf:0.22:*:*:*:*:*:*:*","matchCriteriaId":"A033173F-C1F9-48D3-8506-CF4A901FFE14"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnome:gtk:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.0","versionEndExcluding":"2.2.4","matchCriteriaId":"01C87ADC-64AC-48FD-AA1A-5B29B6788D17"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/17657","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-546","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/577654","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:214","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-447.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-466.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/419771/100/0/threaded","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/11195","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2005","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17387","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10506","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/17657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/577654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-447.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-466.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/419771/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/11195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-0789","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9180C95-FF6F-4A0C-9DE0-DFF6D8387698"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.7.1:*:*:*:*:*:*:*","matchCriteriaId":"68FA1404-9FA2-4379-96BC-6D7970C0EAA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.8.0:*:*:*:*:*:*:*","matchCriteriaId":"EABEE7AB-7C45-473E-9873-0423F2249F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.8.1:*:*:*:*:*:*:*","matchCriteriaId":"A1F66F57-6AEB-4E3C-B148-BC7D11E1EBEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.8.2:*:*:*:*:*:*:*","matchCriteriaId":"611AD3E5-708F-46BB-B21D-09598E1C4771"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.9.11:*:*:*:*:*:*:*","matchCriteriaId":"AD59AEEB-D524-4337-8962-B29863CBC889"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F15245AF-B9B6-4D46-A901-A781FC0BAF24"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.3.4:*:*:*:*:*:*:*","matchCriteriaId":"C7A3E1EB-89A5-4326-8977-9B462065C39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1BD607D2-2B07-474B-A855-2C3319B42CED"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"BE4B4665-84C4-4129-9916-ABAC61B81FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.9:*:*:*:*:*:*:*","matchCriteriaId":"4131A4A5-5D67-4522-9A6E-E708815B5B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C30DD0-C957-44BA-B44C-7B424E664B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.9.2:*:*:*:*:*:*:*","matchCriteriaId":"EC2E24A5-A864-4F42-A053-2FDA9D09A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.9.3:*:*:*:*:*:*:*","matchCriteriaId":"0993A56D-3A68-464A-B580-BE2EC3846F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.9.4:*:*:*:*:*:*:*","matchCriteriaId":"1EF6186E-90D1-4D22-A469-0E955D5F1EF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.9.5:*:*:*:*:*:*:*","matchCriteriaId":"7323E750-C596-46FC-AA85-9271CC9C2CE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8F7EA693-9873-4201-B66D-D0AC08E7F560"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"022F8E8E-F6A1-4782-82D0-686E6FADCF44"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A9E269F0-8CFD-45DB-AF82-F9F57EDD0D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:1.3:*:*:*:*:*:*:*","matchCriteriaId":"752CC26D-33D2-43F1-A43B-E101553895C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"317134CF-981A-44CC-B068-BA762AED5EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"20BAB657-CAB8-4473-9EE5-5F725F2EB1E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.1:*:*:*:*:*:*:*","matchCriteriaId":"84D1387B-91E2-4AC8-B387-B50F4D7DFDC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"19028501-E538-4F36-8DF7-3D2A76D86895"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7173317-9F5E-4F80-A957-02084B8DC8C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.4:*:*:*:*:*:*:*","matchCriteriaId":"297935D9-E108-4DB1-B4C8-2AC43DB6EA04"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.5:*:*:*:*:*:*:*","matchCriteriaId":"770BBF88-63D2-4AD6-B28F-5664DFFD746E"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.6:*:*:*:*:*:*:*","matchCriteriaId":"45B16588-35CA-4640-8FA8-BC63D91C7416"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.7:*:*:*:*:*:*:*","matchCriteriaId":"8FA35F28-CAA5-4C03-ABB8-4647537CC8E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.8:*:*:*:*:*:*:*","matchCriteriaId":"9DAC824F-2031-4427-BF38-C32A7644D2B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.9:*:*:*:*:*:*:*","matchCriteriaId":"7884CCA6-2031-41DB-860D-AF18047AF617"},{"vulnerable":true,"criteria":"cpe:2.3:a:dnrd:dnrd:2.10:*:*:*:*:*:*:*","matchCriteriaId":"A906D87C-5557-4FC0-BBF3-7169EF35DEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_moore:mydns:0.6:*:*:*:*:*:*:*","matchCriteriaId":"CC34DC23-117A-403E-9C87-79B1C512A5DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_moore:mydns:0.7:*:*:*:*:*:*:*","matchCriteriaId":"BFE559DF-3874-42E7-BB5B-8968E52D7A04"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_moore:mydns:0.8:*:*:*:*:*:*:*","matchCriteriaId":"11068A01-20FB-4039-8919-85CF93F0FF2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_moore:mydns:0.9:*:*:*:*:*:*:*","matchCriteriaId":"9435E392-AE02-48A8-9A2D-3D1593DA3DC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:don_moore:mydns:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"D3B3D730-15C0-494A-A0B6-231C9F370A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:0.5.28:*:*:*:*:*:*:*","matchCriteriaId":"A917E7C9-BC1A-4D62-9A89-9D73A748D926"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:0.5.29:*:*:*:*:*:*:*","matchCriteriaId":"E0A01622-5254-4B3B-9412-771BE7400FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:0.5.30:*:*:*:*:*:*:*","matchCriteriaId":"2A3A5A98-3544-4A95-8436-0DF013B22CD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:0.5.31:*:*:*:*:*:*:*","matchCriteriaId":"BECF00EC-A188-4B7F-BA51-3AAC3B4195B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:maradns:maradns:0.8.05:*:*:*:*:*:*:*","matchCriteriaId":"AD2370B5-681D-469F-B07C-B9212A975C60"},{"vulnerable":true,"criteria":"cpe:2.3:a:pliant:pliant_dns_server:*:*:*:*:*:*:*:*","matchCriteriaId":"FA13B142-71F9-475E-A28A-DDE94BE0E7FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:posadis:posadis:0.50.4:*:*:*:*:*:*:*","matchCriteriaId":"1930E3DE-67BE-41F2-B8E3-BA8E18762C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:posadis:posadis:0.50.5:*:*:*:*:*:*:*","matchCriteriaId":"17C7DD08-C349-4687-8FAF-CCD211A9C166"},{"vulnerable":true,"criteria":"cpe:2.3:a:posadis:posadis:0.50.6:*:*:*:*:*:*:*","matchCriteriaId":"981611C8-B957-428B-9500-37C60AE0E7E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:posadis:posadis:0.50.7:*:*:*:*:*:*:*","matchCriteriaId":"D34782A9-4CCB-45AD-BA23-EE98EE218B3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:posadis:posadis:0.50.8:*:*:*:*:*:*:*","matchCriteriaId":"1A9D2517-4EAF-4DB9-B0EE-51F65671D45F"},{"vulnerable":true,"criteria":"cpe:2.3:a:posadis:posadis:0.50.9:*:*:*:*:*:*:*","matchCriteriaId":"0FA40391-39D5-4CB7-BB8E-048C4ECBC3C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:posadis:posadis:0.60.0:*:*:*:*:*:*:*","matchCriteriaId":"135BFFE3-FF18-4462-9D19-2DF986E947DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:posadis:posadis:0.60.1:*:*:*:*:*:*:*","matchCriteriaId":"DD907CE8-E0CD-46AA-A9E4-3D0FA3939DAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:posadis:posadis:m5pre1:*:*:*:*:*:*:*","matchCriteriaId":"530D1254-DC0A-4A7C-9520-D0F45B9AF278"},{"vulnerable":true,"criteria":"cpe:2.3:a:posadis:posadis:m5pre2:*:*:*:*:*:*:*","matchCriteriaId":"5C3BF047-0339-4064-9B3B-68E96F1AB1B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:3.0:*:*:*:*:*:*:*","matchCriteriaId":"4C7BC4C8-FB7B-4A88-B97B-984D9AA8EA1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C1D98E1-EBE1-4697-906F-E29C91D9074D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:4.1_beta_a:*:*:*:*:*:*:*","matchCriteriaId":"8AB1D7C0-E484-4441-AA68-FBA5A3309547"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E3F0670C-C07E-4A84-952B-88200D2D9B14"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0.1_build_993:*:*:*:*:*:*:*","matchCriteriaId":"82CD8E2B-37BF-4989-ABF3-9EC8E6F1C079"},{"vulnerable":true,"criteria":"cpe:2.3:a:qbik:wingate:6.0.1_build_995:*:*:*:*:*:*:*","matchCriteriaId":"2CCFB397-9F5F-42F8-ABB3-9700F100D43D"},{"vulnerable":true,"criteria":"cpe:2.3:a:team_johnlong:raidendnsd:*:*:*:*:*:*:*:*","matchCriteriaId":"F4967B8F-D25F-4B55-842E-0C7819EDA88A"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.0:*:*:*:*:*:*:*","matchCriteriaId":"37F0C4C8-E648-4486-BFE3-23333FCFF118"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.01:*:*:*:*:*:*:*","matchCriteriaId":"56647964-82B3-4A7A-BE0D-C252654F8CBB"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.02:*:*:*:*:*:*:*","matchCriteriaId":"C7B83A6F-1996-49B7-BA76-98B83548F289"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.03:*:*:*:*:*:*:*","matchCriteriaId":"E021E51E-EA28-4E61-A08A-A590984A483E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.12:*:*:*:*:*:*:*","matchCriteriaId":"94ABCB8C-8EED-4635-BA54-735CA12A1F64"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"38C70CE1-0116-4C91-AB59-0C0D9F17099B"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"44B1C47A-938B-4F9B-B4B5-88B8622DC965"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"E890E332-7A3B-4B6A-91B3-7FEFAF5DBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.33:*:*:*:*:*:*:*","matchCriteriaId":"4830EAF7-9504-4090-8DDD-6CC6658ABFD4"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"7E26AD96-7BA4-4722-B059-6444FFC2E6D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"E06E7446-34EC-428A-82EE-2E24F2908C97"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.41:*:*:*:*:*:*:*","matchCriteriaId":"8D4996E0-097B-4B79-8A1C-CE55F94B8D29"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.12:*:*:*:*:*:*:*","matchCriteriaId":"0200586F-7F71-47F6-8D2E-F06E1BF418E7"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"F5764F35-7F21-40D0-A3FF-8EEF97F7931D"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"6BE3CF46-91CC-4AFD-B178-48AE90E0E339"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"D79A54BC-789D-4ED2-B3BC-C42959D7FFF7"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"79A8A437-5AF7-448E-9AF8-D8FBA481CFE2"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"5663D3D1-5962-4C43-B689-089EAFE25FD5"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.41:*:*:*:*:*:*:*","matchCriteriaId":"34EDC537-0EFF-46EA-8368-A690480E5D6E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.12:*:*:*:*:*:*:*","matchCriteriaId":"39798220-4621-4C5D-B6A7-6639D02E0C07"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"05EF66A4-F7BB-40C3-9CBF-5DB8715780C9"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"9DCA7249-7F8F-4A2D-B98F-6AA0ECF17D7F"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"0E942419-3272-4267-AF23-4B6071D71277"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"3848A541-4F14-4E3B-99EE-B7C5A886C541"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"34E980E1-62B8-4E37-AE9D-DFE033053620"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.41:*:*:*:*:*:*:*","matchCriteriaId":"730E6E09-C0C8-4F8A-BE07-BFED00FC1235"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:3.11:*:*:*:*:*:*:*","matchCriteriaId":"81100E37-1B99-4317-829F-B4A2278FA323"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:3.12:*:*:*:*:*:*:*","matchCriteriaId":"10321B16-1675-4609-8267-3971A9062AF0"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:3.12:*:*:*:*:*:*:*","matchCriteriaId":"35F0E1BA-D05F-41CB-ACD9-035A6DF4735E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.12:*:*:*:*:*:*:*","matchCriteriaId":"1DD73320-38DA-4606-9CEA-F0C9D5A3215F"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"B8374F1E-06BC-4A9E-8666-336AACC1F5BB"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"DAA3F905-8AC0-42A3-AC63-BA61AE6619AE"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"46E11270-65DE-4C07-A103-66217691069E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.33:*:*:*:*:*:*:*","matchCriteriaId":"7B93D2AD-FA36-4A6C-AC52-6FD0F3AE6A80"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"D109CF38-0F5F-4A20-8A4A-DBE14D7826CD"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"EA6E6FEA-9D2E-4ACD-8C3A-98DA4EB1C994"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.41:*:*:*:*:*:*:*","matchCriteriaId":"10B4A828-33F4-4FB7-9637-3C761A73AEF9"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2460_network_dvr:3.12:*:*:*:*:*:*:*","matchCriteriaId":"41CB517F-BDC9-40D0-AB0D-2DFC7669E8F0"}]}]}],"references":[{"url":"http://secunia.com/advisories/13145","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1012157","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.niscc.gov.uk/niscc/docs/al-20041130-00862.html?lang=en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.niscc.gov.uk/niscc/docs/re-20041109-00957.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.posadis.org/advisories/pos_adv_006.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11642","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17997","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1012157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.niscc.gov.uk/niscc/docs/al-20041130-00862.html?lang=en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.niscc.gov.uk/niscc/docs/re-20041109-00957.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.posadis.org/advisories/pos_adv_006.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11642","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17997","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0792","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files."},{"lang":"es","value":"Vulnerabilidad de atravesamiento de directorios en la función sanitize_path en util.c de rsync 2.6.2 y anteriores, cuando chroot está desactivado, permite a atacantes leer o escribir ciertos ficheros."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"138253E8-6342-4A88-89E6-B579782BC273"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"06A95770-7838-4D26-98BD-F3C0A264C431"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:alpha:*:*:*:*:*","matchCriteriaId":"C698EF8A-7EAE-4F23-87FD-57D143759BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:arm:*:*:*:*:*","matchCriteriaId":"10E06CAF-D555-46E4-A39B-D1C230E34CE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:intel:*:*:*:*:*","matchCriteriaId":"CE361EF1-4FC5-4E0B-AC04-F7D46CBC46F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:m68k:*:*:*:*:*","matchCriteriaId":"542C7579-F7FE-4D66-9C39-4C89B502614F"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:ppc:*:*:*:*:*","matchCriteriaId":"A08984C1-C94B-44E7-BF5A-2C4FB74A448E"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.2:*:sparc:*:*:*:*:*","matchCriteriaId":"A289538D-27D6-430B-ABE4-A2D332491313"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.3.2_1.3:*:*:*:*:*:*:*","matchCriteriaId":"EB5183D1-CBB7-4E91-94A5-9761666A16AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"26EB2DBC-F71C-4D86-9436-FA06B7244F1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"41681E68-E4D3-4466-8BAF-12F38D670C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"9C472D33-56FC-4939-A800-00C319D44D45"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"D57C7AF3-A648-44E3-9ABF-D546B34BDC02"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"38450ED2-6642-4ADB-ACBC-702588904B50"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"FC163657-8FD5-4578-8452-49ABAA1121D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DAFB0E34-5886-454E-9680-640F8FE6A4B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"FA756243-887B-42FD-9A68-2D54CE44AA0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"502E8AC0-7293-41A0-BA17-873DEE5133DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"55E84BFA-DAF8-4842-8542-E244FE16CBD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"5DC02AD4-07B4-4A35-BB74-7228A1CDABE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"33B1ECCC-AAF1-4A3A-BDFA-7955E1AA3683"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"FC4726E9-246B-4C6F-8253-0F09886749A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"59CAA1CD-09D5-40CC-9A27-738B4028BF05"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"A9391534-2F3A-4926-89DD-561FCCFA1743"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.6:*:*:*:*:*:*:*","matchCriteriaId":"9CE53D10-4467-4EAE-845F-F527357C0A71"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4D107BB3-7DC7-4138-BE5F-A8B239427DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_tridgell:rsync:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"8F902BF6-CC1F-4544-A2FF-839A71C23EB0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109268147522290&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109277141223839&w=2","source":"cve@mitre.org"},{"url":"http://samba.org/rsync/#security_aug04","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-538","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-17.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:083","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_26_rsync.html","source":"cve@mitre.org"},{"url":"http://www.trustix.net/errata/2004/0042/","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10561","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109268147522290&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109277141223839&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://samba.org/rsync/#security_aug04","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-538","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_26_rsync.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.net/errata/2004/0042/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10561","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0793","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file."},{"lang":"es","value":"El programa de calendario en bsdmainutils 6.0 a 6.0.14 cuando se ejecuta con la opción -a, no suelta los privilegios de root, lo que permite a atacantes ejecutar órdenes de su elección mediante un cierto fichero de evento de calendario."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:bsdmainutils:6.0:*:*:*:*:*:*:*","matchCriteriaId":"33F7B97D-4411-4F01-B969-BA06CEBB816E"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:bsdmainutils:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CBB4D25B-CF20-484B-8570-ABA6F2468F91"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:bsdmainutils:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2357F328-0629-46B3-8E70-3C19C7F0DFC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:bsdmainutils:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C008A9A0-C348-42F3-A436-D3B085FDF4D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:bsdmainutils:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0BB1896A-72CC-4E8F-875D-BAA7E2296B49"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:bsdmainutils:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"12224CB6-0A54-432C-B8D4-F51843938C5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:bsdmainutils:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A740E9E8-7401-49A2-B745-CBC89A98E0D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:bsdmainutils:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B5A7B389-6593-4578-B342-313227382F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:bsdmainutils:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"8CF7BB82-1111-4C4A-A899-FD33C8A798A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:bsdmainutils:6.0.9:*:*:*:*:*:*:*","matchCriteriaId":"96C547C1-0363-4B19-9DF8-A3F0BB10F587"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:bsdmainutils:6.0.10:*:*:*:*:*:*:*","matchCriteriaId":"2A9B8C42-9311-4A95-A120-ABC24F4122BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:bsdmainutils:6.0.11:*:*:*:*:*:*:*","matchCriteriaId":"7B069BF2-5E87-47BC-A330-CB12D9DC63CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:bsdmainutils:6.0.12:*:*:*:*:*:*:*","matchCriteriaId":"22EBA80D-1968-4913-90D4-CFDCE888E96D"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:bsdmainutils:6.0.13:*:*:*:*:*:*:*","matchCriteriaId":"1417390C-4C78-4ED1-8FD8-158B1E064103"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:bsdmainutils:6.0.14:*:*:*:*:*:*:*","matchCriteriaId":"FCA90C16-50D9-4368-AE14-00910F5D55C6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109396230317359&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11077","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17162","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109396230317359&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17162","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0794","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple signal handler race conditions in lukemftpd (aka tnftpd before 20040810) allow remote authenticated attackers to cause a denial of service or execute arbitrary code."},{"lang":"es","value":"Mültiples condiciones de carrera en lunkemftpd (también llamado tnftpd antes de 20040810) permite a atacantes remotos autentificados causar una denegación de servicio o ejecutar código de su elección."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:luke_mewburn:lukemftp:1.1:*:*:*:*:*:*:*","matchCriteriaId":"642D1A0A-408D-4030-B4FF-B0790AAAFF0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:luke_mewburn:lukemftp:1.5:*:*:*:*:*:*:*","matchCriteriaId":"066AA8A7-F0B0-48D6-BF76-86FBB71FDCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:luke_mewburn:tnftpd:2003-12-17:*:*:*:*:*:*:*","matchCriteriaId":"B3714378-9F90-4002-9504-E57FF75EFAE6"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-009.txt.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025418.html","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-551","source":"cve@mitre.org"},{"url":"http://www.vuxml.org/freebsd/c4b025bb-f05d-11d8-9837-000c41e2cdad.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17020","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-009.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025418.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vuxml.org/freebsd/c4b025bb-f05d-11d8-9837-000c41e2cdad.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0795","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DB2 8.1 remote command server (DB2RCMD.EXE) executes the db2rcmdc.exe program as the db2admin administrator, which allows local users to gain privileges via the DB2REMOTECMD named pipe."},{"lang":"es","value":"El servidor de órdenes remoto de DB2 8.1 (DB2RCMD.EXE) ejecuta el programa db2rcmdc.exe como el adminstrador db2admin, lo que permite a usuarios locales ganar privilegios mediante la tubería con nombre DB2REMOTECMD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*","matchCriteriaId":"3DC757E1-EC37-48C5-BE72-53184624ACDC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107885081414173&w=2","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IY53894","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.nextgenss.com/advisories/db2rmtcmd.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9821","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15420","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107885081414173&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IY53894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.nextgenss.com/advisories/db2rmtcmd.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0796","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via certain malformed messages."},{"lang":"es","value":"SpamAssasin 2.5x y 2.6x anteriores a 2.64 permiten a atacantes remotos causar una denegación de servicio mediante ciertos mensajes malformados."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:spamassassin:spamassassin:2.40:*:*:*:*:*:*:*","matchCriteriaId":"2353EB59-ECCA-490F-BFCC-87D83C7913B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamassassin:spamassassin:2.41:*:*:*:*:*:*:*","matchCriteriaId":"5728466F-B90F-4CE8-AB48-E858C81EB592"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamassassin:spamassassin:2.42:*:*:*:*:*:*:*","matchCriteriaId":"2DEA0682-7583-447C-A2CC-D9FE7BE5B28E"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamassassin:spamassassin:2.43:*:*:*:*:*:*:*","matchCriteriaId":"7B72B92D-9C69-4A1F-A9D3-A0ECFAD6A985"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamassassin:spamassassin:2.44:*:*:*:*:*:*:*","matchCriteriaId":"18FD98E8-3016-4A3A-91EE-0AA443B7535D"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamassassin:spamassassin:2.50:*:*:*:*:*:*:*","matchCriteriaId":"6E50EDE0-D7C1-4C7F-B51B-F5B7976E1C67"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamassassin:spamassassin:2.55:*:*:*:*:*:*:*","matchCriteriaId":"7BA368C7-6CB2-4BEE-A0C2-CA221F485020"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamassassin:spamassassin:2.60:*:*:*:*:*:*:*","matchCriteriaId":"D08D6CC0-3C3B-47B0-A684-8CD08BAEAEE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:spamassassin:spamassassin:2.63:*:*:*:*:*:*:*","matchCriteriaId":"EA961C0A-3399-40F1-B3D3-E89D81617BA2"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=129337","source":"cve@mitre.org"},{"url":"http://marc.info/?l=spamassassin-announce&m=109168121628767&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200408-06.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:084","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10957","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2268","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16938","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10413","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=129337","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=spamassassin-announce&m=109168121628767&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200408-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10413","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0797","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service (application crash)."},{"lang":"es","value":"El manejo de errores en las funciones (1) inflate y (2) inflateBack de la biblioteca de compresión Zlib 1.2.x permite a usuarios locales causar una denegación de servicio (caída de aplicación)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zlib:zlib:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4C493104-5D6B-417F-BD77-32A4868A3398"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.17/SCOSA-2004.17.txt","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=252253","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000865","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000878","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109353792914900&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11129","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17054","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/18377","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200408-26.xml","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011085","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/238678","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:090","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_29_zlib.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9360","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9361","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11051","source":"cve@mitre.org"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.319160","source":"cve@mitre.org"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2043","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17119","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.17/SCOSA-2004.17.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=252253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000865","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000878","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109353792914900&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/18377","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200408-26.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/238678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_29_zlib.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.319160","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17119","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0798","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary code via a long instancename parameter."},{"lang":"es","value":"Desbordamiento de búfer en el script _maincfgret.cgi de Ipswithc WhatsUp Gold anteriores a 8.03 Hotfix 1 permite a atacantes remotos ejecutar código de su elección mediante un parámetro instancename largo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:progress:whatsup_gold:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A7C10A30-D662-4966-92F5-02D34CE5FC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:whatsup_gold:7.03:*:*:*:*:*:*:*","matchCriteriaId":"091C2AE0-9CED-4DFB-800C-EBB0421A8D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:whatsup_gold:7.04:*:*:*:*:*:*:*","matchCriteriaId":"803BB386-7134-4973-9942-0EDCEFA3B75A"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:whatsup_gold:8.0:*:*:*:*:*:*:*","matchCriteriaId":"82B1C462-0B2F-4A5D-883C-BEFB09F3A9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:whatsup_gold:8.01:*:*:*:*:*:*:*","matchCriteriaId":"216E89A5-6C61-477F-9AB7-655DB59EE7BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:whatsup_gold:8.03:*:*:*:*:*:*:*","matchCriteriaId":"07ACE682-33FF-4DCC-8CE0-E8549228480B"}]}]}],"references":[{"url":"http://www.idefense.com/application/poi/display?type=vulnerabilities","source":"cve@mitre.org"},{"url":"http://www.ipswitch.com/Support/WhatsUp/patch-upgrades.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11043","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17111","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/566/","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ipswitch.com/Support/WhatsUp/patch-upgrades.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/566/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0799","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service (server crash) via a GET request containing an MS-DOS device name, as demonstrated using \"prn.htm\"."},{"lang":"es","value":"El demonio HTTP de Ipswitch WhatsUp Gold 8,03 y 8.03 Hotfix 1 permite a atacantes remotos causar una denegación de servicio (caída del servidor) mediante una petición GET conteniendo un nombre de dispositivo MS-DOS, como se ha demostrado usando \"prn.htm\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:whatsup_gold:8.03_hotfix_1:*:*:*:*:*:*:*","matchCriteriaId":"6289B868-6745-459C-9236-6E07D48C84CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:whatsup_gold:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A7C10A30-D662-4966-92F5-02D34CE5FC45"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:whatsup_gold:7.03:*:*:*:*:*:*:*","matchCriteriaId":"091C2AE0-9CED-4DFB-800C-EBB0421A8D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:whatsup_gold:7.04:*:*:*:*:*:*:*","matchCriteriaId":"803BB386-7134-4973-9942-0EDCEFA3B75A"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:whatsup_gold:8.0:*:*:*:*:*:*:*","matchCriteriaId":"82B1C462-0B2F-4A5D-883C-BEFB09F3A9C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:whatsup_gold:8.01:*:*:*:*:*:*:*","matchCriteriaId":"216E89A5-6C61-477F-9AB7-655DB59EE7BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:whatsup_gold:8.03:*:*:*:*:*:*:*","matchCriteriaId":"07ACE682-33FF-4DCC-8CE0-E8549228480B"}]}]}],"references":[{"url":"http://www.idefense.com/application/poi/display?id=142&type=vulnerabilities","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ipswitch.com/Support/WhatsUp/patch-upgrades.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17418","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=142&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ipswitch.com/Support/WhatsUp/patch-upgrades.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17418","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0800","sourceIdentifier":"cve@mitre.org","published":"2004-08-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in CDE Mailer (dtmail) on Solaris 8 and 9 allows local users to gain privileges via format strings in the argv[0] value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:call_management_system_server:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5E9C378A-2151-45D1-A7EC-1F27E794D878"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:call_management_system_server:11.0:*:*:*:*:*:*:*","matchCriteriaId":"18D3AF16-3591-44FB-B3F8-E92DAA8FA936"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:call_management_system_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"80FF4D54-3E14-42CA-9FC6-2534B3F00903"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:dtmail:*:*:*:*:*:*:*:*","matchCriteriaId":"EDDC7BEF-45C7-441F-AB2F-D3121671BE08"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57627","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-202.shtml","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=132&type=vulnerabilities","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/928598","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11027","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17095","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4030","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57627","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-202.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=132&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/928598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11027","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0801","sourceIdentifier":"cve@mitre.org","published":"2004-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linuxprinting.org:foomatic-filters:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B2642AF2-7F39-4130-8DAE-189CA2B3918B"},{"vulnerable":true,"criteria":"cpe:2.3:a:linuxprinting.org:foomatic-filters:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C984403A-384F-4AFE-825C-F0C9723BC725"},{"vulnerable":true,"criteria":"cpe:2.3:a:linuxprinting.org:foomatic-filters:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CDD50E11-BE32-413A-B987-C8A23D7F61C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:linuxprinting.org:foomatic-filters:3.1:*:*:*:*:*:*:*","matchCriteriaId":"144B2808-54D9-4497-8FF8-EBADF248A672"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_desktop_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5537D6C-7700-4818-93F7-4449049DF131"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_desktop_system:2003:*:*:*:*:*:*:*","matchCriteriaId":"A1587AB3-180E-4734-A0AC-4EE5A93B469A"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F4007B0D-9606-46BD-866A-7911BEA292BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.12/SCOSA-2005.12.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000880","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2006-May/0007.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12557/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20312","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201005-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000757.1-1","source":"cve@mitre.org"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:094","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_31_cups.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11184","source":"cve@mitre.org"},{"url":"http://www.trustix.net/errata/2004/0047/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17388","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.12/SCOSA-2005.12.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2006-May/0007.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12557/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201005-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000757.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:094","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_31_cups.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.net/errata/2004/0047/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17388","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0802","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9:*:*:*:*:*:*:*","matchCriteriaId":"AC774637-8B95-4C69-8665-86A67EAEBB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"9928B65C-A2F3-4D95-9A73-6DE4415463B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"072BDD6E-D815-4996-B78C-42502FB8BE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"AE9D28DB-FFC6-4C7F-89F6-85740B239271"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"988CDE52-220B-489D-9644-94CC5274E678"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"B49B4277-ECFD-4568-94C1-6E02BF238A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"882A873F-D3D3-4E11-9C6B-B45C53672711"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.7:*:*:*:*:*:*:*","matchCriteriaId":"8DA760F0-EFA2-4B4E-BB95-8FD857CD3250"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.8:*:*:*:*:*:*:*","matchCriteriaId":"1C72DEC7-5558-4121-89CE-6E9B382C849E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.9:*:*:*:*:*:*:*","matchCriteriaId":"6880B01C-0804-4CCF-9916-89807BBD4C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.10:*:*:*:*:*:*:*","matchCriteriaId":"1FE16231-4FB4-4D30-BE83-AD400E357280"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.11:*:*:*:*:*:*:*","matchCriteriaId":"27937897-40B1-4D86-AFF0-ACA1B7F7A33E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.12:*:*:*:*:*:*:*","matchCriteriaId":"A533869A-BAF1-4A26-AD33-0C4B6A62AA65"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.13:*:*:*:*:*:*:*","matchCriteriaId":"917A16B8-65F3-4C5D-904E-DD0FBD46A3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.14:*:*:*:*:*:*:*","matchCriteriaId":"89F6F148-15BA-4F07-A7A6-457B54FB234E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E1CF072-E421-4BAA-9B29-421B101171B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"630D2700-3AF2-4F6C-B045-41571B602B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1750F261-8A88-4C9C-A86B-ED1D6F41C408"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7606397B-A6F0-41AA-8DA2-B3ECBC7374EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E5CC4-422F-4E4C-8E4C-8EA3479D759E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3B6EC79E-A937-4781-AF55-35BCB2247C52"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A3DCF542-ABD1-448A-BD6F-F3FB4DB957C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A7F9B2-116C-4AB8-98B0-729D0AB8545E"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"0D83FADC-4C7F-4C16-BBAA-9883D7449744"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B45B5EE8-00FB-46FE-9A26-7468AD30B540"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"6534A963-C0A7-47D6-8E1B-B8D0F3933428"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*","matchCriteriaId":"1FD06A99-7CBF-4593-9EA1-5D1A800D8C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.4.8:*:*:*:*:*:*:*","matchCriteriaId":"8BDC9494-E79B-4497-8413-A44DF326ABB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.4.8.2.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"563F49AC-D60F-4E00-9E0D-7EDAA2FFFCD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.5.3.2.1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDB0628-9BFD-4262-886C-E971EC262134"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.5.6.0_2003-04-09:*:*:*:*:*:*:*","matchCriteriaId":"F4CEEBE6-7CE6-4E1B-8828-EDD64EA3A338"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"193A610A-5E5E-4A87-A501-902100D1C2AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"46F682CD-0117-4770-877F-1F3903BAFE04"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_desktop_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5537D6C-7700-4818-93F7-4449049DF131"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_desktop_system:2003:*:*:*:*:*:*:*","matchCriteriaId":"A1587AB3-180E-4734-A0AC-4EE5A93B469A"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F4007B0D-9606-46BD-866A-7911BEA292BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"052E3862-BFB7-42E7-889D-8590AFA8EF37"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*","matchCriteriaId":"A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*","matchCriteriaId":"409E324A-C040-494F-A026-9DCAE01C07F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*","matchCriteriaId":"6474B775-C893-491F-A074-802AFB1FEDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*","matchCriteriaId":"81B543F9-C209-46C2-B0AE-E14818A6992E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*","matchCriteriaId":"DB89C970-DE94-4E09-A90A-077DB83AD156"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6996B14-925B-46B8-982F-3545328B506B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*","matchCriteriaId":"EC80CF67-C51D-442C-9526-CFEDE84A6304"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*","matchCriteriaId":"84A50ED3-FD0D-4038-B3E7-CC65D166C968"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*","matchCriteriaId":"777F9EC0-2919-45CA-BFF8-78A02537C513"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*","matchCriteriaId":"37F124FE-15F1-49D7-9E03-8E036CE1A20C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_desktop:10.0:*:*:*:*:*:*:*","matchCriteriaId":"31C3FFDD-03BF-4FD4-B7A7-B62AFD5DBA19"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"839D2945-1417-43F5-A526-A14C491CBCEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_server:8.0:*:*:*:*:*:*:*","matchCriteriaId":"E06DCF0D-3241-453A-A0E4-937FE25EC404"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"EA8F79B3-2FBD-4CF1-B202-AB302C5F9CC2"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_workstation:8.0:*:*:*:*:*:*:*","matchCriteriaId":"9428589A-0BD2-469E-978D-38239117D972"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*","matchCriteriaId":"6E94583A-5184-462E-9FC4-57B35DA06DA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*","matchCriteriaId":"E905FAAD-37B6-4DD0-A752-2974F8336273"}]}]}],"references":[{"url":"http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/libs/imlib2/ChangeLog?rev=1.20&view=markup","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:089","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11084","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vuxml.org/freebsd/ba005226-fb5b-11d8-9837-000c41e2cdad.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17183","source":"cve@mitre.org"},{"url":"http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/libs/imlib2/ChangeLog?rev=1.20&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vuxml.org/freebsd/ba005226-fb5b-11d8-9837-000c41e2cdad.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17183","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0803","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files."},{"lang":"es","value":"Múltiples vulnerabilidades en los decodificadores RLE (run length encoding) de libtiff 3.6.1 y anteriores, relacionadas con desbordamientos de enteros y de búfer, permite a atacantes remotos ejecutar código arbitrario mediante ficheros TIFF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*","matchCriteriaId":"CCA5EEB8-9D2C-49A9-BB08-CE5017B79D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"261FAE51-5207-4136-9FFE-2330A281266C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B32C83B9-F7DA-450A-A687-9A73734CD712"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"9485283A-B73E-4567-914A-42A86F5FFCB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"95892168-0FB6-4E3F-9303-2F9B3CF60D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"A5021564-5E0A-4DDC-BC68-200B6050043E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*","matchCriteriaId":"19AA66E5-FDDD-4243-B945-DFEBDD25F258"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"62F359CD-5DC4-4919-B8E1-95BDDBD27EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D2C8C550-3313-4266-B4B3-E9E9047CFE04"},{"vulnerable":true,"criteria":"cpe:2.3:a:pdflib:pdf_library:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E0A70D7A-D552-49A4-9E6F-B014BF195D6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wxgtk2:wxgtk2:2.5_.0:*:*:*:*:*:*:*","matchCriteriaId":"B2814035-2888-43B9-B597-2CBF17C56FD5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.2:*:*:*:*:*:*:*","matchCriteriaId":"82F69843-978D-4686-BC5B-1D09DA4A21BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"ACEE0AED-7918-41E9-A902-AC4070E03132"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"81E19472-47B4-4398-A188-CA5A5D3E7060"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D17407A2-089E-43A5-9BD5-EFF966F5CC16"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.3:*:*:*:*:*:*:*","matchCriteriaId":"9C4B436D-8D6A-473E-B707-26147208808B"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1E26B353-4985-4116-B97A-5767CDC732F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*","matchCriteriaId":"A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*","matchCriteriaId":"409E324A-C040-494F-A026-9DCAE01C07F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*","matchCriteriaId":"6474B775-C893-491F-A074-802AFB1FEDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*","matchCriteriaId":"81B543F9-C209-46C2-B0AE-E14818A6992E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*","matchCriteriaId":"DB89C970-DE94-4E09-A90A-077DB83AD156"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6996B14-925B-46B8-982F-3545328B506B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*","matchCriteriaId":"84A50ED3-FD0D-4038-B3E7-CC65D166C968"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*","matchCriteriaId":"777F9EC0-2919-45CA-BFF8-78A02537C513"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*","matchCriteriaId":"C7EAAD04-D7C4-43DE-B488-1AAD014B503E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D2E2EF3C-1379-4CBE-8FF5-DACD47834651"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"F7446746-87B7-4BD3-AABF-1E0FAA8265AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:1.5:*:*:*:*:*:*:*","matchCriteriaId":"39605B96-BAD6-45C9-BB9A-43D6E2C51ADD"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000888","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109778785107450&w=2","source":"cve@mitre.org"},{"url":"http://scary.beasts.org/security/CESA-2004-006.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12818","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-567","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-11.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/948752","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kde.org/info/security/advisory-20041209-2.txt","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:109","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:052","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_38_libtiff.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-577.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-021.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-354.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11406","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17703","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100114","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8896","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000888","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109778785107450&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://scary.beasts.org/security/CESA-2004-006.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/948752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kde.org/info/security/advisory-20041209-2.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_38_libtiff.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-577.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-354.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8896","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0804","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vulnerability in tif_dirread.c for libtiff allows remote attackers to cause a denial of service (application crash) via a TIFF image that causes a divide-by-zero error when the number of row bytes is zero, a different vulnerability than CVE-2005-2452."},{"lang":"es","value":"Vulnerabilidad en tif_dirread.c de libtiff permite a atacantes remotos causar una denegación de servicio (caída de aplicación) mediante una imagen TIFF que produce un error de división por cero cuando el número de bytes de filas es cero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-369"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:*:*:*:*:*:*:*:*","versionEndExcluding":"3.7.0","matchCriteriaId":"806EE348-DDDA-45B0-8F2D-DDD687C1D979"}]}]}],"references":[{"url":"http://bugzilla.remotesensing.org/show_bug.cgi?id=111","source":"cve@mitre.org","tags":["Issue Tracking"]},{"url":"http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000888","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-567","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/555304","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kde.org/info/security/advisory-20041209-2.txt","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:109","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:052","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2004_38_libtiff.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-577.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-021.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-354.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17755","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100115","source":"cve@mitre.org","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11711","source":"cve@mitre.org","tags":["Tool Signature"]},{"url":"http://bugzilla.remotesensing.org/show_bug.cgi?id=111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/555304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kde.org/info/security/advisory-20041209-2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2004_38_libtiff.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-577.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-021.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-354.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]}]}},{"cve":{"id":"CVE-2004-0805","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp3 or (2) mp2 file."},{"lang":"es","value":"Desbordamiento de búfer en layer2.c en mpg123 0.59r y posiblemente en mpg123 0.59s permite a atacantes remotos ejecutar código arbitrario mediante ciertos ficheros mp3 o mp2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mpg123:mpg123:0.59r:*:*:*:*:*:*:*","matchCriteriaId":"1F8EEF7E-C6BB-4669-81D2-68AABF8A7686"},{"vulnerable":true,"criteria":"cpe:2.3:a:mpg123:mpg123:0.59s:*:*:*:*:*:*:*","matchCriteriaId":"1144518D-4069-4903-9B45-56C0E97BC992"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"052E3862-BFB7-42E7-889D-8590AFA8EF37"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026151.html","source":"cve@mitre.org"},{"url":"http://www.alighieri.org/advisories/advisory-mpg123.txt","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-564","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-20.xml","source":"cve@mitre.org"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:100","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/374433","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11121","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17287","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026151.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.alighieri.org/advisories/advisory-mpg123.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/374433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17287","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0806","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  cdrecord is not shipped setuid and does not need to be made setuid with Red Hat Enterprise Linux 2.1, 3, or 4 packages.","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cdrtools:cdrecord:1.11:*:*:*:*:*:*:*","matchCriteriaId":"27D890BB-C4B0-43FA-9505-0196578F1B9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cdrtools:cdrecord:2.0:*:*:*:*:*:*:*","matchCriteriaId":"01E51568-FB38-4D00-8DF4-83E6ECD33A6D"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/bugtraq/2004/Sep/0097.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12481/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/19532","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011091","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-09/0108.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/700326","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:091","source":"cve@mitre.org"},{"url":"http://www.securityfocus.org/bid/11075","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2058","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17303","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9805","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/lists/bugtraq/2004/Sep/0097.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12481/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/19532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-09/0108.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/700326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:091","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.org/bid/11075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9805","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0807","sourceIdentifier":"cve@mitre.org","published":"2004-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F84FB25B-5EA5-48DC-B528-E8CCF714C919"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"216145B7-4716-42F7-90DC-03884ECB2271"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"898968E5-577E-4B86-A804-EBEC67157A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"920EF846-41D1-429D-AF0F-3D7950F93069"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8016DC4F-F410-4401-BDCC-91BE0D44D028"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DC94A2CF-85DF-4BB5-8F78-470A3454C3CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:*","matchCriteriaId":"632D2489-3B5E-466E-A6DF-1EF00303869B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9FC116E5-B739-4E18-AA51-FFF59EBCA08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D40F682-9F2E-465F-98F7-23E1036C74A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:samba:3.0:*:irix:*:*:*:*:*","matchCriteriaId":"F23093A1-6B11-4116-99C9-A5C6FA4A4B58"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:samba:3.0.1:*:irix:*:*:*:*:*","matchCriteriaId":"3183B6F2-C3EB-4C9D-8489-DA1159480992"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:samba:3.0.2:*:irix:*:*:*:*:*","matchCriteriaId":"051BA8CA-86BD-45BF-93D6-D85E8FB5D46F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:samba:3.0.3:*:irix:*:*:*:*:*","matchCriteriaId":"630FE403-9714-4949-9419-40F748638657"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:samba:3.0.4:*:irix:*:*:*:*:*","matchCriteriaId":"17EE6A8B-6C32-40B4-81F7-070A51178D32"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:samba:3.0.5:*:irix:*:*:*:*:*","matchCriteriaId":"9080B59D-3E86-4731-9453-EF1E27451245"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:samba:3.0.6:*:irix:*:*:*:*:*","matchCriteriaId":"C69C662B-E08D-44BD-9793-8304426F071F"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F4007B0D-9606-46BD-866A-7911BEA292BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D2E2EF3C-1379-4CBE-8FF5-DACD47834651"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"F7446746-87B7-4BD3-AABF-1E0FAA8265AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109509335230495&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109526231623307&w=2","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-16.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=139&type=vulnerabilities","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:092","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-467.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.net/errata/2004/0046/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11141","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109509335230495&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109526231623307&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=139&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-467.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.net/errata/2004/0046/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11141","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0808","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAM_UAS_CHANGE request with a length value that is larger than the number of structures that are provided."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F84FB25B-5EA5-48DC-B528-E8CCF714C919"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"216145B7-4716-42F7-90DC-03884ECB2271"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"898968E5-577E-4B86-A804-EBEC67157A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"920EF846-41D1-429D-AF0F-3D7950F93069"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8016DC4F-F410-4401-BDCC-91BE0D44D028"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DC94A2CF-85DF-4BB5-8F78-470A3454C3CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:*","matchCriteriaId":"632D2489-3B5E-466E-A6DF-1EF00303869B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9FC116E5-B739-4E18-AA51-FFF59EBCA08F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"3D40F682-9F2E-465F-98F7-23E1036C74A2"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=109509335230495&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109526231623307&w=2","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-16.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=138&type=vulnerabilities","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:092","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-467.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.net/errata/2004/0046/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10344","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=109509335230495&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109526231623307&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=138&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:092","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-467.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.net/errata/2004/0046/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10344","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0809","sourceIdentifier":"cve@mitre.org","published":"2004-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.51:\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionStartIncluding":"2.0.35","versionEndExcluding":"2.0.51","matchCriteriaId":"A5A9EAAF-A5F4-493E-9530-8A448E55CDCC"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_server_for_tru64:4.0_f:*:*:*:*:*:*:*","matchCriteriaId":"A1B94CBB-96FC-40CE-AAAD-A5EC909C4BDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_server_for_tru64:4.0_g:*:*:*:*:*:*:*","matchCriteriaId":"3FFEAF35-AFD1-45D5-AA22-721683125151"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_server_for_tru64:5.0_a:*:*:*:*:*:*:*","matchCriteriaId":"052263D4-3D40-4205-AD46-2DA09FF7BDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_server_for_tru64:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E1B80DFA-523E-415D-903E-8DFB6A511487"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_server_for_tru64:5.1_a:*:*:*:*:*:*:*","matchCriteriaId":"D87F4AEB-8A5D-4468-85DC-D353CD5F7BBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_server_for_tru64:5.8.1:*:*:*:*:*:*:*","matchCriteriaId":"306AD5DC-3815-4281-8CC7-79817AA8C437"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_server_for_tru64:5.8.2:*:*:*:*:*:*:*","matchCriteriaId":"1DABC6BF-F17C-49A2-87CB-136A235899B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_server_for_tru64:5.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFF5CC55-CC68-4649-8439-31CB90D863EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_server_for_tru64:5.9.2:*:*:*:*:*:*:*","matchCriteriaId":"3F26601F-5146-492F-A5A3-A8E3C7F5EF00"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:secure_web_server_for_tru64:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"D3673637-53BE-4AFF-AE0D-31C427CB3C5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*","matchCriteriaId":"D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A67735E5-E43E-4164-BDB2-ADC6E0288E9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_desktop:10.0:*:*:*:*:*:*:*","matchCriteriaId":"31C3FFDD-03BF-4FD4-B7A7-B62AFD5DBA19"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_home:*:*:*:*:*:*:*:*","matchCriteriaId":"065FF0F1-7FAC-4584-92EA-EAA87DC76FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"B484D091-62DE-4EF2-AC54-26896CA8B315"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/dav/fs/lock.c?r1=1.32&r2=1.33","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-558","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-463.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2004/0047/","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17366","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9588","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/dav/fs/lock.c?r1=1.32&r2=1.33","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-558","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-463.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2004/0047/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-0810","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service (server process crash) via a certain data string that is sent to multiple simultaneous client connections to TCP port 407."},{"lang":"es","value":"Desbordamiento de búfer en Netopia Timbuktu 7.0.3 permite a atacantes remotos causar una denegación de servicio (caída del proceso servidor) mediante una cierta cadena de datos que es enviada a múltiples conexiones de clientes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netopia:timbuktu_pro_mac:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"73493FAC-E07E-43C4-A355-CC5C0912EE16"}]}]}],"references":[{"url":"http://msgs.securepoint.com/cgi-bin/get/bugtraq0411/218.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/13250/","source":"cve@mitre.org"},{"url":"http://www.corsaire.com/advisories/c040720-001.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11714","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.uniras.gov.uk/vuls/2004/190204/index.htm","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18172","source":"cve@mitre.org"},{"url":"http://msgs.securepoint.com/cgi-bin/get/bugtraq0411/218.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/13250/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.corsaire.com/advisories/c040720-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.uniras.gov.uk/vuls/2004/190204/index.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18172","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0811","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Apache 2.0.51 prevents \"the merging of the Satisfy directive,\" which could allow attackers to obtain access to restricted resources contrary to the specified authentication configuration."}],"vendorComments":[{"organization":"Red Hat","comment":"Not Vulnerable.  This issue only affected Apache 2.0.51, which was not shipped in any version of Red Hat Enterprise Linux.","lastModified":"2006-08-31T00:00:00.000"},{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.52:\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.51:*:*:*:*:*:*:*","matchCriteriaId":"6B5AC769-D07D-43C7-B252-A5A812E7D58C"}]}]}],"references":[{"url":"http://fedoranews.org/updates/FEDORA-2004-313.shtml","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200409-33.xml","source":"cve@mitre.org"},{"url":"http://www.apache.org/dist/httpd/patches/apply_to_2.0.51/CAN-2004-0811.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.apacheweek.com/features/security-20","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11239","source":"cve@mitre.org"},{"url":"http://www.trustix.org/errata/2004/0049","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17473","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"http://fedoranews.org/updates/FEDORA-2004-313.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200409-33.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apache.org/dist/httpd/patches/apply_to_2.0.51/CAN-2004-0811.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.apacheweek.com/features/security-20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11239","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.org/errata/2004/0049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17473","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0813","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ide-cd:ide-cd:*:*:*:*:*:*:*:*","matchCriteriaId":"020C1079-D495-4781-BE26-6F2C3C9A71F8"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html","source":"cve@mitre.org"},{"url":"http://lkml.org/lkml/2004/7/30/147","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25631","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25894","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/26909","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/27706","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200711-23.xml","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0465.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/25749","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/3229","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17505","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10011","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lkml.org/lkml/2004/7/30/147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/27706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200711-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2007-0465.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/25749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/3229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0814","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of service (panic) by switching from console to PPP line discipline, then quickly sending data that is received during the switch."},{"lang":"es","value":"Múltiples condiciones de carrera en la capa de terminal de Linux kernel 2.4.x y 2.6.x anteriores a 2.6.9 permiten a \r\n usuarios locales obtener porciones de datos del kernel mediante una llamada ioctl TIOCSETD a una interfaz de terminal que esté siendo accedida por otro hilo, o a \r\n atacantes remotos causar una denegación de servicio (panic) cambiando de consola a disciplina de línea PPP, y enviando entonces inmediatamente datos que son recibidos durante la conmutación."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"146F7A77-A950-4CAD-BDA9-C239696F569D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AD7A6B55-2F3B-422E-B1F2-80B482FE89AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"70DCE8FF-40C3-44F7-8185-0422ADDA051B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7DAC3A7C-2092-46D4-908B-CF03F4217112"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"5A6F3945-21ED-44C6-86D2-B7755A87014E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"C4919EB3-625C-4D83-8DCB-72BCF05DF2C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"A5DDB008-E88E-473C-B030-AF9B6F5E4E48"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"AA3D3E03-0ABE-4325-AD67-BA8EA16B6DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"0E48C9A9-B7E6-4314-BCEF-8013BBB4276E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"0EEF4480-D50B-464C-AE39-A12455DBC99F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.13:*:*:*:*:*:*:*","matchCriteriaId":"6BBFD0DB-0A18-4545-9B4B-697AAC11E9C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.14:*:*:*:*:*:*:*","matchCriteriaId":"15928E10-7D41-45B2-87D6-8AA10190A8EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:*:*:*:*:*:*:*","matchCriteriaId":"C18E13C4-F42D-4168-B25E-544E1549C46B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15:pre16:*:*:*:*:*:*","matchCriteriaId":"1C4B2ABB-0283-4532-9E29-B37BFF5FDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.15_pre20:*:*:*:*:*:*:*","matchCriteriaId":"C4DADA29-DCD3-44C4-9BDB-B881D6FCE3A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:*:*:*:*:*:*:*","matchCriteriaId":"F0DB9B7C-3608-44E3-AE47-D231D1F7B8EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.16:pre6:*:*:*:*:*:*","matchCriteriaId":"4BD794C6-11F5-4A2B-9A3C-E03069A1526B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.17:*:*:*:*:*:*:*","matchCriteriaId":"C4947CDE-CB89-456B-8B5F-0E17B46BC893"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.18:*:*:*:*:*:*:*","matchCriteriaId":"6ECB42B3-70C6-4019-8B8B-8EB7A84B39AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.19:*:*:*:*:*:*:*","matchCriteriaId":"BF701E58-35E8-4DDE-B832-C5A23E61A3CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.20:*:*:*:*:*:*:*","matchCriteriaId":"3C122CC4-B8CB-4AB9-8571-6F3D302F56A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.21:*:*:*:*:*:*:*","matchCriteriaId":"2498D898-D243-4D0C-9AEF-0138D19A68B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.22:*:*:*:*:*:*:*","matchCriteriaId":"3924060B-1EC1-4003-B306-E327634E7797"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.23:*:*:*:*:*:*:*","matchCriteriaId":"D45B43DF-FD4C-4C37-9569-1CCE450B8987"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.24:*:*:*:*:*:*:*","matchCriteriaId":"99879B2B-7FFB-4181-8928-13B7E17F36C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.2.25:*:*:*:*:*:*:*","matchCriteriaId":"83A3E250-5BC6-4AD3-A3DE-7F876FD90BE5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*","matchCriteriaId":"C5FE15BF-91C7-452A-BE1B-7EC9632421C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*","matchCriteriaId":"15C1923C-D9C4-400D-9F0F-20B519EEC9C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*","matchCriteriaId":"E51913F9-FC7D-450A-9A82-5084AA74A5B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*","matchCriteriaId":"B62E02D5-9EEE-439B-A510-BEEE28A9F358"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*","matchCriteriaId":"02278C07-E649-427D-9E5C-F1738A01BCBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A0934C49-5F88-4189-BD88-2F32C39C2F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*","matchCriteriaId":"14B0A230-4054-4483-A3A7-9A5A286C7552"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*","matchCriteriaId":"F90242EF-048B-4539-AA41-87AA84875A9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*","matchCriteriaId":"3C4E9325-2A70-4E15-9AAF-5588BF218055"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*","matchCriteriaId":"01402A85-B681-4DE0-B7BB-F52567DA29E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*","matchCriteriaId":"6E94583A-5184-462E-9FC4-57B35DA06DA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*","matchCriteriaId":"E905FAAD-37B6-4DD0-A752-2974F8336273"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=131672","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=133110","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110306397320336&w=2","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:022","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-293.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/379005","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11491","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11492","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2336","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17816","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10728","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=131672","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=133110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110306397320336&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-293.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/379005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10728","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0815","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via \"/.////\" style sequences in pathnames."},{"lang":"es","value":"La función unix_clena_name en Samba 2.2.x a 2.2.11, y 3.0.x anterirores a 3.0.2a, recorta ciertos nombres de directorio a sus rutas absolutas, lo que podría permitir a atacantes evitar la restricticiones de espeficadas de lectura, ejecución y listado de carpetas compartidas mediante secuencias del estilo \"/.////\" en rutas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"65AC9643-E1A5-4013-9607-17C6CC7CC63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.0a:*:*:*:*:*:*:*","matchCriteriaId":"090E2541-2DBA-41CB-A792-9E703C797949"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.1a:*:*:*:*:*:*:*","matchCriteriaId":"19F65FF3-71F8-4278-A823-A6E0FF65D9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8C71CB60-2689-4A4A-9509-E2F3135E6491"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0129E404-3AE8-4F0E-89CB-7F2FA5B47011"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.3a:*:*:*:*:*:*:*","matchCriteriaId":"614547F5-9C3F-489B-9B72-91B0FF646CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A052141C-874D-4ED0-99FB-D7468FACFC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9739EA65-9FA8-425E-B355-E690773D5B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"3B618F94-DAC2-4A97-9F7F-8BCEA3199769"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"EEE7C057-B024-4417-B572-5D396366620E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.7a:*:*:*:*:*:*:*","matchCriteriaId":"34DC3500-F8F0-46E1-B0AA-C2474CCB3DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"CFCD334C-FB95-41A6-8F4C-FCC4E70CE930"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.8a:*:*:*:*:*:*:*","matchCriteriaId":"75C86202-3150-440C-B048-BB039E9D3606"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"98CAF474-0C3A-4E49-8CF8-9DF14D84CDCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"C92304DE-CFBB-4C03-AA7F-54DB3C14ECF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2a:*:*:*:*:*:*:*","matchCriteriaId":"CC2AE5A9-62C5-4DCE-85B3-16F48695B3B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F84FB25B-5EA5-48DC-B528-E8CCF714C919"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"216145B7-4716-42F7-90DC-03884ECB2271"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"898968E5-577E-4B86-A804-EBEC67157A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"920EF846-41D1-429D-AF0F-3D7950F93069"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109655827913457&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1","source":"cve@mitre.org"},{"url":"http://us4.samba.org/samba/news/#security_2.2.12","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-600","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=146&type=vulnerabilities&flashstatus=true","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_35_samba.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-498.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/377618","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11281","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0051/","source":"cve@mitre.org"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2102","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17556","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109655827913457&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101584-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57664-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200529-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://us4.samba.org/samba/news/#security_2.2.12","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=146&type=vulnerabilities&flashstatus=true","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_35_samba.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-498.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/377618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0051/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17556","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0816","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP packet."},{"lang":"es","value":"Vaciamiento de enteros en las reglas de registro del cortafuegos de iptables en Linux anteriores a 2.6.8 permite a atacantes remotos causar una denegación de servicio (caída de aplicación) mediante un paquete IP malformado."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-191"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"2.6.8","matchCriteriaId":"B83B7802-ED98-4D90-9EFB-74FB7BC18B2A"}]}]}],"references":[{"url":"http://secunia.com/advisories/11202/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:022","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2004_37_kernel.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/11488","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17800","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/11202/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.novell.com/linux/security/advisories/2004_37_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/11488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0817","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9:*:*:*:*:*:*:*","matchCriteriaId":"AC774637-8B95-4C69-8665-86A67EAEBB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"9928B65C-A2F3-4D95-9A73-6DE4415463B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"072BDD6E-D815-4996-B78C-42502FB8BE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"AE9D28DB-FFC6-4C7F-89F6-85740B239271"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"988CDE52-220B-489D-9644-94CC5274E678"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"B49B4277-ECFD-4568-94C1-6E02BF238A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"882A873F-D3D3-4E11-9C6B-B45C53672711"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.7:*:*:*:*:*:*:*","matchCriteriaId":"8DA760F0-EFA2-4B4E-BB95-8FD857CD3250"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.8:*:*:*:*:*:*:*","matchCriteriaId":"1C72DEC7-5558-4121-89CE-6E9B382C849E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.9:*:*:*:*:*:*:*","matchCriteriaId":"6880B01C-0804-4CCF-9916-89807BBD4C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.10:*:*:*:*:*:*:*","matchCriteriaId":"1FE16231-4FB4-4D30-BE83-AD400E357280"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.11:*:*:*:*:*:*:*","matchCriteriaId":"27937897-40B1-4D86-AFF0-ACA1B7F7A33E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.12:*:*:*:*:*:*:*","matchCriteriaId":"A533869A-BAF1-4A26-AD33-0C4B6A62AA65"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.13:*:*:*:*:*:*:*","matchCriteriaId":"917A16B8-65F3-4C5D-904E-DD0FBD46A3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.14:*:*:*:*:*:*:*","matchCriteriaId":"89F6F148-15BA-4F07-A7A6-457B54FB234E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E1CF072-E421-4BAA-9B29-421B101171B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"630D2700-3AF2-4F6C-B045-41571B602B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1750F261-8A88-4C9C-A86B-ED1D6F41C408"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7606397B-A6F0-41AA-8DA2-B3ECBC7374EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E5CC4-422F-4E4C-8E4C-8EA3479D759E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3B6EC79E-A937-4781-AF55-35BCB2247C52"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A3DCF542-ABD1-448A-BD6F-F3FB4DB957C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A7F9B2-116C-4AB8-98B0-729D0AB8545E"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"0D83FADC-4C7F-4C16-BBAA-9883D7449744"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B45B5EE8-00FB-46FE-9A26-7468AD30B540"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"6534A963-C0A7-47D6-8E1B-B8D0F3933428"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*","matchCriteriaId":"1FD06A99-7CBF-4593-9EA1-5D1A800D8C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.4.8:*:*:*:*:*:*:*","matchCriteriaId":"8BDC9494-E79B-4497-8413-A44DF326ABB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.4.8.2.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"563F49AC-D60F-4E00-9E0D-7EDAA2FFFCD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.5.3.2.1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDB0628-9BFD-4262-886C-E971EC262134"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.5.6.0_2003-04-09:*:*:*:*:*:*:*","matchCriteriaId":"F4CEEBE6-7CE6-4E1B-8828-EDD64EA3A338"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"193A610A-5E5E-4A87-A501-902100D1C2AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"46F682CD-0117-4770-877F-1F3903BAFE04"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_desktop_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5537D6C-7700-4818-93F7-4449049DF131"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_desktop_system:2003:*:*:*:*:*:*:*","matchCriteriaId":"A1587AB3-180E-4734-A0AC-4EE5A93B469A"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F4007B0D-9606-46BD-866A-7911BEA292BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"052E3862-BFB7-42E7-889D-8590AFA8EF37"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*","matchCriteriaId":"A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*","matchCriteriaId":"409E324A-C040-494F-A026-9DCAE01C07F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*","matchCriteriaId":"6474B775-C893-491F-A074-802AFB1FEDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*","matchCriteriaId":"81B543F9-C209-46C2-B0AE-E14818A6992E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*","matchCriteriaId":"DB89C970-DE94-4E09-A90A-077DB83AD156"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6996B14-925B-46B8-982F-3545328B506B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*","matchCriteriaId":"EC80CF67-C51D-442C-9526-CFEDE84A6304"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*","matchCriteriaId":"84A50ED3-FD0D-4038-B3E7-CC65D166C968"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*","matchCriteriaId":"777F9EC0-2919-45CA-BFF8-78A02537C513"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*","matchCriteriaId":"37F124FE-15F1-49D7-9E03-8E036CE1A20C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_desktop:10.0:*:*:*:*:*:*:*","matchCriteriaId":"31C3FFDD-03BF-4FD4-B7A7-B62AFD5DBA19"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"839D2945-1417-43F5-A526-A14C491CBCEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_server:8.0:*:*:*:*:*:*:*","matchCriteriaId":"E06DCF0D-3241-453A-A0E4-937FE25EC404"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"EA8F79B3-2FBD-4CF1-B202-AB302C5F9CC2"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_workstation:8.0:*:*:*:*:*:*:*","matchCriteriaId":"9428589A-0BD2-469E-978D-38239117D972"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*","matchCriteriaId":"6E94583A-5184-462E-9FC4-57B35DA06DA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*","matchCriteriaId":"E905FAAD-37B6-4DD0-A752-2974F8336273"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-548","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:089","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-465.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11084","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17182","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8843","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-465.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8843","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0819","sourceIdentifier":"cve@mitre.org","published":"2004-08-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause a denial of service (crash) via an ICMP echo (ping) packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1957B3C0-7F25-469B-BC3F-7B09260837ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109345131508824&w=2","source":"cve@mitre.org"},{"url":"http://openbsd.org/errata34.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17129","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109345131508824&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://openbsd.org/errata34.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17129","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0820","sourceIdentifier":"cve@mitre.org","published":"2004-08-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C2787A5F-5B74-4691-A2AD-BA5038D14784"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.5e:*:*:*:*:*:*:*","matchCriteriaId":"BB5217B6-B543-4F2C-89DF-CE986AE0BADF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.10:*:*:*:*:*:*:*","matchCriteriaId":"6E0581F9-9B99-43F6-852E-BD28BB47B169"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.24:*:*:*:*:*:*:*","matchCriteriaId":"95EA0F31-8818-434C-9965-78764D00F148"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.50:*:*:*:*:*:*:*","matchCriteriaId":"1C999742-75BD-463F-865F-93662B17330F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:full:*:*:*:*:*","matchCriteriaId":"30C29FDB-A37E-4126-BE1B-DB32F38DC75F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.60:*:lite:*:*:*:*:*","matchCriteriaId":"E7254BFD-8301-4E99-AB73-7D1D9E7939FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.61:*:full:*:*:*:*:*","matchCriteriaId":"27826A30-3E5C-4B7D-B86B-8B0A68D2F944"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.62:*:standard:*:*:*:*:*","matchCriteriaId":"665C2A54-AF79-4315-BFEF-FA44E015B9C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.64:*:*:*:*:*:*:*","matchCriteriaId":"E8AE4866-33D1-4596-BA42-E70ABD0CDC6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.64:*:standard:*:*:*:*:*","matchCriteriaId":"0DB02A8B-71ED-4FBF-9D01-D16F1351E702"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.65:*:*:*:*:*:*:*","matchCriteriaId":"6D708182-E39F-44E4-9C67-52A85ACBA43C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:*:*:*:*:*:*","matchCriteriaId":"053A71B1-EF83-4750-ACCD-7ABEFF593BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.70:*:full:*:*:*:*:*","matchCriteriaId":"F07CC71D-A616-483B-ABCB-AA6DDCE3531F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.71:*:*:*:*:*:*:*","matchCriteriaId":"0C5286A1-C8ED-4783-9278-D30D9B1C588A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.72:*:*:*:*:*:*:*","matchCriteriaId":"3513F3C2-CDD6-461C-985E-E06151AEA804"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:*:*:*:*:*:*","matchCriteriaId":"DC6CB5C4-0FEC-4F85-B874-E06229265457"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.73:*:full:*:*:*:*:*","matchCriteriaId":"C700DFBF-9B22-4633-947C-840CF01423C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.74:*:*:*:*:*:*:*","matchCriteriaId":"AD6E478F-D058-482B-B027-605B7A769900"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.75:*:*:*:*:*:*:*","matchCriteriaId":"B9D8698A-B1AE-4041-9055-B6690F671E42"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.76:*:*:*:*:*:*:*","matchCriteriaId":"E2CC66AF-0CB8-4E15-98A3-4704CB2AD78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.77:*:*:*:*:*:*:*","matchCriteriaId":"5E36F70C-F578-425E-A97F-1BD196F7F08B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.78:*:*:*:*:*:*:*","matchCriteriaId":"AEDAD5F1-5B42-40ED-919C-65343567261C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.79:*:*:*:*:*:*:*","matchCriteriaId":"BAC79237-791C-4830-BC81-D534FA537D53"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.80:*:*:*:*:*:*:*","matchCriteriaId":"E1AFA764-16B4-4E5E-8F9C-46098E758CC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.81:*:*:*:*:*:*:*","matchCriteriaId":"14F260E7-5145-4FDC-9759-67EA27CEFC5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:*","matchCriteriaId":"2CEA7967-D737-4B46-9382-A391DF832219"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF89B4A2-37A6-4702-A057-7B70C6157A3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:*","matchCriteriaId":"19C64AF2-CF9D-4052-85E9-BAFF713382F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.01:*:*:*:*:*:*:*","matchCriteriaId":"828226F9-29AA-437F-8385-B75A6F4F3B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.02:*:*:*:*:*:*:*","matchCriteriaId":"BAD7DE0D-1018-4E04-A771-B2C619E95C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.03:*:*:*:*:*:*:*","matchCriteriaId":"35D38D15-3588-49E4-9396-11DB96FBD448"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.04:*:*:*:*:*:*:*","matchCriteriaId":"ED120987-6F27-4D8E-95DF-E19EBCB0B8D6"}]}]}],"references":[{"url":"http://secunia.com/advisories/12381/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4338","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.frsirt.com/exploits/08252004.skinhead.php","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17124","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12381/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.frsirt.com/exploits/08252004.skinhead.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17124","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0821","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CFPlugIn in Core Foundation framework in Mac OS X allows user supplied libraries to be loaded, which could allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"}]}]}],"references":[{"url":"http://secunia.com/advisories/12491/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4363","source":"cve@mitre.org"},{"url":"http://www.auscert.org.au/render.html?it=4363","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-212.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/704110","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11135","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17291","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12491/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.auscert.org.au/render.html?it=4363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-212.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/704110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17291","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0822","sourceIdentifier":"cve@mitre.org","published":"2004-09-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbitrary code via a certain environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"}]}]}],"references":[{"url":"http://secunia.com/advisories/12491/","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-212.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/545446","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/7148","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11136","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17295","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12491/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-212.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/545446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/7148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17295","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0823","sourceIdentifier":"cve@mitre.org","published":"2004-09-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.0:*:*:*:*:*:*:*","matchCriteriaId":"086DC60F-F530-4515-8F3D-87F30DB9B322"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1D538927-82D5-476E-9C85-2E9297316D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2A904832-A6D6-45D4-B07C-79ED1FE47A80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1BB554A4-EEC2-4E17-9F32-27A580B9E389"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.1:*:*:*:*:*:*:*","matchCriteriaId":"191DB249-6A73-4561-8CCA-565D1525CB31"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"34A5D9A5-FB1D-4ACF-846A-4DB73196122C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"41400CE6-FA51-435C-93F7-B31FE42F18AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6022ABEB-6825-4A5F-9884-74F94C2387F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D2F15789-334D-460D-B5B3-FCC71087D107"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2:*:*:*:*:*:*:*","matchCriteriaId":"F77B1548-BB6D-4618-AE7B-E97F91A0AF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B7064C52-1211-42B8-BF1F-C22D800AED07"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1CD95826-E44A-48C6-BAAB-77A905CAE6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"FEEA6BB6-41FC-4F15-A95F-9B052F062454"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E90766C1-6DBD-435C-85E1-920DAFA26D67"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"8CD13DAE-9588-4540-9183-FB80C507F985"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"526366F3-52F0-4816-A356-8F39B718C048"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"AC07AD0D-5DF9-41A4-8592-CEFF1842355D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"30017C56-42A9-4AF9-B5B3-7357E424F837"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"C8A51F38-3F5A-4F6D-93EE-776B5C2FF48F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"8DBEC27E-3220-42CE-B6CC-675F387CB506"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E641DFFB-CBAF-4DCF-944F-443CFF836A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A552E270-5C9C-40DC-B23D-97C8D995B8FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"53DF812C-E1F8-46D3-A072-3FBE696ADC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0:*:*:*:*:*:*:*","matchCriteriaId":"552F2E25-DDB8-49A6-844A-8520696DBE5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"03D75A36-41C4-464F-8DC4-42C841ABC087"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C3EE919-D05C-4625-85FE-132F6F2B932C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"20D99A58-8D7E-4586-A9BF-1DD2A1DBB8D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DEBA0118-545E-4D7B-B819-34D157B2BA6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"67826609-F4CA-42CB-A5D0-B4503DDE2C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"61676BBD-95B8-44C9-BD66-79F00381BF86"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"719A9B1D-8E32-461F-BCD4-F72C6AD3E63E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"BFD73969-39F8-4849-AF6A-15ACDC2E4537"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"DB8C1DD2-865A-4CF2-8137-3C40C01C9EAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EE38B045-2224-43D1-8618-0885505865C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5D26DAC5-EDBD-42D8-A877-1E6EA666D72B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.11_9:*:*:*:*:*:*:*","matchCriteriaId":"E7AE325E-514C-40A1-AA56-D605377B5D90"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.11_11:*:*:*:*:*:*:*","matchCriteriaId":"19397A11-E549-4F31-8007-8D5F3C0AABB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.11_11s:*:*:*:*:*:*:*","matchCriteriaId":"1C659213-271D-4F22-AE14-A1646A612D2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"67B0A2B6-C560-4AE0-BC79-3C7BC9163EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.13:*:*:*:*:*:*:*","matchCriteriaId":"566406CE-368A-4799-A112-E5DFC5B333D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"E5CCC734-C15B-4D2B-BF83-F214F807C44E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.15:*:*:*:*:*:*:*","matchCriteriaId":"64796893-A90D-4B7D-BDBC-0087B57AF7E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.16:*:*:*:*:*:*:*","matchCriteriaId":"39914C6A-F4DB-43CC-B2B6-097365E55D34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.17:*:*:*:*:*:*:*","matchCriteriaId":"5BFDD8F7-AAFD-453F-99A4-F9C0424EA791"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.18:*:*:*:*:*:*:*","matchCriteriaId":"0BFEEAA6-0B50-4644-A183-F5FEE7BD7EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.19:*:*:*:*:*:*:*","matchCriteriaId":"920FC1DB-95E2-4367-BF20-77D75BD7617D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.20:*:*:*:*:*:*:*","matchCriteriaId":"28E643F8-005A-4170-8275-8E4AB5C25209"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C8A34C63-C17D-4026-B409-AA9A56529B87"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.22:*:*:*:*:*:*:*","matchCriteriaId":"4EA863B0-A6AB-44BD-84E8-B6C885EFFE10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.23:*:*:*:*:*:*:*","matchCriteriaId":"24BFAEC7-6256-4B8F-83F5-60FBD1571936"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.25:*:*:*:*:*:*:*","matchCriteriaId":"734B8101-BEAC-40AB-81EA-2516CA20BC93"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.27:*:*:*:*:*:*:*","matchCriteriaId":"AA73658A-8834-4EC2-8D8F-3A7D1C834669"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4B298BAA-5584-4193-A3DB-31FBB0BD12B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"7951BAAB-CB06-4F19-891A-E07E2B3C8701"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.11:*:*:*:*:*:*:*","matchCriteriaId":"82EC30A1-4150-44DC-89F7-5A64B8CC4A84"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.12:*:*:*:*:*:*:*","matchCriteriaId":"9DF04D97-A561-427B-9891-A1423B86F164"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.13:*:*:*:*:*:*:*","matchCriteriaId":"1E74B0C8-2D64-4BF2-B152-87909E3029EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.14:*:*:*:*:*:*:*","matchCriteriaId":"88F6CA0B-ED91-4085-8EE0-1F4256747621"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.15:*:*:*:*:*:*:*","matchCriteriaId":"B90657E7-D651-4E1E-8035-13A1F024E3C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.16:*:*:*:*:*:*:*","matchCriteriaId":"7BBE5477-BE27-412A-9BA9-9690F746B4F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.17:*:*:*:*:*:*:*","matchCriteriaId":"31300FA3-C57D-4564-927E-B06C0229BE8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.18:*:*:*:*:*:*:*","matchCriteriaId":"342E414D-8ED6-4E5A-88F0-57B5846A3EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.19:*:*:*:*:*:*:*","matchCriteriaId":"7C0BD0FD-BD80-4197-8479-BBB070DAB890"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1_.20:*:*:*:*:*:*:*","matchCriteriaId":"E8BCFC49-6505-4713-A06C-A64782A34414"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"}]}]}],"references":[{"url":"http://secunia.com/advisories/12491/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/17233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21520","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-157.htm","source":"cve@mitre.org"},{"url":"http://www.auscert.org.au/render.html?it=4363","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-751.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/7148","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11137","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17300","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10703","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12491/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/17233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/21520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-157.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.auscert.org.au/render.html?it=4363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-751.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/7148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0824","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local users to overwrite system files via a symlink attack on PPPDialer log files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"}]}]}],"references":[{"url":"http://securitytracker.com/id?1011175","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.auscert.org.au/render.html?it=4363","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-212.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/7148","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11139","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17298","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.auscert.org.au/render.html?it=4363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-212.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/7148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0825","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of service (application deadlock) via a certain sequence of operations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109467471617466&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12491","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011176","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/o-212.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/914870","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/7148","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11138","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17294","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109467471617466&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/o-212.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/914870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/7148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17294","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0826","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.2:*:*:*:*:*:*:*","matchCriteriaId":"44E0E1D0-F71C-4A3F-B3EE-97B299EF2AE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"47CD4C15-02C8-42F2-9AF3-E44F74DE62B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.3:*:*:*:*:*:*:*","matchCriteriaId":"D3DDE473-7A61-46AD-9D3B-CA299928FD44"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"046596DB-57EB-4354-A79E-B3B1D5B4DD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"0755B957-CB78-4B8E-9CFE-D53389789ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.4:*:*:*:*:*:*:*","matchCriteriaId":"17D292FA-E062-4C52-AE0A-CA7D183D9E2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"83E1A0EA-9E2F-407F-A72F-D5061B6CD318"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"B565D82B-CAB8-4512-B7B7-0402146DD2B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.5:*:*:*:*:*:*:*","matchCriteriaId":"68341EA6-4FF0-4F87-AC71-4EC5D648406C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.6:*:*:*:*:*:*:*","matchCriteriaId":"A91596AC-3F28-4BBD-A697-81909A5407B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"A57A5053-018B-468C-BC18-5140E6B5B048"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.7:*:*:*:*:*:*:*","matchCriteriaId":"C2962B1B-4B7F-4527-AE4C-C76787FEDB67"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"AE921188-7A50-479F-853F-95127C9BE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.7.2:*:*:*:*:*:*:*","matchCriteriaId":"F710939C-8598-40FE-9D5F-A3665723A5C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.7.3:*:*:*:*:*:*:*","matchCriteriaId":"75572113-BD36-49BB-B7A1-177EB7DD3AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.7.5:*:*:*:*:*:*:*","matchCriteriaId":"1F18265E-EE99-4D0F-B975-22A86077A611"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.7.7:*:*:*:*:*:*:*","matchCriteriaId":"C5E3EA58-3FD3-4AD8-AA63-057F8D31301B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.8:*:*:*:*:*:*:*","matchCriteriaId":"A51D3086-99CB-4C01-B286-3F7F6B6FB3AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:network_security_services:3.9:*:*:*:*:*:*:*","matchCriteriaId":"ACA7EB49-52A7-4AFC-9D7D-0225A430B636"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:certificate_server:1.0:patch1:*:*:*:*:*:*","matchCriteriaId":"72E930EF-CCEC-44EA-AA45-18644EFDA5F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:certificate_server:4.2:*:*:*:*:*:*:*","matchCriteriaId":"506D842B-339C-452A-A229-C6B59B0E038D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:directory_server:1.3:patch5:*:*:*:*:*:*","matchCriteriaId":"1CD1E4C9-BFF1-4818-A1B8-ECD7B54C8B03"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:directory_server:3.1:patch1:*:*:*:*:*:*","matchCriteriaId":"492922BE-3B31-486C-94B5-114089E51E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:directory_server:3.12:*:*:*:*:*:*:*","matchCriteriaId":"70E0FF18-9B01-4500-9599-8F085655C388"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:directory_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"DE69D422-E6FF-40F5-BC73-73BE3A042DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:directory_server:4.11:*:*:*:*:*:*:*","matchCriteriaId":"39B65825-FE48-4938-A04F-12740611681B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:directory_server:4.13:*:*:*:*:*:*:*","matchCriteriaId":"CBE13D7D-2171-44F3-84D3-4CFD024AA3A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9E5E0298-99D9-476D-A7DF-36C6207482DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:2.0.1c:*:*:*:*:*:*:*","matchCriteriaId":"8E0069EE-831B-4E6D-9AF9-71EFC9EED509"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:2.0a:*:*:*:*:*:*:*","matchCriteriaId":"5234109F-AD90-4324-AA03-C5DE007D32F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7A7B9FDA-DC62-4EC9-9120-A7E6795C2815"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"60812728-EC82-461E-BBDC-C5B4C1BF79E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.0.1b:*:*:*:*:*:*:*","matchCriteriaId":"D94D2CA3-9868-4F27-B31D-D3EDC256BE5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.0.7a:*:netware:*:*:*:*:*","matchCriteriaId":"75FFC8CC-AB53-40CD-B6DF-C8CC17320FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.0l:*:*:*:*:*:*:*","matchCriteriaId":"89FAF40A-00F0-48BA-BEE7-4722C82DC54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D6280F25-3BC7-4701-914A-9ADC35A1A73B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.2:*:*:*:*:*:*:*","matchCriteriaId":"BE2CB845-D0E6-4B45-95A1-879BCCA037D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"F18F9770-12E2-44D5-ABB6-EDFD2383BFF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.4:*:*:*:*:*:*:*","matchCriteriaId":"5C2CB1E6-63A1-42C5-889C-7EA83CB50543"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.5:*:*:*:*:*:*:*","matchCriteriaId":"34D42A9F-449C-4F4D-B610-538BF133F744"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.5:*:solaris:*:*:*:*:*","matchCriteriaId":"5AECADB3-F1EC-4410-AECF-D2C08B18F517"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4147A43C-DA7B-4D08-90E9-72DE57B1D61D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"3577B789-DBB6-413D-B964-B32FE3E8CD8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.6:*:solaris:*:*:*:*:*","matchCriteriaId":"FFBC4A27-818F-4B2C-818E-62FB43440DD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.6:sp1:*:*:*:*:*:*","matchCriteriaId":"1721BFD6-7914-4ADB-8205-38964C8FFDA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.6:sp2:*:*:*:*:*:*","matchCriteriaId":"4EB62E6F-87E2-4A98-B4BD-3E0036CE7640"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:3.6:sp3:*:*:*:*:*:*","matchCriteriaId":"418B500F-2A05-4419-997F-E04ECA2E3626"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9DD208FC-AC17-45DF-9A5F-D8CDA6DB3A7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"4A29E0A5-9C1D-4CCF-AEEB-FF0B32B4201D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"0CE4230F-88A6-49DD-A05A-FCF4F2A5FF6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:4.1:sp5:*:*:*:*:*:*","matchCriteriaId":"85FAD645-5AFB-4553-85DA-D25E0333A26C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:4.1:sp6:*:*:*:*:*:*","matchCriteriaId":"0D98D58B-AE93-4471-81E0-FD0A4ED1AD51"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:4.1:sp7:*:*:*:*:*:*","matchCriteriaId":"85C1DEB1-2628-45D4-9DB4-64A4CF9C89B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:4.1:sp8:*:*:*:*:*:*","matchCriteriaId":"F331B4BD-1381-4011-B2D9-9CD9B73F976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:4.1.1:*:netware:*:*:*:*:*","matchCriteriaId":"B708CDB3-0BF9-4FE4-855F-DB6E1FE5A319"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:enterprise_server:5.0:*:netware:*:*:*:*:*","matchCriteriaId":"DA8D4321-3683-460F-AFAA-1D31E9B16818"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:personalization_engine:*:*:*:*:*:*:*:*","matchCriteriaId":"C7B348FC-6FEF-4682-BC25-82E726BFB64E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_enterprise_system:2003q4:*:*:*:*:*:*:*","matchCriteriaId":"DC8DFE4D-1FB6-41D7-AAB6-82400C6B4504"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_enterprise_system:2004q2:*:*:*:*:*:*:*","matchCriteriaId":"132976FA-A42E-4CC0-8C8F-9A034A046B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:7.0:*:enterprise:*:*:*:*:*","matchCriteriaId":"EE5A4BC2-ED34-4968-881E-ED6AD300AC42"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:7.0:*:platform:*:*:*:*:*","matchCriteriaId":"D00790CE-CD77-4C39-80AC-5FBD298DD63A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"BC5F2280-EC46-4D2F-8402-FE91ECEE6A1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:7.0:ur4:*:*:*:*:*:*","matchCriteriaId":"60EBC552-FAC2-4833-B1A6-696DC06301A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:7.1:*:*:*:*:*:*:*","matchCriteriaId":"E583F338-CF10-4FD5-8A86-A3CE46E863DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_application_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"352D9910-BC83-44B2-B5C0-59B8F2C23142"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_application_server:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"F316ECED-A6E3-43AC-BA05-C42F2CB0D830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_application_server:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"FA32646E-1014-47D1-9C96-6CD8F0B13480"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:*:*:*:*:*:*:*","matchCriteriaId":"33621D67-8191-42EE-8859-8B5FC30F935A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"0C6F8563-701E-4E54-A0C9-67E9DF74D60D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp10:*:*:*:*:*:*","matchCriteriaId":"4022E5C6-5651-45DD-AF73-89CF38E71D9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp11:*:*:*:*:*:*","matchCriteriaId":"EEF4CFCE-DEEC-4652-A96F-0C7B5A88175A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp12:*:*:*:*:*:*","matchCriteriaId":"873034EA-B3C6-43E6-AE98-A04598D9A392"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp13:*:*:*:*:*:*","matchCriteriaId":"AC90D2B4-4FBE-405A-BD17-F84A37DC914E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp14:*:*:*:*:*:*","matchCriteriaId":"04366BB7-9F1D-4EC0-AE79-9603F71166C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"AE01BAC9-DC57-4BC8-9BFB-9C7C94A516A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"1CEA91AD-443D-4856-AC7A-3DDE0791134D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"07C1D4DC-252A-4602-A916-32E51CCA75B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp5:*:*:*:*:*:*","matchCriteriaId":"526D2FAD-4241-412C-8863-B273D3733153"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp6:*:*:*:*:*:*","matchCriteriaId":"B8A796CB-D675-49FC-98BA-4D527211C70D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp7:*:*:*:*:*:*","matchCriteriaId":"8693959B-7D5D-414B-8660-2A693AF24541"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp8:*:*:*:*:*:*","matchCriteriaId":"1BDC4A06-33A1-4619-B870-7F2AF1D332F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:4.1:sp9:*:*:*:*:*:*","matchCriteriaId":"8A445032-AD7B-4971-B175-DF3183A4A12C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"38698A3B-9597-4BC9-B112-BB908C3DE86B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.0:sp4:*:*:*:*:*:*","matchCriteriaId":"78587B6D-2A95-4714-9632-4F75CD552E7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.0:sp5:*:*:*:*:*:*","matchCriteriaId":"279FE555-E290-4B17-855D-781C9B58ED55"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.0:sp7:*:*:*:*:*:*","matchCriteriaId":"26A8BE1A-082B-4CB5-97D0-7964FBC93572"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.0:sp8:*:*:*:*:*:*","matchCriteriaId":"3609AA35-6B6A-47A1-B1D4-011B735E0671"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"E66F55C3-F5BD-49A7-B561-ACD8D522225D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4493C646-DF4B-45C7-86F7-A71AC9B1CA97"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_web_server:6.1:sp2:*:*:*:*:*:*","matchCriteriaId":"689F0A9F-8F34-4958-B869-C4FB8BC02406"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*","matchCriteriaId":"D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109351293827731&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11015","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://xforce.iss.net/xforce/alerts/id/180","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16314","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109351293827731&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://xforce.iss.net/xforce/alerts/id/180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0827","sourceIdentifier":"cve@mitre.org","published":"2004-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9:*:*:*:*:*:*:*","matchCriteriaId":"AC774637-8B95-4C69-8665-86A67EAEBB24"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"9928B65C-A2F3-4D95-9A73-6DE4415463B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.2:*:*:*:*:*:*:*","matchCriteriaId":"072BDD6E-D815-4996-B78C-42502FB8BE05"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.3:*:*:*:*:*:*:*","matchCriteriaId":"AE9D28DB-FFC6-4C7F-89F6-85740B239271"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.4:*:*:*:*:*:*:*","matchCriteriaId":"988CDE52-220B-489D-9644-94CC5274E678"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.5:*:*:*:*:*:*:*","matchCriteriaId":"B49B4277-ECFD-4568-94C1-6E02BF238A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.6:*:*:*:*:*:*:*","matchCriteriaId":"882A873F-D3D3-4E11-9C6B-B45C53672711"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.7:*:*:*:*:*:*:*","matchCriteriaId":"8DA760F0-EFA2-4B4E-BB95-8FD857CD3250"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.8:*:*:*:*:*:*:*","matchCriteriaId":"1C72DEC7-5558-4121-89CE-6E9B382C849E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.9:*:*:*:*:*:*:*","matchCriteriaId":"6880B01C-0804-4CCF-9916-89807BBD4C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.10:*:*:*:*:*:*:*","matchCriteriaId":"1FE16231-4FB4-4D30-BE83-AD400E357280"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.11:*:*:*:*:*:*:*","matchCriteriaId":"27937897-40B1-4D86-AFF0-ACA1B7F7A33E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.12:*:*:*:*:*:*:*","matchCriteriaId":"A533869A-BAF1-4A26-AD33-0C4B6A62AA65"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.13:*:*:*:*:*:*:*","matchCriteriaId":"917A16B8-65F3-4C5D-904E-DD0FBD46A3F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib:1.9.14:*:*:*:*:*:*:*","matchCriteriaId":"89F6F148-15BA-4F07-A7A6-457B54FB234E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E1CF072-E421-4BAA-9B29-421B101171B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"630D2700-3AF2-4F6C-B045-41571B602B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1750F261-8A88-4C9C-A86B-ED1D6F41C408"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7606397B-A6F0-41AA-8DA2-B3ECBC7374EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F69E5CC4-422F-4E4C-8E4C-8EA3479D759E"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3B6EC79E-A937-4781-AF55-35BCB2247C52"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A3DCF542-ABD1-448A-BD6F-F3FB4DB957C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:enlightenment:imlib2:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B6A7F9B2-116C-4AB8-98B0-729D0AB8545E"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.3.3:*:*:*:*:*:*:*","matchCriteriaId":"0D83FADC-4C7F-4C16-BBAA-9883D7449744"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B45B5EE8-00FB-46FE-9A26-7468AD30B540"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.4.4.5:*:*:*:*:*:*:*","matchCriteriaId":"6534A963-C0A7-47D6-8E1B-B8D0F3933428"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.4.7:*:*:*:*:*:*:*","matchCriteriaId":"1FD06A99-7CBF-4593-9EA1-5D1A800D8C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.4.8:*:*:*:*:*:*:*","matchCriteriaId":"8BDC9494-E79B-4497-8413-A44DF326ABB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.4.8.2.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"563F49AC-D60F-4E00-9E0D-7EDAA2FFFCD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.5.3.2.1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"9BDB0628-9BFD-4262-886C-E971EC262134"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.5.6.0_2003-04-09:*:*:*:*:*:*:*","matchCriteriaId":"F4CEEBE6-7CE6-4E1B-8828-EDD64EA3A338"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:5.5.7:*:*:*:*:*:*:*","matchCriteriaId":"193A610A-5E5E-4A87-A501-902100D1C2AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:imagemagick:imagemagick:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"46F682CD-0117-4770-877F-1F3903BAFE04"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_desktop_system:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5537D6C-7700-4818-93F7-4449049DF131"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_desktop_system:2003:*:*:*:*:*:*:*","matchCriteriaId":"A1587AB3-180E-4734-A0AC-4EE5A93B469A"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F4007B0D-9606-46BD-866A-7911BEA292BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"052E3862-BFB7-42E7-889D-8590AFA8EF37"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*","matchCriteriaId":"A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*","matchCriteriaId":"409E324A-C040-494F-A026-9DCAE01C07F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*","matchCriteriaId":"6474B775-C893-491F-A074-802AFB1FEDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6996B14-925B-46B8-982F-3545328B506B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*","matchCriteriaId":"EC80CF67-C51D-442C-9526-CFEDE84A6304"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*","matchCriteriaId":"84A50ED3-FD0D-4038-B3E7-CC65D166C968"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*","matchCriteriaId":"777F9EC0-2919-45CA-BFF8-78A02537C513"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*","matchCriteriaId":"37F124FE-15F1-49D7-9E03-8E036CE1A20C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:desktop_10.0:*:*:*:*:*:*:*","matchCriteriaId":"49A34783-39EF-471A-9B8B-72CBF2BB3E30"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:server_7.0:*:*:*:*:*:*:*","matchCriteriaId":"42FB8BA2-8651-4806-9172-0E03F6B7AAD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:server_8.0:*:*:*:*:*:*:*","matchCriteriaId":"79B0F1A4-BE4C-4A33-B1F5-9C158B228D82"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:workstation_7.0:*:*:*:*:*:*:*","matchCriteriaId":"EE73E6EB-6712-4DD8-847B-67CCA9A8E0A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux:workstation_8.0:*:*:*:*:*:*:*","matchCriteriaId":"1066BFAC-0156-4440-A32B-BC1B5228DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*","matchCriteriaId":"6E94583A-5184-462E-9FC4-57B35DA06DA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*","matchCriteriaId":"E905FAAD-37B6-4DD0-A752-2974F8336273"}]}]}],"references":[{"url":"http://secunia.com/advisories/28800","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231321-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201006-1","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-547","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-480.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-494.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0412","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17173","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11123","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/28800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-231321-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201006-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-480.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-494.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17173","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0828","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option, which allows local users to modify or create arbitrary files."},{"lang":"es","value":"El programa ctstrtcasd en RSCT 2.3.0.0 y anteriores para IBM AIX 5.2 Y 5.3 no se deshace adecuamente de privilegios antes de ejecutar la opción -f, lo que permite a usuarios locales modificar o crear ficheros arbitrarios."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"}]}]}],"references":[{"url":"http://secunia.com/advisories/12664/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011429","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11264","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17514","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12664/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17514","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0829","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash) by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2."}],"vendorComments":[{"organization":"Red Hat","comment":"We do not class this as a security issue; this can only cause a denial of service for the attacker.\n","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.17:*:*:*:*:*:*:*","matchCriteriaId":"A3B50D9E-EA43-44BF-9176-610EC808B986"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.17:p1:*:*:*:*:*:*","matchCriteriaId":"BCBBF662-40C3-4280-BE79-9D7C36A6DF5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.17:p2:*:*:*:*:*:*","matchCriteriaId":"59819155-91CF-4B79-BCB2-BE0EBAB4F31E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.17:p3:*:*:*:*:*:*","matchCriteriaId":"BDD6A6AE-C636-4131-807B-59F7784B7AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.17:p4:*:*:*:*:*:*","matchCriteriaId":"8C6D63F5-B72C-445A-BC61-D52D6022481B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.17:p5:*:*:*:*:*:*","matchCriteriaId":"1ADD724A-1747-4678-A659-0A528B728C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:*:*:*:*:*:*:*","matchCriteriaId":"EF3C20A1-F21D-41FF-8B87-B50E1AE8219E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p1:*:*:*:*:*:*","matchCriteriaId":"A3ABEA3A-8F88-4947-80A5-CF1459F5AC8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p10:*:*:*:*:*:*","matchCriteriaId":"86F85E94-9F94-457A-A606-35DB558484A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p2:*:*:*:*:*:*","matchCriteriaId":"1ED4704B-2422-43C9-A2E0-9851F56D4CEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p3:*:*:*:*:*:*","matchCriteriaId":"158D175A-E0D7-45EF-BDD2-D86F2E8F7766"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p4:*:*:*:*:*:*","matchCriteriaId":"7854FCEF-D1F8-4DEC-A6CB-C4470899F71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p5:*:*:*:*:*:*","matchCriteriaId":"36D8B675-C209-4D5A-8EA7-1B3515E930FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p6:*:*:*:*:*:*","matchCriteriaId":"4BCECF31-4C73-4ABA-9F84-D5DBA1DB1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p7:*:*:*:*:*:*","matchCriteriaId":"2C5A1382-D147-43E5-8DB7-93B7A3B9AA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p8:*:*:*:*:*:*","matchCriteriaId":"3A497A5D-96FC-490E-87EB-94C1BE7338A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F681E4CC-B8D3-48A2-B93E-0363B22B059E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"76D03B96-8FF3-4FC6-BC38-288F3ADBA9BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"DDF2248C-5A71-49FC-88F4-2D1F376155FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A4FD10B2-ED2D-4F55-8F0E-77429C8A716E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D8F15704-2F2B-4536-A2A0-510B5CE91D09"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"93AF43FA-9947-4F26-96E8-1D77BF909AA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"2BDD0125-4C47-404A-9DC0-2E923C66B4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"B4A46D8D-1535-400B-B1CD-AA2685F4164D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1CB46ABA-F403-4715-915D-870BD221C8FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"65AC9643-E1A5-4013-9607-17C6CC7CC63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DCACECDD-40F1-4A9B-8B8A-20565FEE3627"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8C71CB60-2689-4A4A-9509-E2F3135E6491"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0129E404-3AE8-4F0E-89CB-7F2FA5B47011"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.3a:*:*:*:*:*:*:*","matchCriteriaId":"614547F5-9C3F-489B-9B72-91B0FF646CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A052141C-874D-4ED0-99FB-D7468FACFC6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9739EA65-9FA8-425E-B355-E690773D5B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"3B618F94-DAC2-4A97-9F7F-8BCEA3199769"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"EEE7C057-B024-4417-B572-5D396366620E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.7a:*:*:*:*:*:*:*","matchCriteriaId":"34DC3500-F8F0-46E1-B0AA-C2474CCB3DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"CFCD334C-FB95-41A6-8F4C-FCC4E70CE930"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.8a:*:*:*:*:*:*:*","matchCriteriaId":"75C86202-3150-440C-B048-BB039E9D3606"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"98CAF474-0C3A-4E49-8CF8-9DF14D84CDCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"8A3ABF97-93A2-48C3-898E-9DADD5614BF5"}]}]}],"references":[{"url":"http://samba.org/samba/history/samba-2.2.11.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://seclists.org/lists/bugtraq/2004/Sep/0003.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-14.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0043","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17138","source":"cve@mitre.org"},{"url":"http://samba.org/samba/history/samba-2.2.11.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://seclists.org/lists/bugtraq/2004/Sep/0003.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17138","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0830","sourceIdentifier":"cve@mitre.org","published":"2004-09-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Content Scanner Server in F-Secure Anti-Virus for Microsoft Exchange 6.21 and earlier, F-Secure Anti-Virus for Microsoft Exchange 6.01 and earlier, and F-Secure Internet Gatekeeper 6.32 and earlier allow remote attackers to cause a denial of service (service crash due to unhandled exception) via a certain malformed packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:6.01:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"1171FFA9-4898-4174-AD17-C6E47A120585"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:6.2:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"4401535F-9AC5-4419-A6B6-9A877887A3D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:6.21:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"19828867-7079-4233-A3B8-BF7A3052FB8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_content_scanner_server:6.31:*:*:*:*:*:*:*","matchCriteriaId":"79A9C098-AE60-43A7-BCE9-9DA1F2EA0B07"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.3:*:*:*:*:*:*:*","matchCriteriaId":"4F4EC2BB-A979-4C37-B8BB-086DAEEB4A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*","matchCriteriaId":"AC782BFC-6BA0-4823-8A6D-F7D83F55393C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*","matchCriteriaId":"E1B09025-47B9-4F77-9DA6-80885E9A4EC4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109483205925698&w=2","source":"cve@mitre.org"},{"url":"http://www.f-secure.com/security/fsc-2004-2.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=137&type=vulnerabilities","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11145","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17307","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109483205925698&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.f-secure.com/security/fsc-2004-2.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=137&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17307","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0831","sourceIdentifier":"cve@mitre.org","published":"2004-09-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the \"System Scan\" properties of the System Tray applet, which could allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:virusscan:4.5:*:*:*:*:*:*:*","matchCriteriaId":"1EE9789B-3A6E-4F30-A85F-7A8B075DFF60"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:virusscan:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F31AAED5-60F4-48F6-9DAF-BCB9FC7023D3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109526269429728&w=2","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=140&type=vulnerabilities","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17367","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109526269429728&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=140&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17367","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0832","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service (application crash) via an NTLMSSP packet that causes a negative value to be passed to memcpy."},{"lang":"es","value":"Las funciones ntlm_fetch_string y ntlm_get_string en Squid 2.5.6 y anteriores, con autenticación NTLM activada, permite a atacantes remotos causar una denegación de servicio (caída de aplicación) mediante un paquete NTLMSSP que hace que se pase un valor negativo a memcpy."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.6","matchCriteriaId":"53ED784B-1BF3-4A13-B5BF-AFE7741B8002"}]}]}],"references":[{"url":"http://fedoranews.org/updates/FEDORA--.shtml","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-04.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:093","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11098","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=1045","source":"cve@mitre.org"},{"url":"http://www.trustix.org/errata/2004/0047/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www1.uk.squid-cache.org/squid/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-ntlm_fetch_string","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17218","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10489","source":"cve@mitre.org"},{"url":"http://fedoranews.org/updates/FEDORA--.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=1045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.org/errata/2004/0047/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www1.uk.squid-cache.org/squid/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-ntlm_fetch_string","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0833","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a fixed username and password, which could allow remote attackers to use Sendmail as an open mail relay and send spam messages."},{"lang":"es","value":"Sendmail anteriores a 8.12.3 sobre Debina GNU/Linux, cuando se usa sasl y sasl-bin, utiliza un script de configuración de Sendmail con un nombre y contraseña fijos, lo que podría permitir a atacantes remotos usar Sendmail como un relé de correo abierto y enviar mensajes de spam."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*","matchCriteriaId":"A6B060E4-B5A6-4469-828E-211C52542547"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*","matchCriteriaId":"974C3541-990C-4CD4-A05A-38FA74A84632"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*","matchCriteriaId":"6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"58792F77-B06F-4780-BA25-FE1EE6C3FDD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"C9419322-572F-4BB6-8416-C5E96541CF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*","matchCriteriaId":"BFC50555-C084-46A3-9C9F-949C5E3BB448"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*","matchCriteriaId":"9C25D6E1-D283-4CEA-B47B-60C47A5C0797"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"AD18A446-C634-417E-86AC-B19B6DDDC856"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*","matchCriteriaId":"E4BB852E-61B2-4842-989F-C6C0C901A8D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*","matchCriteriaId":"24DD9D59-E2A2-4116-A887-39E8CC2004FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*","matchCriteriaId":"F28D7457-607E-4E0C-909A-413F91CFCD82"}]}]}],"references":[{"url":"http://secunia.com/advisories/12667","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-554","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11262","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17531","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17531","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0834","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3."},{"lang":"es","value":"Vulnerabilidad de cadena de formato en Speedtouch USB driver anteriores a 1.3.1 permite a usuarios locales ejecutar código de su elección mediante \r\n\r\nmodem_run\r\npppoa2, o \r\npppoa3"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*","matchCriteriaId":"E4F3F3BB-E004-4FD9-9580-F2D5F3ED3701"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtouch:speedtouch_usb_driver:1.0:*:*:*:*:*:*:*","matchCriteriaId":"100AFA21-3940-44CB-971E-B66B875595F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtouch:speedtouch_usb_driver:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A1575E91-97BA-4813-8A97-F34942032966"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtouch:speedtouch_usb_driver:1.2:*:*:*:*:*:*:*","matchCriteriaId":"30D104A7-0C22-4B71-999F-454EF4D79433"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtouch:speedtouch_usb_driver:1.2_beta1:*:*:*:*:*:*:*","matchCriteriaId":"315E7B9D-A05C-4706-9C0D-B580FAC3CC39"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtouch:speedtouch_usb_driver:1.2_beta2:*:*:*:*:*:*:*","matchCriteriaId":"771080FF-D53E-44AD-8587-98701F04C4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtouch:speedtouch_usb_driver:1.2_beta3:*:*:*:*:*:*:*","matchCriteriaId":"74653412-D765-4598-9ED3-70C5444AAFD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:speedtouch:speedtouch_usb_driver:1.3:*:*:*:*:*:*:*","matchCriteriaId":"CB471486-A33B-46F5-9CBB-2788957C0CE8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"DEB99324-3062-426F-8E2F-44DC3A7ADB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:ppc:*:*:*:*:*","matchCriteriaId":"128F5289-E9F3-41A7-A534-FBAA8A119A9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"33F6F859-B7B8-4072-B073-6CC8291D642E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C4AD30B9-8FBA-48B3-B2B2-014C950B9BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:ppc:*:*:*:*:*","matchCriteriaId":"279317B9-AF2F-43E9-BEE5-518FC6D23A87"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*","matchCriteriaId":"3528DABD-B821-4D23-AE12-614A9CA92C46"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"9E661D58-18DF-4CCF-9892-F873618F4535"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"052E3862-BFB7-42E7-889D-8590AFA8EF37"}]}]}],"references":[{"url":"http://sourceforge.net/project/showfiles.php?group_id=32758&package_id=28264&release_id=271734","source":"cve@mitre.org"},{"url":"http://speedtouch.sourceforge.net/index.php?/news.en.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mail-archive.com/speedtouch%40ml.free.fr/msg06688.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17792","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/showfiles.php?group_id=32758&package_id=28264&release_id=271734","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://speedtouch.sourceforge.net/index.php?/news.en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mail-archive.com/speedtouch%40ml.free.fr/msg06688.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17792","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0835","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities."},{"lang":"es","value":"MySQL 4 anteriores a 4.0.21 y 3.x anteriores a 3.23.49 comprueban los derechos CREATE/INSERT de la tabla original en lugar de los de la tabla de destino en una operación ALTER TABLE RANAME, lo que podría permitir a atacantes realizar actividades no permitidas."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"4.1.0","versionEndIncluding":"4.1.2","matchCriteriaId":"823AD411-0A49-4EAA-AABF-C8705CE18AF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.0","versionEndIncluding":"5.0.1","matchCriteriaId":"AA5A3321-CF65-4B5E-90E3-DAC9CFD19BB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartExcluding":"3.20","versionEndExcluding":"3.23.59","matchCriteriaId":"7882B594-DC91-4F85-A450-9F43872F3BC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.19","matchCriteriaId":"373C3F5C-56D1-4DDA-A8C4-E2DC3E164B44"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"http://bugs.mysql.com/bug.php?id=3270","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.mysql.com/internals/13073","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12783/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011606","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/p-018.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-562","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mysql.org/doc/refman/4.1/en/news-4-0-19.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mysql.org/doc/refman/4.1/en/news-4-1-2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-597.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-611.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11357","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0054/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17666","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://bugs.mysql.com/bug.php?id=3270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.mysql.com/internals/13073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12783/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/p-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mysql.org/doc/refman/4.1/en/news-4-0-19.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mysql.org/doc/refman/4.1/en/news-4-1-2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-597.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-611.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.trustix.org/errata/2004/0054/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0836","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length)."},{"lang":"es","value":"Desbordamiento de búfer en la función mysql_real_connect de MySQL 4.x anteriores a 3.0.21 y 3.x anteriores a 3.23.49 permite a servidores DNS remotos causar una denegación de servicio y posiblemente ejecutar código arbitrario mediante una respuesta DNS con un un tamaño de dirección largo (h_length)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"3.20","versionEndExcluding":"3.23.49","matchCriteriaId":"B4E0733B-5C1C-4579-9FD2-251E45E8D93F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.21","matchCriteriaId":"E9CB33C2-B487-4DC3-A7F4-4A9D61EA12FD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"http://bugs.mysql.com/bug.php?id=4017","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.mysql.com/internals/14726","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110140517515735&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/12305/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-018.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-562","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-597.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-611.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10981","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.trustix.org/errata/2004/0054/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17047","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://bugs.mysql.com/bug.php?id=4017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.mysql.com/internals/14726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110140517515735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/12305/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-597.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-611.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.trustix.org/errata/2004/0054/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0837","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs."},{"lang":"es","value":"MySQL 4 anteriores a 4.0.21 y 3.x anteriores a 3.23.49 permiten a atacantes causar una denegación de servicio (caída o cuelgue) mediante múltiples hilos de ejecución que alterán simultaneamente UNIONes de tablas MERGE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:mysql:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CFEDB808-A8D8-403E-9103-AB486C793EF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"3.20","versionEndExcluding":"3.23.49","matchCriteriaId":"B4E0733B-5C1C-4579-9FD2-251E45E8D93F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0.0","versionEndExcluding":"4.0.21","matchCriteriaId":"E9CB33C2-B487-4DC3-A7F4-4A9D61EA12FD"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2CAE037F-111C-4A76-8FFE-716B74D65EF3"}]}]}],"references":[{"url":"http://bugs.mysql.com/2408","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.mysql.com/internals/16168","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.mysql.com/internals/16173","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.mysql.com/internals/16174","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110140517515735&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://mysql.bkbits.net:8080/mysql-3.23/diffs/myisammrg/myrg_open.c%401.15","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12783/","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1011606","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/p-018.shtml","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-562","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-597.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-611.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/11357","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.trustix.org/errata/2004/0054/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17667","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://bugs.mysql.com/2408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.mysql.com/internals/16168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.mysql.com/internals/16173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.mysql.com/internals/16174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110140517515735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://mysql.bkbits.net:8080/mysql-3.23/diffs/myisammrg/myrg_open.c%401.15","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12783/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://securitytracker.com/id?1011606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ciac.org/ciac/bulletins/p-018.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.debian.org/security/2004/dsa-562","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-597.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-611.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/11357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.trustix.org/errata/2004/0054/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0838","sourceIdentifier":"cve@mitre.org","published":"2004-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read the password directly from the device and access the password protected part of the drive."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:lexar:jumpdrive_secure:*:*:*:*:*:*:*:*","matchCriteriaId":"93B9B72E-1CA2-4265-8ED9-A921495F5F3D"}]}]}],"references":[{"url":"http://secunia.com/advisories/12522","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2004/a091304-1.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11162","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17342","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2004/a091304-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17342","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0839","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by \"wottapoop.html\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip600_media_servers:*:*:*:*:*:*:*:*","matchCriteriaId":"9692F8E9-E8E9-43A8-87D5-F2409333F8CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:definity_one_media_server:*:*:*:*:*:*:*:*","matchCriteriaId":"88301496-BED2-45EB-BF19-5F5BF2957373"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s3400:*:*:*:*:*:*:*:*","matchCriteriaId":"BCB0BA4C-BA48-4DDA-917E-9EA9E04A898F"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8100:*:*:*:*:*:*:*:*","matchCriteriaId":"1D190CA6-7807-4361-8FB8-C015B21E66B1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:ip_softphone_2050:*:*:*:*:*:*:*:*","matchCriteriaId":"5A140A10-720D-4FF5-9559-184D9AC33509"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:mobile_voice_client_2050:*:*:*:*:*:*:*:*","matchCriteriaId":"48E2627D-3244-4A66-9EF6-B790EEFD0D4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:optivity_telephony_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"162EA244-0CED-44BF-9857-13127C833FB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:symposium_web_centre_portal:*:*:*:*:*:*:*:*","matchCriteriaId":"17F13410-3380-4CB8-9E20-92E14B85ADC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:symposium_web_client:*:*:*:*:*:*:*:*","matchCriteriaId":"872353DB-616C-46F8-99F1-7C7B56DEF34F"},{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E25F5CF2-F891-41CA-A40C-13966F72FDF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7417958C-5321-41D6-9D1A-D16BF5511E81"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*","matchCriteriaId":"E69D0E21-8C62-403E-8097-2CA403CBBB1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*","matchCriteriaId":"B127407D-AE50-4AFE-A780-D85B5AF44A2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*","matchCriteriaId":"5D42E51C-740A-4441-8BAF-D073111B984C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*","matchCriteriaId":"34ACB544-87DD-4D9A-99F0-A10F48C1EE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*","matchCriteriaId":"74AD256D-4BCE-41FB-AD73-C5C63A59A06D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*","matchCriteriaId":"B518E945-5FDE-4A37-878D-6946653C91F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*","matchCriteriaId":"403945FA-8676-4D98-B903-48452B46F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*","matchCriteriaId":"B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*","matchCriteriaId":"6A05337E-18A5-4939-85A0-69583D9B5AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*","matchCriteriaId":"E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*","matchCriteriaId":"7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*","matchCriteriaId":"FB2BE2DE-7B06-47ED-A674-15D45448F357"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109303291513335&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109336221826652&w=2","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/fulldisclosure/2004/Aug/0868.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/526089","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10973","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17044","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1563","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2073","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3773","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4152","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6272","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7721","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109303291513335&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109336221826652&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/lists/fulldisclosure/2004/Aug/0868.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/526089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10973","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17044","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1563","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0840","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated."},{"lang":"es","value":"El componente SMTP (Simple Mail Transfer Protocol) de Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, y el componente Exchange Routing Engine de Exchange Server 2003 permite a atacantes remotos ejecutar código arbitrario mediante una respuesta DNS maliciosa conteniendo valores de longitud que no son validados adecuadamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:exchange_server:2003:-:*:*:*:*:*:*","matchCriteriaId":"E2337C2B-EEC2-48B3-93C0-FE1FE7D41273"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*","matchCriteriaId":"E3C43D05-40F8-4769-BA6B-A376420EA972"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_server_2003:r2:*:*:*:*:*:*:*","matchCriteriaId":"23C65B29-89C4-4C05-BD53-27CAD31810A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:x64:*","matchCriteriaId":"70C62E91-94D3-4534-985C-8236D71CC10D"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/394792","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11374","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-035","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17621","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17660","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2300","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3460","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5509","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/394792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-035","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-0841","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka \"HijackClick 3\" and the \"Script in Image Tag File Download Vulnerability.\""},{"lang":"es","value":"Internet Explorer 6.x permite a atacantes remotos instalar programas de su elección mediante eventos mousedown que llaman al método Popup.show y usan acciones \"arrastrar y soltar\" en una ventana emergente, también conocida como \"HijackClick 3\" y la \"Vulnerabilidad de descarga de fichero con scritp en etiqueta de imagen\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip600_media_servers:*:*:*:*:*:*:*:*","matchCriteriaId":"9692F8E9-E8E9-43A8-87D5-F2409333F8CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:definity_one_media_server:*:*:*:*:*:*:*:*","matchCriteriaId":"88301496-BED2-45EB-BF19-5F5BF2957373"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s3400:*:*:*:*:*:*:*:*","matchCriteriaId":"BCB0BA4C-BA48-4DDA-917E-9EA9E04A898F"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8100:*:*:*:*:*:*:*:*","matchCriteriaId":"1D190CA6-7807-4361-8FB8-C015B21E66B1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E25F5CF2-F891-41CA-A40C-13966F72FDF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7417958C-5321-41D6-9D1A-D16BF5511E81"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0498.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12048","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010679","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/413886","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/7774","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/368652","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/368666","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10690","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16675","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2611","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4363","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5620","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6031","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6048","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8077","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0498.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/413886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/7774","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/368652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/368666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6048","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0842","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from \"memory corruption\") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the \"<STYLE>@;/*\" string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the \"CSS Heap Memory Corruption Vulnerability.\""},{"lang":"es","value":"Internet Explorer 6.1 SP1 y anteriores, y posiblemente otras versiones, permiten a atacantes remotos causar una denegación de servicio (caída de aplicación por \"corrupción de memoria\") mediante ciertos elementos de Hoja de Estilos en Cascada (CSS), como se ha demostrado usanto la cadena \"<STYLE>@;/*\", posiblemente debido a un terminador de comentario ausente que puede causar una longitud inválida que dispare una operación de copia de memoria grande."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip600_media_servers:*:*:*:*:*:*:*:*","matchCriteriaId":"9692F8E9-E8E9-43A8-87D5-F2409333F8CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:definity_one_media_server:*:*:*:*:*:*:*:*","matchCriteriaId":"88301496-BED2-45EB-BF19-5F5BF2957373"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s3400:*:*:*:*:*:*:*:*","matchCriteriaId":"BCB0BA4C-BA48-4DDA-917E-9EA9E04A898F"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8100:*:*:*:*:*:*:*:*","matchCriteriaId":"1D190CA6-7807-4361-8FB8-C015B21E66B1"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E25F5CF2-F891-41CA-A40C-13966F72FDF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7417958C-5321-41D6-9D1A-D16BF5511E81"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109107496214572&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=109060455614702&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=109102919426844&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12806","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/p-006.shtml","source":"cve@mitre.org"},{"url":"http://www.ecqurity.com/adv/IEstyle.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/291304","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securiteam.com/exploits/5NP042KF5A.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10816","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16675","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2906","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3372","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4169","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5592","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6579","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109107496214572&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=109060455614702&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=109102919426844&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12806","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/p-006.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ecqurity.com/adv/IEstyle.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/291304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securiteam.com/exploits/5NP042KF5A.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6579","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0843","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the \"Plug-in Navigation Address Bar Spoofing Vulnerability.\""},{"lang":"es","value":"Internet Explorer 5.5 y 6 no manejan adecuadamente la navegación con complementos (plug-in), lo que permite a atacantes remotos alterar la barra de navegación mostrada y suplantar páginas web, facilitando ataques de \"phising\", también conocida como \"Vulnerabilidad de suplantación de la barra de direcciónes en navegación en complemento\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*","matchCriteriaId":"B80088A3-2AA4-44A2-98DF-359E15F8E18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/625616","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17651","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17655","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2487","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2537","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3949","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6313","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7095","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7194","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/625616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17655","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2537","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7194","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0844","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6 on Double Byte Character Set (DBCS) systems allows remote attackers to alter displayed address bars and spoof web pages via a URL containing special characters, facilitating phishing attacks, aka the \"Address Bar Spoofing on Double Byte Character Set Systems Vulnerability.\""},{"lang":"es","value":"Internet Explorer 6 en sistemas de Juego de Caractéres de Byte Doble (BDCS) permite a atacantes remotos alterar la barra de direcciones mostrada y suplantar páginas web mediante una URL conteniendo caracteres especiales, lo que facilita ataques de phising, también llamada \"Vulnerabilidad de suplantación de barra de direcciones en sistemas con juegos de caractéres de doble byte\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*","matchCriteriaId":"B80088A3-2AA4-44A2-98DF-359E15F8E18B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110178042025729&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=110174346717733&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/431576","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17651","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17652","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2448","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8127","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110178042025729&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=110174346717733&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/431576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8127","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0845","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site."},{"lang":"es","value":"Internet Explorer 5.01, 5.5, y 6 no hace caché adecuadamente de contenido SSL, lo que permite a atacantes remotos obtener información o suplantar contenido mediante un sitio web con el mismo nombre de máquina como el sitio web objetivo, cuyo contenido es almacenado en caché y reutilizado cuando el usuario visita el sitio web objetivo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*","matchCriteriaId":"B80088A3-2AA4-44A2-98DF-359E15F8E18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109770364504803&w=2","source":"cve@mitre.org"},{"url":"http://www.acrossecurity.com/aspr/ASPR-2004-10-13-1-PUB.txt","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/795720","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17651","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17654","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2219","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3872","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5150","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5520","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5740","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7611","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109770364504803&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.acrossecurity.com/aspr/ASPR-2004-10-13-1-PUB.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/795720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17654","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7611","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0846","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated."},{"lang":"es","value":"Vulnerabilidad desconocida en Microsoft Excel 2000, 2002, 2001 para Mac y v.X para Mac permite a atacantes remotos ejecutar código de su elección mediante un fichero malicioso conteniendo ciertos parámetros que no son validados adecuadamente."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2000:*:*:*:*:*:*:*","matchCriteriaId":"F55D42D5-7371-47C2-BF55-B7F51C19B61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2001:*:*:*:*:*:*:*","matchCriteriaId":"6A65A41A-E56E-4F3A-A2EB-77FC0B8DB39A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:2002:*:*:*:*:*:*:*","matchCriteriaId":"082D3262-87E3-4245-AD9C-02BE0871FA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:excel:x:*:*:*:*:*:*:*","matchCriteriaId":"98D038BA-1C55-4D83-A778-76A10AF374F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:*","matchCriteriaId":"4891122F-AD7F-45E6-98C6-833227916F6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:2001:*:*:*:*:*:*:*","matchCriteriaId":"64B3099E-DFA0-4C7E-B016-370028BF8387"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:office:v.x:*:*:*:*:*:*:*","matchCriteriaId":"310DF9B3-3494-4BD4-8A9D-82211EA6C518"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109779810827096&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12800/","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/p-009.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/274496","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-033","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17653","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17683","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2673","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4226","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109779810827096&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12800/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/p-009.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/274496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17653","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4226","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0847","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a (1) \"\\\" (backslash) or (2) \"%5C\" (encoded backslash), aka \"Path Validation Vulnerability.\""},{"lang":"es","value":"La característica de autenticación en formularios .NET permite a atacantes remotos evitar la autenticación de ficheros .aspx en directorios restringidos mediante una petición conteniendo un (1) 1) \"\" (barra invertida) or (2) \"\"%5C\"\" (barra invertida codificada)."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"8B666A98-0AC9-41D5-AB92-226BB6BC4681"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:asp.net:1.1:sp1:*:*:*:*:*:*","matchCriteriaId":"CC441C4B-3A1E-4709-8601-44477A6D5FA0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2004-q3/0221.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_id=5671607&forum_id=24754","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/283646","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11342","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-039A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-004","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17644","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3556","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4987","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2004-q3/0221.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_id=5671607&forum_id=24754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/283646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-039A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4987","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-0849","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service (daemon crash) via certain SNMP requests."},{"lang":"es","value":"Desbordamiento de enteros en la función asn_decode_string() definida en asn1.c en radiusd de GNU Radius 1.1 y 1.2 anteriores a 1.2.94, cuando se compila con la opción --enable-snmp, permite a atacantes remotos causar una denegación de servicio (caída del demonio) mediante ciertas peticiones SNMP."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:0.92.1:*:*:*:*:*:*:*","matchCriteriaId":"F5B0DFDC-913E-4358-9BF1-6AA1F871CB4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:0.93:*:*:*:*:*:*:*","matchCriteriaId":"F332DA97-B327-45E0-8948-18C2C7278757"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:0.94:*:*:*:*:*:*:*","matchCriteriaId":"67632403-328E-4149-B0EC-2B563DDD7FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:0.95:*:*:*:*:*:*:*","matchCriteriaId":"0F6945F8-EB40-4205-9585-3BF9A132406E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:0.96:*:*:*:*:*:*:*","matchCriteriaId":"22C65C9A-89CA-41F9-9596-40077BC37944"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5C1B4923-F65D-4D51-944B-B63283FBAD13"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:radius:1.2:*:*:*:*:*:*:*","matchCriteriaId":"78B79F54-2CD6-49CB-A97D-8EF9B8838C33"}]}]}],"references":[{"url":"http://lists.gnu.org/archive/html/info-gnu-radius/2004-09/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=141&type=vulnerabilities","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17391","source":"cve@mitre.org"},{"url":"http://lists.gnu.org/archive/html/info-gnu-radius/2004-09/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=141&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0850","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow local users to gain privileges by modifying the RSH environment variable to reference a malicious program."},{"lang":"es","value":"Star anteriores a 1.5_alpha46 no libera la ID de usuario efectiva (euid) antes de llamar a programas externos, lo que podría permitir a usuarios locales ganar privilegios modificando la variable de entorno RSH para hacer referncia a programas maliciosos."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joerg_schilling:star_tape_archiver:1.5_a45:*:*:*:*:*:*:*","matchCriteriaId":"CE72F5B7-04A1-42AC-B024-81C7D63391DC"}]}]}],"references":[{"url":"http://securitytracker.com/id?1011195","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-11.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/339089","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11141","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17297","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/339089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0851","sourceIdentifier":"cve@mitre.org","published":"2004-09-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) write_list and (2) dump_curr_list functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ulrich_callmeier:net-acct:0.6:*:*:*:*:*:*:*","matchCriteriaId":"9F134F0C-01D3-48D2-942F-8F4DEF70AF9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ulrich_callmeier:net-acct:0.7:*:*:*:*:*:*:*","matchCriteriaId":"1BD85868-E36F-460F-BC2A-192E61DE77CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ulrich_callmeier:net-acct:0.71:*:*:*:*:*:*:*","matchCriteriaId":"42E5C5F8-E608-41DF-BF56-129009FB2A1A"}]}]}],"references":[{"url":"http://exorsus.net/projects/net-acct/net-acct-notempfiles.patch","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109466910232385&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12476","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-559","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11125","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17283","source":"cve@mitre.org"},{"url":"http://exorsus.net/projects/net-acct/net-acct-notempfiles.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109466910232385&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12476","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11125","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17283","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0852","sourceIdentifier":"cve@mitre.org","published":"2004-12-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in htget 0.93 allows remote attackers to execute arbitrary code via a crafted URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:htget:htget:0.93:*:*:*:*:*:*:*","matchCriteriaId":"28F0B162-FCF6-47BE-AD4C-E6A2ECF8ABD2"}]}]}],"references":[{"url":"http://secunia.com/advisories/13579","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-611","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18603","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0866","sourceIdentifier":"cve@mitre.org","published":"2004-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"417F34FB-A6B0-4090-BDC9-6D4C1BF0D3D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"61416A22-7309-4890-80B8-6E7C09C7BE8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F918814C-F129-4534-921A-38AF678A7016"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D435E39F-4F70-481B-9225-B072B79BEB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8AD68BAB-8945-4A22-938E-12C01D0111D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7B3220BF-B0AF-4C90-89BD-B425EE58021D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA53FB7A-AF7F-45B2-AF23-11B1FC4EC289"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"619EB7F6-8694-4344-A4C9-A35DA58391AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7FED2DFC-592C-4FD3-B0B7-C670C78F56DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.5b:*:*:*:*:*:*:*","matchCriteriaId":"9EC65385-B190-44BE-9AF8-B14F48303046"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0F7BAE27-7AB1-4DBD-98AD-6109F0D9A458"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AF8A54F6-96A9-44B8-97C8-50DA7276708D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1001754B-8EDB-41A2-9D5D-6E2A2B556DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C8D57D87-3E6A-4A73-85BA-EE679E9DA8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"60BE888B-FE26-4378-B853-29995A55920C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"99E4FC9B-F47C-4BD5-B2C7-23CBAD2D5488"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0172B167-5780-4F80-ACC9-2FB8B60D6717"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3C0DB31D-D075-409C-9ED9-A9E1D96332CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*","matchCriteriaId":"C7EAAD04-D7C4-43DE-B488-1AAD014B503E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D2E2EF3C-1379-4CBE-8FF5-DACD47834651"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109536612321898&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011332","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11186","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17415","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109536612321898&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011332","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17415","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0867","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.  NOTE: it was later reported that 2.x is also affected."},{"lang":"es","value":"Mozilla Firefox 0.9.2 pemite a sitios web establecer cookies para dominios de nivel superior específicos de países, como .ltd.uk, .plc.uk, y .sch.uk, lo que podría permitir a atacantes remotos realizar ataques de fijación de sesión y secuestrar sesiones HTTP de un usuario. NOTA: se ha informado posteriormente que la versión 2.X también se encuentra afectada por esta vulnerabilidad."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"417F34FB-A6B0-4090-BDC9-6D4C1BF0D3D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"61416A22-7309-4890-80B8-6E7C09C7BE8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F918814C-F129-4534-921A-38AF678A7016"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D435E39F-4F70-481B-9225-B072B79BEB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8AD68BAB-8945-4A22-938E-12C01D0111D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7B3220BF-B0AF-4C90-89BD-B425EE58021D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA53FB7A-AF7F-45B2-AF23-11B1FC4EC289"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"619EB7F6-8694-4344-A4C9-A35DA58391AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7FED2DFC-592C-4FD3-B0B7-C670C78F56DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.5b:*:*:*:*:*:*:*","matchCriteriaId":"9EC65385-B190-44BE-9AF8-B14F48303046"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0F7BAE27-7AB1-4DBD-98AD-6109F0D9A458"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AF8A54F6-96A9-44B8-97C8-50DA7276708D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1001754B-8EDB-41A2-9D5D-6E2A2B556DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C8D57D87-3E6A-4A73-85BA-EE679E9DA8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"60BE888B-FE26-4378-B853-29995A55920C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"99E4FC9B-F47C-4BD5-B2C7-23CBAD2D5488"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0172B167-5780-4F80-ACC9-2FB8B60D6717"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3C0DB31D-D075-409C-9ED9-A9E1D96332CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*","matchCriteriaId":"C7EAAD04-D7C4-43DE-B488-1AAD014B503E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D2E2EF3C-1379-4CBE-8FF5-DACD47834651"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"}]}]}],"references":[{"url":"http://kuza55.blogspot.com/2008/02/understanding-cookie-security.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109536612321898&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12580/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011331","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11186","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=252342","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17415","source":"cve@mitre.org"},{"url":"http://kuza55.blogspot.com/2008/02/understanding-cookie-security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109536612321898&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12580/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=252342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17415","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0868","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2023-11-07T01:56:49.510","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-0866.  Reason: This candidate is a duplicate of CVE-2004-0866.  Notes: The description for CVE-2004-0866 was inadvertently attached to this issue instead.  All CVE users should reference CVE-2004-0866 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-0869","sourceIdentifier":"cve@mitre.org","published":"2004-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka \"Cross Security Boundary Cookie Injection.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:*","matchCriteriaId":"B80088A3-2AA4-44A2-98DF-359E15F8E18B"}]}]}],"references":[{"url":"http://securityfocus.com/archive/1/375407","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011332","source":"cve@mitre.org"},{"url":"http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17417","source":"cve@mitre.org"},{"url":"http://securityfocus.com/archive/1/375407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0870","sourceIdentifier":"cve@mitre.org","published":"2004-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka \"Cross Security Boundary Cookie Injection.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"417F34FB-A6B0-4090-BDC9-6D4C1BF0D3D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"61416A22-7309-4890-80B8-6E7C09C7BE8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F918814C-F129-4534-921A-38AF678A7016"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D435E39F-4F70-481B-9225-B072B79BEB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8AD68BAB-8945-4A22-938E-12C01D0111D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7B3220BF-B0AF-4C90-89BD-B425EE58021D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FA53FB7A-AF7F-45B2-AF23-11B1FC4EC289"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"619EB7F6-8694-4344-A4C9-A35DA58391AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7FED2DFC-592C-4FD3-B0B7-C670C78F56DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.0.5b:*:*:*:*:*:*:*","matchCriteriaId":"9EC65385-B190-44BE-9AF8-B14F48303046"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1:*:*:*:*:*:*:*","matchCriteriaId":"0F7BAE27-7AB1-4DBD-98AD-6109F0D9A458"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AF8A54F6-96A9-44B8-97C8-50DA7276708D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1001754B-8EDB-41A2-9D5D-6E2A2B556DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C8D57D87-3E6A-4A73-85BA-EE679E9DA8D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"60BE888B-FE26-4378-B853-29995A55920C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"99E4FC9B-F47C-4BD5-B2C7-23CBAD2D5488"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0172B167-5780-4F80-ACC9-2FB8B60D6717"},{"vulnerable":true,"criteria":"cpe:2.3:a:kde:konqueror:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3C0DB31D-D075-409C-9ED9-A9E1D96332CA"}]}]}],"references":[{"url":"http://securityfocus.com/archive/1/375407","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011330","source":"cve@mitre.org"},{"url":"http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17417","source":"cve@mitre.org"},{"url":"http://securityfocus.com/archive/1/375407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0871","sourceIdentifier":"cve@mitre.org","published":"2004-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka \"Cross Security Boundary Cookie Injection.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"22F00276-9071-4B96-B49C-2E0898476874"}]}]}],"references":[{"url":"http://securityfocus.com/archive/1/375407","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011331","source":"cve@mitre.org"},{"url":"http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17417","source":"cve@mitre.org"},{"url":"http://securityfocus.com/archive/1/375407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0872","sourceIdentifier":"cve@mitre.org","published":"2004-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka \"Cross Security Boundary Cookie Injection.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-669"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:7.51:*:*:*:*:*:*:*","matchCriteriaId":"D9DBA733-467C-4505-8199-DD25A5FFBF97"}]}]}],"references":[{"url":"http://securityfocus.com/archive/1/375407","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011329","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17417","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://securityfocus.com/archive/1/375407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-0873","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a \"link\" that references the program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:ichat:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"ACF66875-8572-4D98-B819-74F8EE16B94F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:ichat_av:2.0:*:*:*:*:*:*:*","matchCriteriaId":"12296E1D-8DBD-4367-9674-3A5E16A4BB82"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:ichat_av:2.1:*:*:*:*:*:*:*","matchCriteriaId":"98AE1E11-6AC3-4F46-984D-065002B11212"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Sep/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17420","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Sep/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0875","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and earlier allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to the wiki module."},{"lang":"es","value":"Múltiples vulnerabilidades de secuencias de comandos en sitios cruzados (XSS) en Phpgropuware (también llamado webdistro) 0.9.16.002 y anteriores permite a atacantes remotos insertar HTML o script web de su elección, como se ha demostrado con el módulo wiki."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"011F15E1-145A-4CB2-BC55-261CB9DF0AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"3AE1DA09-E7A2-41EB-92DB-A4DA42EA0477"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.003:*:*:*:*:*:*:*","matchCriteriaId":"9D030C9B-9A82-42A8-B7AA-EFA3B30FDFC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.005:*:*:*:*:*:*:*","matchCriteriaId":"4E8922FC-6D92-41E6-B228-951432FF631A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.006:*:*:*:*:*:*:*","matchCriteriaId":"2E215C57-88E0-4A41-BB54-6E53524113A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.007:*:*:*:*:*:*:*","matchCriteriaId":"68FB431C-DC8F-4E97-AA58-BA8DBB37766B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000:*:*:*:*:*:*:*","matchCriteriaId":"1C011E73-A072-421D-8500-C414A5B67BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.002:*:*:*:*:*:*:*","matchCriteriaId":"B2FBB83A-AADB-44D2-A227-2D76D4EF40CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16_rc1:*:*:*:*:*:*:*","matchCriteriaId":"9DCD2911-C254-40CE-B707-6268877141B8"}]}]}],"references":[{"url":"http://downloads.phpgroupware.org/changelog","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-22.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17289","source":"cve@mitre.org"},{"url":"http://downloads.phpgroupware.org/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17289","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0885","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the \"SSLCipherSuite\" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration."},{"lang":"es","value":"El módulo mod_ssl en Apache 2.0.35 a 2.0.52, cuando se usa la \"SSLCipherSuite\" en contexto de directorio o lugar, permite a clientes remotos evitar las restricciones pretendidas usando cualquier conjunto de cifrado que sea permitido por la configuración de servidor (host) virtual."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.53:\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"B940BB85-03F5-46D7-8DC9-2E1E228D3D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*","matchCriteriaId":"82139FFA-2779-4732-AFA5-4E6E19775899"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*","matchCriteriaId":"B7F717E6-BACD-4C8A-A9C5-516ADA6FEE6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*","matchCriteriaId":"08AB120B-2FEC-4EB3-9777-135D81E809AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*","matchCriteriaId":"1C7FF669-12E0-4A73-BBA7-250D109148C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*","matchCriteriaId":"5AB7B1F1-7202-445D-9F96-135DC0AFB1E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*","matchCriteriaId":"BCB7EE53-187E-40A9-9865-0F3EDA2B5A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*","matchCriteriaId":"9D06AE8A-9BA8-4AA8-ACEA-326CD001E879"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:*","matchCriteriaId":"2FC1A04B-0466-48AD-89F3-1F2EF1DEBE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:*","matchCriteriaId":"19F34D08-430E-4331-A27D-667149425176"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.45:*:*:*:*:*:*:*","matchCriteriaId":"248BDF2C-3E78-49D1-BD9C-60C09A441724"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.46:*:*:*:*:*:*:*","matchCriteriaId":"BB0FDE3D-1509-4375-8703-0D174D70B22E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.47:*:*:*:*:*:*:*","matchCriteriaId":"AFE732B5-00C9-4443-97E0-1DF21475C26B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.48:*:*:*:*:*:*:*","matchCriteriaId":"C79C41D3-6894-4F2D-B8F8-82AB4780A824"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.49:*:*:*:*:*:*:*","matchCriteriaId":"449A5647-CEA6-4314-9DB8-D086F388E1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.50:*:*:*:*:*:*:*","matchCriteriaId":"B5A407B7-F432-48F0-916A-A49952F85CA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.51:*:*:*:*:*:*:*","matchCriteriaId":"6B5AC769-D07D-43C7-B252-A5A812E7D58C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.52:*:*:*:*:*:*:*","matchCriteriaId":"ADF4DBF6-DAF0-47E7-863B-C48DB7149A78"}]}]}],"references":[{"url":"http://issues.apache.org/bugzilla/show_bug.cgi?id=31505","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109786159119069&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/19072","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm","source":"cve@mitre.org"},{"url":"http://www.apacheweek.com/features/security-20","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-562.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-600.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-816.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0261.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11360","source":"cve@mitre.org"},{"url":"http://www.ubuntu.com/usn/usn-177-1","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/0789","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX01123","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17671","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10384","source":"cve@mitre.org"},{"url":"http://issues.apache.org/bugzilla/show_bug.cgi?id=31505","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109786159119069&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apacheweek.com/features/security-20","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-562.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-600.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-816.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0261.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-177-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/0789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX01123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10384","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0904","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*","matchCriteriaId":"FCEAEDEB-0EE7-4221-B9B8-65438580D331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*","matchCriteriaId":"150F1B28-0FAB-4880-B1D5-7F244A1C4D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2FE7EA3B-3BF8-4696-9488-78506074D62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6514EDE8-7C78-4C72-A313-E0915D89E4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:7.0:*:*:*:*:*:*:*","matchCriteriaId":"30A0231A-B664-46C2-9602-B60EAD6AEC12"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C632D06D-0172-46DA-A7F9-0BC484365BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4C1BC491-9C5A-46D5-B6C3-5A8E5A1A0AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:7.2:*:*:*:*:*:*:*","matchCriteriaId":"842CBD30-B4BA-4FCF-9152-9DBEBE59857C"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F4007B0D-9606-46BD-866A-7911BEA292BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*","matchCriteriaId":"A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*","matchCriteriaId":"409E324A-C040-494F-A026-9DCAE01C07F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*","matchCriteriaId":"6474B775-C893-491F-A074-802AFB1FEDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"138985E6-5107-4E8B-A801-C3D5FE075227"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*","matchCriteriaId":"9B502A61-44FB-4CD4-85BE-88D4ACCCA441"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:i686:*:*:*:*:*","matchCriteriaId":"05853955-CA81-40D3-9A70-1227F3270D3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*","matchCriteriaId":"F3FDE8C4-5FFD-4CC2-9F35-7C32043966D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*","matchCriteriaId":"84A50ED3-FD0D-4038-B3E7-CC65D166C968"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*","matchCriteriaId":"777F9EC0-2919-45CA-BFF8-78A02537C513"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=255067","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109698896104418&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200409-26.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/847200","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11171","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-261A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17381","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10952","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=255067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109698896104418&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200409-26.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/847200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-261A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10952","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0905","sourceIdentifier":"cve@mitre.org","published":"2004-09-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A76ACC55-754D-4501-8312-5A4E10D053B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8987151-0901-4547-B750-5DC470BB9CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"53E60BCC-6D1C-489E-9F3B-9BE42B46704F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66A87ED8-9E1F-4C2C-B806-A41765081C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C795D86F-9B08-41FE-B82B-5BBB3DE6357D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"2637D552-4A3D-4867-B52A-ACCED8681AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CC237C8-CFE0-4128-B549-93CD16894E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*","matchCriteriaId":"6B8EA79A-8426-44CF-AF13-58F7EF8B6D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"367A5D46-0FF3-4140-9478-251363822E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CAA58EE9-05C7-4395-A8A4-5F54BE4C5DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C656A621-BE62-4BB8-9B25-A3916E60FA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F8DE4889-424F-4A44-8C14-9F18821CE961"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*","matchCriteriaId":"82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*","matchCriteriaId":"1003D688-3EEA-45F9-BB2C-5BAB395D7678"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED69BEB9-8D83-415B-826D-9D17FB67976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9AE678D7-812D-4C55-91B0-F3AC6BE0CD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BCDB64E5-AE26-43DF-8A66-654D5D22A635"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6BF63077-4E98-497D-8CE6-B84B022DB21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*","matchCriteriaId":"FCEAEDEB-0EE7-4221-B9B8-65438580D331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*","matchCriteriaId":"150F1B28-0FAB-4880-B1D5-7F244A1C4D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2FE7EA3B-3BF8-4696-9488-78506074D62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:7.0:*:*:*:*:*:*:*","matchCriteriaId":"30A0231A-B664-46C2-9602-B60EAD6AEC12"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C632D06D-0172-46DA-A7F9-0BC484365BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4C1BC491-9C5A-46D5-B6C3-5A8E5A1A0AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:7.2:*:*:*:*:*:*:*","matchCriteriaId":"842CBD30-B4BA-4FCF-9152-9DBEBE59857C"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F4007B0D-9606-46BD-866A-7911BEA292BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*","matchCriteriaId":"A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*","matchCriteriaId":"409E324A-C040-494F-A026-9DCAE01C07F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*","matchCriteriaId":"6474B775-C893-491F-A074-802AFB1FEDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"138985E6-5107-4E8B-A801-C3D5FE075227"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*","matchCriteriaId":"9B502A61-44FB-4CD4-85BE-88D4ACCCA441"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:i686:*:*:*:*:*","matchCriteriaId":"05853955-CA81-40D3-9A70-1227F3270D3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*","matchCriteriaId":"F3FDE8C4-5FFD-4CC2-9F35-7C32043966D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*","matchCriteriaId":"84A50ED3-FD0D-4038-B3E7-CC65D166C968"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*","matchCriteriaId":"777F9EC0-2919-45CA-BFF8-78A02537C513"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*","matchCriteriaId":"C7EAAD04-D7C4-43DE-B488-1AAD014B503E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D2E2EF3C-1379-4CBE-8FF5-DACD47834651"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"F7446746-87B7-4BD3-AABF-1E0FAA8265AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=250862","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109698896104418&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200409-26.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/651928","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11177","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-261A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17374","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10378","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=250862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109698896104418&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200409-26.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/651928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-261A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10378","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0906","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*","matchCriteriaId":"BA58BA23-4CFE-40F8-A2F4-104007E12E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"22F00276-9071-4B96-B49C-2E0898476874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EB84CC9B-346B-4AF4-929E-D56D85960103"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9420CD82-0E5F-4486-9AF8-9DCD6ED7E037"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"0A9C79AB-4ABE-49E6-BAB2-94610AE0316F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"04DE7CCB-79B8-4F9B-AC14-E4A100F9E473"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"1444C77E-FF98-40E5-9CA9-B4C71B3C9304"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3B40771F-30CB-45D0-9EDE-1F13852085B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"47315EC4-1EED-4070-A087-8E37C8FE6703"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"9F1EB38F-CEB2-40BC-AA5D-CC539F597137"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*","matchCriteriaId":"EE6B0681-B96F-405C-8042-1BF2DDB41648"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*","matchCriteriaId":"5436BBD2-E3FF-4558-B8F5-FFF5CA9FC045"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A76ACC55-754D-4501-8312-5A4E10D053B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8987151-0901-4547-B750-5DC470BB9CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"53E60BCC-6D1C-489E-9F3B-9BE42B46704F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66A87ED8-9E1F-4C2C-B806-A41765081C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C795D86F-9B08-41FE-B82B-5BBB3DE6357D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"2637D552-4A3D-4867-B52A-ACCED8681AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CC237C8-CFE0-4128-B549-93CD16894E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*","matchCriteriaId":"6B8EA79A-8426-44CF-AF13-58F7EF8B6D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"367A5D46-0FF3-4140-9478-251363822E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CAA58EE9-05C7-4395-A8A4-5F54BE4C5DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C656A621-BE62-4BB8-9B25-A3916E60FA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F8DE4889-424F-4A44-8C14-9F18821CE961"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*","matchCriteriaId":"82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*","matchCriteriaId":"1003D688-3EEA-45F9-BB2C-5BAB395D7678"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED69BEB9-8D83-415B-826D-9D17FB67976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9AE678D7-812D-4C55-91B0-F3AC6BE0CD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"098458D4-635B-4A4D-9472-39370094E1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BCDB64E5-AE26-43DF-8A66-654D5D22A635"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9D75F1-8333-43DE-A08B-142E4C5899D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6BF63077-4E98-497D-8CE6-B84B022DB21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*","matchCriteriaId":"FCEAEDEB-0EE7-4221-B9B8-65438580D331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*","matchCriteriaId":"78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*","matchCriteriaId":"F610FFD5-DF37-4075-AE8B-8D89DF6205A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*","matchCriteriaId":"D093FD25-94C8-49B8-A452-438023BFB105"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*","matchCriteriaId":"3346E7D0-D7EF-4182-BD86-837F14EEB9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*","matchCriteriaId":"150F1B28-0FAB-4880-B1D5-7F244A1C4D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2FE7EA3B-3BF8-4696-9488-78506074D62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"6514EDE8-7C78-4C72-A313-E0915D89E4EF"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=231083","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=235781","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/12526/","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200409-26.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/653160","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-323.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11192","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17375","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11668","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=231083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=235781","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/12526/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200409-26.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/653160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-323.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11668","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0907","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*","matchCriteriaId":"BA58BA23-4CFE-40F8-A2F4-104007E12E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"22F00276-9071-4B96-B49C-2E0898476874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EB84CC9B-346B-4AF4-929E-D56D85960103"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9420CD82-0E5F-4486-9AF8-9DCD6ED7E037"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"0A9C79AB-4ABE-49E6-BAB2-94610AE0316F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"04DE7CCB-79B8-4F9B-AC14-E4A100F9E473"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"1444C77E-FF98-40E5-9CA9-B4C71B3C9304"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3B40771F-30CB-45D0-9EDE-1F13852085B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"47315EC4-1EED-4070-A087-8E37C8FE6703"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"9F1EB38F-CEB2-40BC-AA5D-CC539F597137"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*","matchCriteriaId":"EE6B0681-B96F-405C-8042-1BF2DDB41648"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*","matchCriteriaId":"5436BBD2-E3FF-4558-B8F5-FFF5CA9FC045"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A76ACC55-754D-4501-8312-5A4E10D053B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8987151-0901-4547-B750-5DC470BB9CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"53E60BCC-6D1C-489E-9F3B-9BE42B46704F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66A87ED8-9E1F-4C2C-B806-A41765081C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C795D86F-9B08-41FE-B82B-5BBB3DE6357D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"2637D552-4A3D-4867-B52A-ACCED8681AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CC237C8-CFE0-4128-B549-93CD16894E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*","matchCriteriaId":"6B8EA79A-8426-44CF-AF13-58F7EF8B6D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"367A5D46-0FF3-4140-9478-251363822E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CAA58EE9-05C7-4395-A8A4-5F54BE4C5DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C656A621-BE62-4BB8-9B25-A3916E60FA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F8DE4889-424F-4A44-8C14-9F18821CE961"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*","matchCriteriaId":"82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*","matchCriteriaId":"1003D688-3EEA-45F9-BB2C-5BAB395D7678"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED69BEB9-8D83-415B-826D-9D17FB67976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9AE678D7-812D-4C55-91B0-F3AC6BE0CD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"098458D4-635B-4A4D-9472-39370094E1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BCDB64E5-AE26-43DF-8A66-654D5D22A635"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9D75F1-8333-43DE-A08B-142E4C5899D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6BF63077-4E98-497D-8CE6-B84B022DB21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*","matchCriteriaId":"FCEAEDEB-0EE7-4221-B9B8-65438580D331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*","matchCriteriaId":"78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*","matchCriteriaId":"F610FFD5-DF37-4075-AE8B-8D89DF6205A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*","matchCriteriaId":"D093FD25-94C8-49B8-A452-438023BFB105"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*","matchCriteriaId":"3346E7D0-D7EF-4182-BD86-837F14EEB9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*","matchCriteriaId":"150F1B28-0FAB-4880-B1D5-7F244A1C4D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2FE7EA3B-3BF8-4696-9488-78506074D62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=254303","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-200409-26.xml","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17373","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=254303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-200409-26.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17373","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0908","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*","matchCriteriaId":"BA58BA23-4CFE-40F8-A2F4-104007E12E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"22F00276-9071-4B96-B49C-2E0898476874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EB84CC9B-346B-4AF4-929E-D56D85960103"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9420CD82-0E5F-4486-9AF8-9DCD6ED7E037"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"0A9C79AB-4ABE-49E6-BAB2-94610AE0316F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"04DE7CCB-79B8-4F9B-AC14-E4A100F9E473"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"1444C77E-FF98-40E5-9CA9-B4C71B3C9304"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3B40771F-30CB-45D0-9EDE-1F13852085B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"47315EC4-1EED-4070-A087-8E37C8FE6703"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"9F1EB38F-CEB2-40BC-AA5D-CC539F597137"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*","matchCriteriaId":"EE6B0681-B96F-405C-8042-1BF2DDB41648"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*","matchCriteriaId":"5436BBD2-E3FF-4558-B8F5-FFF5CA9FC045"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A76ACC55-754D-4501-8312-5A4E10D053B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8987151-0901-4547-B750-5DC470BB9CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"53E60BCC-6D1C-489E-9F3B-9BE42B46704F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66A87ED8-9E1F-4C2C-B806-A41765081C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C795D86F-9B08-41FE-B82B-5BBB3DE6357D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"2637D552-4A3D-4867-B52A-ACCED8681AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CC237C8-CFE0-4128-B549-93CD16894E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*","matchCriteriaId":"6B8EA79A-8426-44CF-AF13-58F7EF8B6D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"367A5D46-0FF3-4140-9478-251363822E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CAA58EE9-05C7-4395-A8A4-5F54BE4C5DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C656A621-BE62-4BB8-9B25-A3916E60FA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F8DE4889-424F-4A44-8C14-9F18821CE961"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*","matchCriteriaId":"82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*","matchCriteriaId":"1003D688-3EEA-45F9-BB2C-5BAB395D7678"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED69BEB9-8D83-415B-826D-9D17FB67976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9AE678D7-812D-4C55-91B0-F3AC6BE0CD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"098458D4-635B-4A4D-9472-39370094E1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BCDB64E5-AE26-43DF-8A66-654D5D22A635"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9D75F1-8333-43DE-A08B-142E4C5899D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6BF63077-4E98-497D-8CE6-B84B022DB21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*","matchCriteriaId":"FCEAEDEB-0EE7-4221-B9B8-65438580D331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*","matchCriteriaId":"78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*","matchCriteriaId":"F610FFD5-DF37-4075-AE8B-8D89DF6205A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*","matchCriteriaId":"D093FD25-94C8-49B8-A452-438023BFB105"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*","matchCriteriaId":"3346E7D0-D7EF-4182-BD86-837F14EEB9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*","matchCriteriaId":"150F1B28-0FAB-4880-B1D5-7F244A1C4D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2FE7EA3B-3BF8-4696-9488-78506074D62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=257523","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=109698896104418&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12526","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200409-26.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/460528","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11179","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17376","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9745","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=257523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=109698896104418&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109900315219363&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200409-26.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/460528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9745","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0909","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enablePrivilege parameter, then modify the meaning of certain security-relevant dialog messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*","matchCriteriaId":"BA58BA23-4CFE-40F8-A2F4-104007E12E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"22F00276-9071-4B96-B49C-2E0898476874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EB84CC9B-346B-4AF4-929E-D56D85960103"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9420CD82-0E5F-4486-9AF8-9DCD6ED7E037"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"0A9C79AB-4ABE-49E6-BAB2-94610AE0316F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"04DE7CCB-79B8-4F9B-AC14-E4A100F9E473"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"1444C77E-FF98-40E5-9CA9-B4C71B3C9304"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3B40771F-30CB-45D0-9EDE-1F13852085B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"47315EC4-1EED-4070-A087-8E37C8FE6703"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"9F1EB38F-CEB2-40BC-AA5D-CC539F597137"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*","matchCriteriaId":"EE6B0681-B96F-405C-8042-1BF2DDB41648"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*","matchCriteriaId":"5436BBD2-E3FF-4558-B8F5-FFF5CA9FC045"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A76ACC55-754D-4501-8312-5A4E10D053B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8987151-0901-4547-B750-5DC470BB9CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"53E60BCC-6D1C-489E-9F3B-9BE42B46704F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66A87ED8-9E1F-4C2C-B806-A41765081C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C795D86F-9B08-41FE-B82B-5BBB3DE6357D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"2637D552-4A3D-4867-B52A-ACCED8681AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CC237C8-CFE0-4128-B549-93CD16894E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*","matchCriteriaId":"6B8EA79A-8426-44CF-AF13-58F7EF8B6D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"367A5D46-0FF3-4140-9478-251363822E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CAA58EE9-05C7-4395-A8A4-5F54BE4C5DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C656A621-BE62-4BB8-9B25-A3916E60FA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F8DE4889-424F-4A44-8C14-9F18821CE961"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*","matchCriteriaId":"82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*","matchCriteriaId":"1003D688-3EEA-45F9-BB2C-5BAB395D7678"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED69BEB9-8D83-415B-826D-9D17FB67976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9AE678D7-812D-4C55-91B0-F3AC6BE0CD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"098458D4-635B-4A4D-9472-39370094E1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BCDB64E5-AE26-43DF-8A66-654D5D22A635"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9D75F1-8333-43DE-A08B-142E4C5899D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6BF63077-4E98-497D-8CE6-B84B022DB21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*","matchCriteriaId":"FCEAEDEB-0EE7-4221-B9B8-65438580D331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*","matchCriteriaId":"78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*","matchCriteriaId":"F610FFD5-DF37-4075-AE8B-8D89DF6205A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*","matchCriteriaId":"D093FD25-94C8-49B8-A452-438023BFB105"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*","matchCriteriaId":"3346E7D0-D7EF-4182-BD86-837F14EEB9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*","matchCriteriaId":"150F1B28-0FAB-4880-B1D5-7F244A1C4D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2FE7EA3B-3BF8-4696-9488-78506074D62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"EDA6C390-9BA7-4355-8C0A-CD68FF6AC236"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"0C75B125-E5BB-49A0-B12D-6CF40D8A5DB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"70DDB53E-7A12-4A08-8999-DB68E6DF901E"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=253942","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109698896104418&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12526","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200409-26.xml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/113192","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17377","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=253942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109698896104418&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200409-26.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/113192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_36_mozilla.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0910","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2023-11-07T01:56:50.007","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-0815.  Reason: This candidate is a reservation duplicate of CVE-2004-0815.  Notes: All CVE users should reference CVE-2004-0815 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-0911","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service (free of an invalid pointer), a different vulnerability than CVE-2001-0554."},{"lang":"es","value":"telnetd de netkit 0.17 y anteriores y posiblemente otras versiones, en Debian GNU/Linux, permite a atacantes remotos causar una denegación de servicio (liberación de puntero no válido), una vulnerabilidad distinta de CVE-2001-0554."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:netkit:*:*:*:*:*:*:*:*","versionEndIncluding":"0.17","matchCriteriaId":"92C56403-8DFF-4794-B41D-852AF58EF87D"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=273694","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-556","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/375743","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17540","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=273694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/375743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17540","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0913","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in ecartis 0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8 allows attackers in the same domain to gain administrator privileges and modify configuration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:0.129a:*:*:*:*:*:*:*","matchCriteriaId":"A87257AF-FEA6-4867-ADD5-82C1F8C67335"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-01-21:*:*:*:*:*:*:*","matchCriteriaId":"2C9FD55B-466F-4385-AF88-E341B7C5A32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-01-25:*:*:*:*:*:*:*","matchCriteriaId":"240D0A65-FC01-4B21-9821-A786F5677785"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-04-27:*:*:*:*:*:*:*","matchCriteriaId":"15988607-F73A-43B5-A765-0C541B0B9202"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-05-14:*:*:*:*:*:*:*","matchCriteriaId":"09214051-94B6-479E-B2A5-0F199125FD6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2002-10-13:*:*:*:*:*:*:*","matchCriteriaId":"04B0915A-769D-4ACF-8420-D79C316EC9F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2003-02-27:*:*:*:*:*:*:*","matchCriteriaId":"8FF5BCC2-A124-48C5-8A6E-87B1B66C3688"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2003-03-03:*:*:*:*:*:*:*","matchCriteriaId":"B0DFE95E-D0DF-45A9-8CBD-67283D4BDE2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2003-03-09:*:*:*:*:*:*:*","matchCriteriaId":"A67A8419-5AB7-4B1E-AA55-2F49E467F0AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2003-03-12:*:*:*:*:*:*:*","matchCriteriaId":"DAB5699E-D5E0-4623-ABA7-72E0F984CE4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2003-03-18:*:*:*:*:*:*:*","matchCriteriaId":"38772C64-A622-4772-AF7A-9C7E39FFF00C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2003-04-16:*:*:*:*:*:*:*","matchCriteriaId":"71A351F2-6465-44C3-925E-89DFDE1F53C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ecartis:ecartis:1.0.0_snapshot_2003-04-17:*:*:*:*:*:*:*","matchCriteriaId":"652672CE-AAE6-4B3D-BB2A-CCC84C62599A"}]}]}],"references":[{"url":"http://secunia.com/advisories/12918/","source":"cve@mitre.org"},{"url":"http://www.auscert.org.au/render.html?it=4491","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2004/dsa-572","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11487","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17809","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12918/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.auscert.org.au/render.html?it=4491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2004/dsa-572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17809","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0919","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The syscons CONS_SCRSHOT ioctl in FreeBSD 5.x allows local users to read arbitrary kernel memory via (1) negative coordinates or (2) large coordinates."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*","matchCriteriaId":"3B13D898-C1B6-44B9-8432-7DDB8A380E9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*","matchCriteriaId":"51A612F6-E4EB-4E34-8F55-79E16C74758E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*","matchCriteriaId":"5C19B266-8FE7-49ED-8678-2D522257491D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*","matchCriteriaId":"15C4D826-A419-45F5-B91C-1445DB480916"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*","matchCriteriaId":"0D9F2B04-A1F2-4788-A53D-C8274A758DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*","matchCriteriaId":"FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*","matchCriteriaId":"9A5309ED-D84F-4F52-9864-5B0FEEEE5022"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*","matchCriteriaId":"C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*","matchCriteriaId":"8E4BC012-ADE4-468F-9A25-261CD8055694"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:15.syscons.asc","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/12722","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/969078","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11321","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17584","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:15.syscons.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/12722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/969078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17584","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0920","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Norton AntiVirus 2004, and earlier versions, allows a virus or other malicious code to avoid detection or cause a denial of service (application crash) using a filename containing an MS-DOS device name."},{"lang":"es","value":"Symantec Norton Antivirus 2004 y versiones anteriores permiten a un virus u otro código malicioso evitar ser detectados o causar una denegación de servicio (caída de aplicación) usando un nombre de fichero que contenga un nombre de dispositivo de MS-DOS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:*:*:ms_exchange:*:*:*:*:*","versionEndIncluding":"2.1","matchCriteriaId":"70DA2338-5D60-47B7-A1E7-2E05E3DFDDB6"}]}]}],"references":[{"url":"http://www.idefense.com/application/poi/display?id=147&type=vulnerabilities","source":"cve@mitre.org"},{"url":"http://www.seifried.org/security/advisories/kssa-010.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17603","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=147&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.seifried.org/security/advisories/kssa-010.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17603","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0928","sourceIdentifier":"cve@mitre.org","published":"2004-10-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in \";.cfm\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:cosminexus_enterprise:01_01_1:*:enterprise:*:*:*:*:*","matchCriteriaId":"891FA9C7-424C-4362-AEF7-E7A56FA7BF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:cosminexus_enterprise:01_01_1:*:standard:*:*:*:*:*","matchCriteriaId":"9FB3092D-DC29-440E-8A62-B0352AECDC9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:cosminexus_enterprise:01_02_2:*:enterprise:*:*:*:*:*","matchCriteriaId":"1AA9C36C-CF0A-46D1-B74D-BF33BEFABADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:cosminexus_enterprise:01_02_2:*:standard:*:*:*:*:*","matchCriteriaId":"761C4CAD-4364-4BD9-BD4B-BC430D428D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:cosminexus_server:web_01-01_1:*:*:*:*:*:*:*","matchCriteriaId":"B580CCB0-BDBC-4048-AA4C-E2330801E6F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:cosminexus_server:web_01-01_2:*:*:*:*:*:*:*","matchCriteriaId":"C5E388BD-09D5-494B-98DD-DF30EA9F26A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B79C39FD-D9A0-4CA4-BF37-D94D9F20E4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:*:*:*:*:*:*","matchCriteriaId":"B2C65BE0-32FA-4D51-AA2B-E7D630470D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4361030D-230A-45CD-AC84-9603DADC75BC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109621995623823&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12638/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12647/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=148&type=vulnerabilities","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/977440","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-09.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11245","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17484","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109621995623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12638/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12647/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=148&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/977440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-09.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17484","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0931","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service (crash) via an HTTP request to webdbm with high ASCII values in the Server field, which triggers an assert error in the IsAscii7 function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:maxdb:7.5.00.08:*:*:*:*:*:*:*","matchCriteriaId":"A2635818-D83B-4C7A-9693-4EB202DA16AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:maxdb:7.5.00.11:*:*:*:*:*:*:*","matchCriteriaId":"D28E5409-B8F1-4A9E-9A1E-0B023E5190DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:maxdb:7.5.00.12:*:*:*:*:*:*:*","matchCriteriaId":"67E23371-678E-476B-B067-FCD655861CE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:maxdb:7.5.00.14:*:*:*:*:*:*:*","matchCriteriaId":"0C6C9B28-F515-4F47-83F6-F2D4164B8D83"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:maxdb:7.5.00.15:*:*:*:*:*:*:*","matchCriteriaId":"160A9738-B169-4022-85BC-14B0BBFD1C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:mysql:maxdb:7.5.00.16:*:*:*:*:*:*:*","matchCriteriaId":"F8442206-133D-4048-8064-D5724FDF0E04"}]}]}],"references":[{"url":"http://www.idefense.com/application/poi/display?id=150&type=vulnerabilities&flashstatus=false","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10532","source":"cve@mitre.org"},{"url":"http://www.secunia.com/advisories/12756","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11346","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17633","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=150&type=vulnerabilities&flashstatus=false","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secunia.com/advisories/12756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17633","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0938","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Secret attribute without the required leading packet."},{"lang":"es","value":"FreeRADIUS anteriores a 1.0.1 permite a atacantes remotos causar una denegación de servicio (caída del servidor) enviando un atributo Ascend-Send-Secret sin el paquete de encabezado requerido."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"931095C5-0533-4126-A574-9544C6F158BB"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200409-29.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/541574","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/10178","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11222","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17440","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10837","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1347","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200409-29.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/541574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/10178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0943","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:50.467","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-0944","sourceIdentifier":"cve@mitre.org","published":"2004-02-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:mitel:mitel_3300_integrated_communication_platform:*:*:*:*:*:*:*:*","matchCriteriaId":"053399C7-5B17-4EEE-8FA2-687874BDE1FB"}]}]}],"references":[{"url":"http://www.corsaire.com/advisories/c040817-002.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mitel.com/DocController?documentId=14223","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.niscc.gov.uk/niscc/docs/re-20050228-00178.pdf?lang=en","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.corsaire.com/advisories/c040817-002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mitel.com/DocController?documentId=14223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.niscc.gov.uk/niscc/docs/re-20050228-00178.pdf?lang=en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-0948","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:50.537","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  It was a duplicate assignment before public disclosure.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-0951","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:ignite-ux:c.6.2.241:*:*:*:*:*:*:*","matchCriteriaId":"EFC35863-CE47-4B45-900E-D50091E437FF"}]}]}],"references":[{"url":"http://secunia.com/advisories/16456/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1014711","source":"cve@mitre.org"},{"url":"http://www.corsaire.com/advisories/c041123-001.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/14568","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21858","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/16456/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1014711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.corsaire.com/advisories/c041123-001.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/14568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21858","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0952","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*","matchCriteriaId":"D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=112420609211136&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=112422597529112&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=112422597529112&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/16456/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1014711","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21857","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5775","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=112420609211136&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=112422597529112&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=112422597529112&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/16456/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1014711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5775","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0954","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2023-11-07T01:56:50.610","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-0597.  Reason: This candidate is a reservation duplicate of CVE-2004-0597.  Notes: All CVE users should reference CVE-2004-0597 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-0955","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2023-11-07T01:56:50.650","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-0599.  Reason: This candidate is a reservation duplicate of CVE-2004-0599 (the first item listed in that candidate).  Notes: All CVE users should reference CVE-2004-0599 instead of this candidate.  All references and descriptions have been removed from this candidate to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-0958","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length."},{"lang":"es","value":"PHP anteriores a 5.0.2 permiten a atacantes remotos leer contenidos de memoria sensibles mediante variables (1) GET, (2) POST, o (3) COOKIE GPC que acaban en un carácter de apertura de corchete."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.2","matchCriteriaId":"EAE1CCE0-7682-40EA-A858-DD09A3E32AF7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0053.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109527531130492&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12560/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011279","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-687.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2344","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17393","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10863","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0053.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109527531130492&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12560/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-687.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10863","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0959","sourceIdentifier":"cve@mitre.org","published":"2004-11-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the \"$_FILES\" array to be modified."},{"lang":"es","value":"PHP anteriores a 5.0.2 permiten a usuarios locales subir ficheros a sitios de su elección mediante un script PHP con una cierta cabecera que hace que el array  $_FILES sea modificado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.2","matchCriteriaId":"EAE1CCE0-7682-40EA-A858-DD09A3E32AF7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0054.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109534848430404&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12560/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011307","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-687.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2344","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17392","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10961","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0054.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109534848430404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12560/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-687.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10961","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0973","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2023-11-07T01:56:50.880","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-0457.  Reason: This candidate is a reservation duplicate of CVE-2004-0457.  Notes: All CVE users should reference CVE-2004-0457 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-0979","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer on Windows XP does not properly modify the \"Drag and Drop or copy and paste files\" setting when the user sets it to \"Disable\" or \"Prompt,\" which may enable security-sensitive operations that are inconsistent with the user's intended configuration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*","matchCriteriaId":"B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*","matchCriteriaId":"403945FA-8676-4D98-B903-48452B46F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*","matchCriteriaId":"B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*","matchCriteriaId":"ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*","matchCriteriaId":"6A05337E-18A5-4939-85A0-69583D9B5AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*","matchCriteriaId":"E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*","matchCriteriaId":"7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*","matchCriteriaId":"FB2BE2DE-7B06-47ED-A674-15D45448F357"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/630720","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17820","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/630720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-293A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17820","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0984","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the dotlock implementation in mailutils before 1:0.5-4 on Debian GNU/Linux allows attackers to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailutils:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.5.4","matchCriteriaId":"64DCFB80-3247-46D4-AE1A-E75699A720C5"}]}]}],"references":[{"url":"http://packages.debian.org/changelogs/pool/main/m/mailutils/mailutils_0.6-2/changelog","source":"cve@mitre.org"},{"url":"http://packages.debian.org/changelogs/pool/main/m/mailutils/mailutils_0.6-2/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0985","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable file type such as .xml, .doc, .py, .cdf, .css, .pdf, or .ppt, and using ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109829111200055&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109830296130857&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=109828076802478&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17824","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109829111200055&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109830296130857&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=109828076802478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0997","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is addressed in the following product release:\r\nLinux, Linux kernel, 2.4.17","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the ptrace MIPS assembly code in Linux kernel 2.4 before 2.4.17 allows local users to gain privileges via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"}]}]}],"references":[{"url":"http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/20162","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20163","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20202","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20338","source":"cve@mitre.org"},{"url":"http://svn.debian.org/wsvn/kernel/patch-tracking/CVE-2004-0997?op=file&rev=0&sc=0","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/18176","source":"cve@mitre.org"},{"url":"http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/20162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/20338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.debian.org/wsvn/kernel/patch-tracking/CVE-2004-0997?op=file&rev=0&sc=0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/18176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0998","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:telnetd:telnetd:0.17.18:*:*:*:*:*:*:*","matchCriteriaId":"A5CED575-C954-4FB2-88C0-7468A908F2B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:telnetd:telnetd:0.17.25:*:*:*:*:*:*:*","matchCriteriaId":"8E5F8F48-DEB4-4D61-B640-6C15E5F890DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:telnetd:telnetd-ssl:0.17.17_0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"50A292C0-481D-41F2-92E0-51BEEE48F2E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:telnetd:telnetd-ssl:0.17.17_0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"E197C7CD-E42A-43F7-B41E-7B138ED23402"},{"vulnerable":true,"criteria":"cpe:2.3:a:telnetd:telnetd-ssl:0.17.17_0.1.2:*:woody1:*:*:*:*:*","matchCriteriaId":"D125D0D8-75FB-481A-825A-562E269279F5"}]}]}],"references":[{"url":"http://secunia.com/advisories/13663","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-616","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/995038","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18654","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13663","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/995038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18654","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-0999","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"zgv 5.5.3 allows remote attackers to cause a denial of service (application crash via segmentation fault) via crafted multiple-image (animated) GIF images."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zgv:zgv_image_viewer:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"635CBAAC-2C24-4797-BF91-DBFE3D1F2A63"},{"vulnerable":true,"criteria":"cpe:2.3:a:zgv:zgv_image_viewer:5.6:*:*:*:*:*:*:*","matchCriteriaId":"128641DC-20B7-465D-838F-A266E2B1BF24"},{"vulnerable":true,"criteria":"cpe:2.3:a:zgv:zgv_image_viewer:5.7:*:*:*:*:*:*:*","matchCriteriaId":"9BC55295-62B4-468F-B7E2-C1ABEE22C79A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zgv:zgv_image_viewer:5.8:*:*:*:*:*:*:*","matchCriteriaId":"44F5A51B-E3BC-4479-91FE-5F37FD3CEF30"}]}]}],"references":[{"url":"http://www.debian.org/security/2004/dsa-608","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11915","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18480","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18480","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1000","sourceIdentifier":"cve@mitre.org","published":"2004-01-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:lintian:1.2_0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"B3025B87-D737-459E-81F2-481C177F2562"}]}]}],"references":[{"url":"http://secunia.com/advisories/13771","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2004/dsa-630","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18808","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2004/dsa-630","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18808","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1017","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple \"overflows\" in the io_edgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"}]}]}],"references":[{"url":"http://secunia.com/advisories/19374","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20162","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20163","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20202","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20338","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1017","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-689.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-016.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-017.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12102","source":"cve@mitre.org"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2336","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18433","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9786","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/19374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1017","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-689.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9786","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1043","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the \"Related Topics\" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as demonstrated using \"writehta.txt\" and the ADODB recordset, which saves a .HTA file to the local system, aka the \"HTML Help ActiveX control Cross Domain Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*","matchCriteriaId":"FB2BE2DE-7B06-47ED-A674-15D45448F357"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-12/0426.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/972415","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-012B.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-001","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18311","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1349","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1963","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2830","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3496","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-12/0426.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/972415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-012B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1349","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3496","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1049","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the \"Cursor and Icon Format Handling Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*","matchCriteriaId":"330B6798-5380-44AD-9B52-DF5955FA832C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:*:*:*:*:*:*:*:*","matchCriteriaId":"ED27882B-A02A-4D5F-9117-A47976C676E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*","matchCriteriaId":"B9687E6C-EDE9-42E4-93D0-C4144FEC917A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110382891718076&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13645","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1012684","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/p-094.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/625856","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/12623","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12095","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-012A.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.xfocus.net/flashsky/icoExp/index.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18668","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2956","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3097","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3220","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3355","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4671","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110382891718076&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13645","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1012684","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/p-094.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/625856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/12623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12095","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-012A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.xfocus.net/flashsky/icoExp/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2956","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3097","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3355","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1050","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka \"the IFRAME vulnerability\" or the \"HTML Elements Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip600_media_servers:*:*:*:*:*:*:*:*","matchCriteriaId":"9692F8E9-E8E9-43A8-87D5-F2409333F8CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip600_media_servers:r6:*:*:*:*:*:*:*","matchCriteriaId":"421DCFC1-D1DF-4081-96C1-A1FA69632B40"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip600_media_servers:r7:*:*:*:*:*:*:*","matchCriteriaId":"8AB4E5D4-712A-4F8B-9571-23C5841FE653"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip600_media_servers:r8:*:*:*:*:*:*:*","matchCriteriaId":"0B61857E-9B4A-480B-8381-4C1213063D8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip600_media_servers:r9:*:*:*:*:*:*:*","matchCriteriaId":"E9AF988E-D84B-4F47-BBF6-E08C6615E838"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip600_media_servers:r10:*:*:*:*:*:*:*","matchCriteriaId":"74D156F2-E2BD-4E72-9776-21BCC3B3EC3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip600_media_servers:r11:*:*:*:*:*:*:*","matchCriteriaId":"CC8CC2A7-E209-45FC-B4F7-83FAD79E2452"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:ip600_media_servers:r12:*:*:*:*:*:*:*","matchCriteriaId":"18CBDA7C-1E0E-470C-A740-807C559FBA43"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:definity_one_media_server:*:*:*:*:*:*:*:*","matchCriteriaId":"88301496-BED2-45EB-BF19-5F5BF2957373"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:definity_one_media_server:r6:*:*:*:*:*:*:*","matchCriteriaId":"8EB98D81-7F43-46BD-9713-C1036F123ECF"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:definity_one_media_server:r7:*:*:*:*:*:*:*","matchCriteriaId":"F71B32E1-650F-48F6-B04A-F54B5CB12FFF"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:definity_one_media_server:r8:*:*:*:*:*:*:*","matchCriteriaId":"9C7A48D2-7CDB-40DE-95C0-EDF6CDDF7A80"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:definity_one_media_server:r9:*:*:*:*:*:*:*","matchCriteriaId":"F67BC930-C6D3-40FC-A44F-49A3A6E9B016"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:definity_one_media_server:r10:*:*:*:*:*:*:*","matchCriteriaId":"6469B5B2-9939-4163-A6C9-CC50D3358401"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:definity_one_media_server:r11:*:*:*:*:*:*:*","matchCriteriaId":"DCB9EF69-E099-4908-AC09-EE2811E39F55"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:definity_one_media_server:r12:*:*:*:*:*:*:*","matchCriteriaId":"D3129813-C6BA-48B1-944B-D34D7A0F0F21"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s3400:*:*:*:*:*:*:*:*","matchCriteriaId":"BCB0BA4C-BA48-4DDA-917E-9EA9E04A898F"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8100:*:*:*:*:*:*:*:*","matchCriteriaId":"1D190CA6-7807-4361-8FB8-C015B21E66B1"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8100:r6:*:*:*:*:*:*:*","matchCriteriaId":"F28E0D07-ED87-44D0-A771-FB5C9D5CA32E"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8100:r7:*:*:*:*:*:*:*","matchCriteriaId":"0F01F490-DA2A-4C89-9C9A-1B2B1CFF8849"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8100:r8:*:*:*:*:*:*:*","matchCriteriaId":"F867CCDD-DDAC-4802-8AE3-9CEDB7F0FDF3"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8100:r9:*:*:*:*:*:*:*","matchCriteriaId":"FD501EF0-7531-47DD-A4A8-1F3790401A55"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8100:r10:*:*:*:*:*:*:*","matchCriteriaId":"7DC0D2D7-B6E2-40D3-8830-E0AF518253E7"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8100:r11:*:*:*:*:*:*:*","matchCriteriaId":"436EF2B4-B365-4307-B345-24527D7B5909"},{"vulnerable":true,"criteria":"cpe:2.3:h:avaya:s8100:r12:*:*:*:*:*:*:*","matchCriteriaId":"1562F7ED-5821-43AA-92CE-9BD7E67A47F8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:s3400:*:*:*:*:*:*:*","matchCriteriaId":"9BFF29C7-E5AA-44EB-B1A9-602B3692D893"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109942758911846&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12959/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/842160","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/379261","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11515","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-315A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-336A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17889","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109942758911846&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12959/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/842160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/379261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-315A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-336A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17889","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1294","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1059","sourceIdentifier":"cve@mitre.org","published":"2004-12-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) next and (2) prev result search pages, and the (3) extended and (4) simple search forms."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.1.19:*:*:*:*:*:*:*","matchCriteriaId":"4E0B5216-258D-4BBA-B913-165CB40778D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.1.20:*:*:*:*:*:*:*","matchCriteriaId":"B8634099-098D-4EFE-BC5F-D27ED33B1DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.10:*:*:*:*:*:*:*","matchCriteriaId":"3E28A4BE-4345-45E0-954C-A6A38E99C1E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.13:*:*:*:*:*:*:*","matchCriteriaId":"07F268F1-379F-4462-86EC-F2161249E23F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.14:*:*:*:*:*:*:*","matchCriteriaId":"630B6DAB-787C-49E7-AD48-3CF7AB372541"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.15:*:*:*:*:*:*:*","matchCriteriaId":"DC0B97DE-941B-468A-8B32-424C6B6CCA73"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.16:*:*:*:*:*:*:*","matchCriteriaId":"7B8A5A71-CC7A-441D-88EB-E75476EB5139"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.17:*:*:*:*:*:*:*","matchCriteriaId":"F6405908-8877-4DC2-BA98-42FFEF6D3562"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.18:*:*:*:*:*:*:*","matchCriteriaId":"C16498CA-04E6-4B90-8E3D-7042B7658A30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.19:*:*:*:*:*:*:*","matchCriteriaId":"B2BEAA1B-6000-4F4F-8078-A92B3A4F88C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.20:*:*:*:*:*:*:*","matchCriteriaId":"F01BBF30-C067-4EFD-B729-626DBEE0A83B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.21:*:*:*:*:*:*:*","matchCriteriaId":"8DF71593-0430-4DBE-A148-ACE0323EB390"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.22:*:*:*:*:*:*:*","matchCriteriaId":"01E1E277-DF1C-4E34-85C8-32D11D12BA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.23:*:*:*:*:*:*:*","matchCriteriaId":"CFCBB03D-169C-4076-B392-92053D669FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.24:*:*:*:*:*:*:*","matchCriteriaId":"1FDF2F47-A2F3-4DEF-A672-1FA9AD86007C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.25:*:*:*:*:*:*:*","matchCriteriaId":"43ABF9A1-430F-41CB-AA26-2BC02DF3FD62"},{"vulnerable":true,"criteria":"cpe:2.3:a:mnogosearch:mnogosearch:3.2.26:*:*:*:*:*:*:*","matchCriteriaId":"898CAFB1-1871-4EDB-A4D6-B49BA29F851E"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mikx.de/index.php?p=6","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mnogosearch.org/history.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11895","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18434","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mikx.de/index.php?p=6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mnogosearch.org/history.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1060","sourceIdentifier":"cve@mitre.org","published":"2004-04-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP (\"Fragmentation Needed and Don't Fragment was Set\") packets with a low next-hop MTU value, aka the \"Path MTU discovery attack.\"  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icmp:icmp:*:*:*:*:*:*:*:*","matchCriteriaId":"9901115C-83D3-491B-A8CC-32CC54388215"},{"vulnerable":true,"criteria":"cpe:2.3:a:tcp:tcp:*:*:*:*:*:*:*:*","matchCriteriaId":"A2E69CF1-D657-4511-8726-D122211B9002"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.4/SCOSA-2006.4.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=112861397904255&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=112861397904255&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=112861397904255&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/18317","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/19","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/57","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20050412-icmp.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/418882/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/13124","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/niscc/docs/al-20050412-00308.html?lang=en","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A181","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A196","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2188","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3826","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A405","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5386","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A651","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A780","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A899","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.4/SCOSA-2006.4.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=112861397904255&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=112861397904255&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=112861397904255&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/18317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/19","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/57","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20050412-icmp.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/418882/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/13124","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/niscc/docs/al-20050412-00308.html?lang=en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A196","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A899","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1062","sourceIdentifier":"cve@mitre.org","published":"2004-12-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:viewcvs:viewcvs:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"BFD8A138-B02C-461D-82DB-0F1670E98484"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200412-26.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mikx.de/index.php?p=6","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2005_01_sr.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18718","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200412-26.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mikx.de/index.php?p=6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2005_01_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18718","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1077","sourceIdentifier":"cve@mitre.org","published":"2004-04-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:metaframe_client:8.0:*:win-ce:*:*:*:*:*","matchCriteriaId":"629FE868-D647-4404-8F9C-3234BFC13980"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:program_neighborhood_agent:8.0:*:win32:*:*:*:*:*","matchCriteriaId":"2D320E80-C5C3-414F-8B0B-01AED6FD40F1"}]}]}],"references":[{"url":"http://secunia.com/advisories/15108","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.citrix.com/kb/entry.jspa?externalID=CTX105650","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=237&type=vulnerabilities","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/15108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.citrix.com/kb/entry.jspa?externalID=CTX105650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=237&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-1078","sourceIdentifier":"cve@mitre.org","published":"2004-04-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName XML element."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:metaframe_client:8.0:*:win-ce:*:*:*:*:*","matchCriteriaId":"629FE868-D647-4404-8F9C-3234BFC13980"},{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:program_neighborhood_agent:8.0:*:win32:*:*:*:*:*","matchCriteriaId":"2D320E80-C5C3-414F-8B0B-01AED6FD40F1"}]}]}],"references":[{"url":"http://secunia.com/advisories/15108","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.citrix.com/kb/entry.jspa?externalID=CTX105650","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=238&type=vulnerabilities","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/15108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.citrix.com/kb/entry.jspa?externalID=CTX105650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=238&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-1081","sourceIdentifier":"cve@mitre.org","published":"2004-12-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure text input field, which allows local users to read keyboard input from other applications within the same window session."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"74BCDEA0-2F69-4411-98C5-29C3C0533BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CCC88BC5-0CA9-4B24-ACBD-14A4762A8252"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime_streaming_server:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"583E3DC3-86AB-4E91-B464-18FFBC436A82"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13362/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11802","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18350","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13362/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1082","sourceIdentifier":"cve@mitre.org","published":"2004-02-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"28EC1F94-04F3-490A-8324-1EB60EEBAD4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"30D94958-0D13-4076-B6F0-61D505136789"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B22DA22E-54DA-46CF-B3AE-4B0900D8086A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F90F496A-5D57-448F-A46F-E15F06CBFD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"89B58983-633F-4D20-80AE-8E7EB865CF83"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.7:*:dev:*:*:*:*:*","matchCriteriaId":"34FD94C9-2352-4147-9BF2-A3CF841A159B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"19C8989C-D8A6-4AE9-99B6-F2DAE5999EB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"7B6EE0E2-D608-4E72-A0E5-F407511405C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"33FD6791-3B84-40CA-BCF4-B5637B172F2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*","matchCriteriaId":"6DDD2F69-CFD4-4DEA-B43A-1337EEFA95A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*","matchCriteriaId":"0A80B17D-FD66-40BD-9ADC-FE7A3944A696"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*","matchCriteriaId":"713ADED4-CBE5-40C3-A128-99CFABF24560"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"70FA0B8E-1A90-4939-871A-38B9E93BCCC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*","matchCriteriaId":"83BDEAE5-29B9-48E3-93FA-F30832044C9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.22:*:*:*:*:*:*:*","matchCriteriaId":"A2720E06-1B0E-4BFE-8C85-A17E597BB151"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.23:*:*:*:*:*:*:*","matchCriteriaId":"3EE1DECF-36C7-4968-8B7A-7A2034C2A957"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.24:*:*:*:*:*:*:*","matchCriteriaId":"B67BD173-8517-4E97-BC65-D9657C63601A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.25:*:*:*:*:*:*:*","matchCriteriaId":"B392A96F-FD2F-4073-8EED-EB31E1F20FE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.26:*:*:*:*:*:*:*","matchCriteriaId":"E130104B-86F5-411E-8AC0-9B4B780BCA00"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.27:*:*:*:*:*:*:*","matchCriteriaId":"0E62E621-74DA-4D99-A79C-AD2B85896A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.28:*:*:*:*:*:*:*","matchCriteriaId":"2C577188-BD56-4571-A61A-1684DC9E9DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.29:*:*:*:*:*:*:*","matchCriteriaId":"5B3A4CD9-1E96-4D3B-938D-F2D15855B0DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:apache_mod_digest_apple:*:*:*:*:*:*:*:*","matchCriteriaId":"BB39F9C4-7783-451E-B83D-401EF043F678"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:1.1:*:*:*:*:*:*:*","matchCriteriaId":"497884DB-EF7C-4FC1-99A8-581A0348A57C"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A0EC54C7-5358-4C80-8202-378050B255FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CE74E0BF-739A-41A4-894C-A9B4BA23CAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:communication_manager:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"6372F030-0069-4994-9F79-7D99F39945CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix_lx:*:*:*:*:*:*:*:*","matchCriteriaId":"12D21889-2F4E-460B-AA92-4E910B7CBBDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:virtualvault:4.5:*:*:*:*:*:*:*","matchCriteriaId":"2609CA23-B892-428D-93D1-D210B8D5741D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:virtualvault:4.6:*:*:*:*:*:*:*","matchCriteriaId":"129075F9-F03E-4298-8515-5A046816C7C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:virtualvault:4.7:*:*:*:*:*:*:*","matchCriteriaId":"79E7B549-B2AA-4587-84DE-ECDF4FE4BAFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:webproxy:a.02.00:*:*:*:*:*:*:*","matchCriteriaId":"35B53C86-D426-46F6-B5EE-D96517002905"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:webproxy:a.02.10:*:*:*:*:*:*:*","matchCriteriaId":"E4A8A75A-3F63-4468-8E51-AA65E4753C27"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:http_server:1.3.19:*:*:*:*:*:*:*","matchCriteriaId":"E5C3A030-EF04-4C82-BFD5-CF6459099B15"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:mn100:*:*:*:*:*:*:*:*","matchCriteriaId":"D073442B-D7E7-4E07-AF2D-E22FE65B09A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:network_routing:*:*:*:*:*:*:*:*","matchCriteriaId":"E942E0E7-0808-479C-B061-66119EBA12E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E25F5CF2-F891-41CA-A40C-13966F72FDF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7417958C-5321-41D6-9D1A-D16BF5511E81"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:current:*:*:*:*:*:*:*","matchCriteriaId":"0370727F-1E37-4B82-8969-A2AC644632E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D9D76A8D-832B-411E-A458-186733C66010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9571","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/alerts/2004/Dec/1012414.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18347","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/alerts/2004/Dec/1012414.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1083","sourceIdentifier":"cve@mitre.org","published":"2004-12-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DS_Store files and files beginning with \".ht\" using alternate capitalization."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-178"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"74BCDEA0-2F69-4411-98C5-29C3C0533BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CCC88BC5-0CA9-4B24-ACBD-14A4762A8252"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime_streaming_server:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"583E3DC3-86AB-4E91-B464-18FFBC436A82"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/13362/","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11802","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18348","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/13362/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1084","sourceIdentifier":"cve@mitre.org","published":"2004-12-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data streams in HFS+, which bypass Apache file handles."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"74BCDEA0-2F69-4411-98C5-29C3C0533BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CCC88BC5-0CA9-4B24-ACBD-14A4762A8252"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime_streaming_server:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"583E3DC3-86AB-4E91-B464-18FFBC436A82"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13362/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11802","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18349","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13362/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18349","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1085","sourceIdentifier":"cve@mitre.org","published":"2004-12-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Human Interface Toolbox (HIToolBox) for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk mode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"74BCDEA0-2F69-4411-98C5-29C3C0533BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CCC88BC5-0CA9-4B24-ACBD-14A4762A8252"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime_streaming_server:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"583E3DC3-86AB-4E91-B464-18FFBC436A82"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13362/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11802","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18352","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13362/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18352","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1086","sourceIdentifier":"cve@mitre.org","published":"2004-12-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"74BCDEA0-2F69-4411-98C5-29C3C0533BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CCC88BC5-0CA9-4B24-ACBD-14A4762A8252"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime_streaming_server:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"583E3DC3-86AB-4E91-B464-18FFBC436A82"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13362/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11802","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18354","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13362/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18354","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1087","sourceIdentifier":"cve@mitre.org","published":"2004-12-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Terminal for Apple Mac OS X 10.3.6 may indicate that \"Secure Keyboard Entry\" is enabled even when it is not, which could result in a false sense of security for the user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"74BCDEA0-2F69-4411-98C5-29C3C0533BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CCC88BC5-0CA9-4B24-ACBD-14A4762A8252"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime_streaming_server:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"583E3DC3-86AB-4E91-B464-18FFBC436A82"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13362/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11802","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18355","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13362/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18355","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1088","sourceIdentifier":"cve@mitre.org","published":"2004-12-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"74BCDEA0-2F69-4411-98C5-29C3C0533BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CCC88BC5-0CA9-4B24-ACBD-14A4762A8252"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime_streaming_server:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"583E3DC3-86AB-4E91-B464-18FFBC436A82"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13362/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11802","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18353","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13362/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18353","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1089","sourceIdentifier":"cve@mitre.org","published":"2004-12-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local users to access mailboxes of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"74BCDEA0-2F69-4411-98C5-29C3C0533BDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:darwin_streaming_server:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CCC88BC5-0CA9-4B24-ACBD-14A4762A8252"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:quicktime_streaming_server:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"583E3DC3-86AB-4E91-B464-18FFBC436A82"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13362/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11802","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18351","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13362/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-049.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18351","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1104","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor (a) element with an empty \"href\" attribute, and a FORM whose action points to a malicious URL, and an INPUT submit element that is modified to look like a legitimate URL."},{"lang":"es","value":"Microsoft Internet Explorer 6.0 SP2 permite a atacantes remotos suplantar una URL legítima en la barra de estado y realizar un ataque de 'phishing' mediante una página web que contenga un elemento BASE que apunta al sitio legítimo seguido de un elemento ancla (A) con un elemento \"href\" vacío y un elemento FORM que apunta a un sitio web malicioso, y un elemento 'INPUT' modificado para que se parezca a la URL legítima."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"}]}]}],"references":[{"url":"http://secunia.com/advisories/11273","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/702086","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/379903","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/425386/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/425883/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11565","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17938","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11273","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/702086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/379903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/425386/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/425883/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17938","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1121","sourceIdentifier":"cve@mitre.org","published":"2004-11-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A419AE8-F5A2-4E25-9004-AAAB325E201A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*","matchCriteriaId":"857C92E2-6870-409A-9457-75F8C5C7B959"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*","matchCriteriaId":"443FF271-A3AB-4659-80B2-89F771BF5371"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3112AFEB-7893-467C-8B45-A44D5697BB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1FC83309-3A97-4619-B5C1-574610838BC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"891514D5-50C8-4EDC-81C5-24ABF8BCC022"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13047/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/925430","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11573","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17909","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13047/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/925430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1124","sourceIdentifier":"cve@mitre.org","published":"2004-01-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E140F76-D078-4F58-89CF-3278CDCB9AF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D9D76A8D-832B-411E-A458-186733C66010"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"71DDB9D9-AD7B-479D-B128-7150286EE563"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.3:*:*:*:*:*:*:*","matchCriteriaId":"67E12F60-B4AF-4EF1-A4AA-5E9F0B8B0690"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"059218D3-A3AD-4A10-9AA4-FBB689321D90"}]}]}],"references":[{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.22/SCOSA-2005.22.txt","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.2/SCOSA-2005.2.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13915","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/15339","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12300","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18970","source":"cve@mitre.org"},{"url":"ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.22/SCOSA-2005.22.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.2/SCOSA-2005.2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13915","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/15339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1139","sourceIdentifier":"cve@mitre.org","published":"2004-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*","matchCriteriaId":"83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CB461B6B-B731-4732-AAD0-191BE50189D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"19961880-D38A-4785-A7C5-879A061119BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"831705D2-C4DE-475F-B908-8859064AFB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"A4622585-20E2-46E9-B773-74729FF22EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E86ADCB6-0940-4CB9-85F1-A7694210FB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"042B6289-D2E2-4369-BB40-EA6EE7025D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"F0A48938-30B8-4403-B08A-177FFCB9054B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"67B81EFD-27C1-411C-AFF3-E5340627E3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"680934CF-7F9B-41E4-AA03-ECD96F477AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"DBCCE368-64E6-4CEC-B068-9B8BA2527289"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"CF5374A4-5194-45FD-895D-B04FDC7E853C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*","matchCriteriaId":"338CEFD7-EBC0-43FB-B482-9A3D0834447E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"136FF83B-2B03-4E5F-95C1-84195BE8392A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"FB12CA01-E0EA-4E84-802F-CC52268D65FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"9704EC6E-7219-41FC-BE00-CD91A246C61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"2B93B95E-F295-468C-A6A2-5AA6DE729E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F4007B0D-9606-46BD-866A-7911BEA292BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:altlinux:alt_linux:2.3:*:compact:*:*:*:*:*","matchCriteriaId":"64BE98C2-8EFA-4349-9FE2-D62CA63A16C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:altlinux:alt_linux:2.3:*:junior:*:*:*:*:*","matchCriteriaId":"7D0AC3A3-A37C-4053-B05F-A031877AC811"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*","matchCriteriaId":"A6B060E4-B5A6-4469-828E-211C52542547"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*","matchCriteriaId":"974C3541-990C-4CD4-A05A-38FA74A84632"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*","matchCriteriaId":"6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"58792F77-B06F-4780-BA25-FE1EE6C3FDD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"C9419322-572F-4BB6-8416-C5E96541CF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*","matchCriteriaId":"BFC50555-C084-46A3-9C9F-949C5E3BB448"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*","matchCriteriaId":"9C25D6E1-D283-4CEA-B47B-60C47A5C0797"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"AD18A446-C634-417E-86AC-B19B6DDDC856"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*","matchCriteriaId":"E4BB852E-61B2-4842-989F-C6C0C901A8D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*","matchCriteriaId":"24DD9D59-E2A2-4116-A887-39E8CC2004FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*","matchCriteriaId":"F28D7457-607E-4E0C-909A-413F91CFCD82"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*","matchCriteriaId":"A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*","matchCriteriaId":"409E324A-C040-494F-A026-9DCAE01C07F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*","matchCriteriaId":"6474B775-C893-491F-A074-802AFB1FEDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*","matchCriteriaId":"84A50ED3-FD0D-4038-B3E7-CC65D166C968"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*","matchCriteriaId":"777F9EC0-2919-45CA-BFF8-78A02537C513"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*","matchCriteriaId":"37F124FE-15F1-49D7-9E03-8E036CE1A20C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/13468/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-061.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00016.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200412-15.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:152","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-037.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11943","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18484","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11319","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/13468/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-061.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200412-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1140","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill available disk space via an invalid RTP timestamp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"73117E69-715B-4779-A5D8-218E15122A66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CB461B6B-B731-4732-AAD0-191BE50189D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"19961880-D38A-4785-A7C5-879A061119BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"831705D2-C4DE-475F-B908-8859064AFB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"A4622585-20E2-46E9-B773-74729FF22EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E86ADCB6-0940-4CB9-85F1-A7694210FB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"042B6289-D2E2-4369-BB40-EA6EE7025D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"F0A48938-30B8-4403-B08A-177FFCB9054B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"67B81EFD-27C1-411C-AFF3-E5340627E3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"680934CF-7F9B-41E4-AA03-ECD96F477AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"DBCCE368-64E6-4CEC-B068-9B8BA2527289"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"CF5374A4-5194-45FD-895D-B04FDC7E853C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"CC7666DE-0AC1-483C-B96B-E57AC04094CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.0a:*:*:*:*:*:*:*","matchCriteriaId":"F3E2F07E-DE69-4458-90F3-8F1B5035C3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"136FF83B-2B03-4E5F-95C1-84195BE8392A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"FB12CA01-E0EA-4E84-802F-CC52268D65FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"9704EC6E-7219-41FC-BE00-CD91A246C61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"2B93B95E-F295-468C-A6A2-5AA6DE729E52"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13468/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/p-061.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00016.html","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200412-15.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:152","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-037.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11943","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18485","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10484","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13468/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/p-061.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200412-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18485","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10484","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1141","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application crash) via a certain packet that causes the dissector to access previously-freed memory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"136FF83B-2B03-4E5F-95C1-84195BE8392A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"FB12CA01-E0EA-4E84-802F-CC52268D65FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"9704EC6E-7219-41FC-BE00-CD91A246C61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"2B93B95E-F295-468C-A6A2-5AA6DE729E52"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13468/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/p-061.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00016.html","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200412-15.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:152","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-037.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11943","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18487","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9473","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13468/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/p-061.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200412-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-037.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18487","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9473","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1142","sourceIdentifier":"cve@mitre.org","published":"2004-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*","matchCriteriaId":"83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CB461B6B-B731-4732-AAD0-191BE50189D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"19961880-D38A-4785-A7C5-879A061119BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"831705D2-C4DE-475F-B908-8859064AFB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"A4622585-20E2-46E9-B773-74729FF22EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E86ADCB6-0940-4CB9-85F1-A7694210FB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"042B6289-D2E2-4369-BB40-EA6EE7025D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"F0A48938-30B8-4403-B08A-177FFCB9054B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"67B81EFD-27C1-411C-AFF3-E5340627E3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"680934CF-7F9B-41E4-AA03-ECD96F477AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"DBCCE368-64E6-4CEC-B068-9B8BA2527289"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"CF5374A4-5194-45FD-895D-B04FDC7E853C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*","matchCriteriaId":"338CEFD7-EBC0-43FB-B482-9A3D0834447E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"136FF83B-2B03-4E5F-95C1-84195BE8392A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"FB12CA01-E0EA-4E84-802F-CC52268D65FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"9704EC6E-7219-41FC-BE00-CD91A246C61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"2B93B95E-F295-468C-A6A2-5AA6DE729E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F4007B0D-9606-46BD-866A-7911BEA292BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:altlinux:alt_linux:2.3:*:compact:*:*:*:*:*","matchCriteriaId":"64BE98C2-8EFA-4349-9FE2-D62CA63A16C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:altlinux:alt_linux:2.3:*:junior:*:*:*:*:*","matchCriteriaId":"7D0AC3A3-A37C-4053-B05F-A031877AC811"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*","matchCriteriaId":"A6B060E4-B5A6-4469-828E-211C52542547"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*","matchCriteriaId":"974C3541-990C-4CD4-A05A-38FA74A84632"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*","matchCriteriaId":"6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"58792F77-B06F-4780-BA25-FE1EE6C3FDD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"C9419322-572F-4BB6-8416-C5E96541CF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*","matchCriteriaId":"BFC50555-C084-46A3-9C9F-949C5E3BB448"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*","matchCriteriaId":"9C25D6E1-D283-4CEA-B47B-60C47A5C0797"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"AD18A446-C634-417E-86AC-B19B6DDDC856"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*","matchCriteriaId":"E4BB852E-61B2-4842-989F-C6C0C901A8D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*","matchCriteriaId":"24DD9D59-E2A2-4116-A887-39E8CC2004FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*","matchCriteriaId":"F28D7457-607E-4E0C-909A-413F91CFCD82"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*","matchCriteriaId":"A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*","matchCriteriaId":"409E324A-C040-494F-A026-9DCAE01C07F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*","matchCriteriaId":"6474B775-C893-491F-A074-802AFB1FEDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*","matchCriteriaId":"84A50ED3-FD0D-4038-B3E7-CC65D166C968"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*","matchCriteriaId":"777F9EC0-2919-45CA-BFF8-78A02537C513"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*","matchCriteriaId":"37F124FE-15F1-49D7-9E03-8E036CE1A20C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/13468/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-061.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-613","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00016.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200412-15.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:152","source":"cve@mitre.org"},{"url":"http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-037.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11943","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18488","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11278","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/13468/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-061.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200412-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-037.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18488","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1143","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The password generation in mailman before 2.1.5 generates only 5 million unique passwords, which makes it easier for remote attackers to guess passwords via a brute force attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:1.0:*:*:*:*:*:*:*","matchCriteriaId":"46CF8999-445E-4E03-89F1-81669F9F93D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:1.1:*:*:*:*:*:*:*","matchCriteriaId":"1D965E3E-E08C-40EA-AF66-470F473F0262"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0:*:*:*:*:*:*:*","matchCriteriaId":"64179C1D-C96F-431F-AD80-CBCA77CB9E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0:beta3:*:*:*:*:*:*","matchCriteriaId":"EC6B30F6-70A8-43C7-BA5C-6DD8A6ED829D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0:beta4:*:*:*:*:*:*","matchCriteriaId":"767101D3-ABB0-4D34-AA28-75F78A392F39"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0:beta5:*:*:*:*:*:*","matchCriteriaId":"BEB60D06-E9D0-4949-8542-334D180F491D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7F884774-D1A1-42A6-A3FE-9B0500725666"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2C56B981-FD66-46F2-806A-3FFDEC520482"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5E3E1994-6CAC-48E9-8438-0D894A76FE66"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DB8742B0-A91D-457D-BF57-06AFC5219BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6F04EDBE-4B04-4B4C-A2BE-5286AC7C8952"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"615566E3-9EBD-49B3-9727-0883D3F0334B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"F59D0CCF-3CD0-4D99-B1F1-38F331422801"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FADF5CE8-D072-4CFE-8A96-BA86187B478B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"72278005-5F2A-4459-8813-DF7EC2D1F063"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"4E39A909-E266-4BA9-87C6-DE26052433E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"ABA16FD9-0625-4D3D-9F10-130A28C88DA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"EE33EFBF-E155-4C3B-93CC-63AA1266A8A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.0.13:*:*:*:*:*:*:*","matchCriteriaId":"78F2FB70-7EB9-4AA7-9E85-C151C3CC8104"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D6A976-FFEA-4DB6-B002-8036E778C78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B8894855-E303-4B55-B3BC-DCBE3A0AB703"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0B1500D8-952A-46C6-920C-096760C36A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"503D7346-4891-40B1-A0CD-0FACC5359431"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"643610C6-99A9-43C9-A8FC-463A244C08DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:mailman:2.1b1:*:*:*:*:*:*:*","matchCriteriaId":"085C333C-E2E7-4ACD-9CC8-C37C67725954"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286796","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=110549296126351&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13603/","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2005_07_mailman.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18857","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286796","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=110549296126351&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13603/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2005_07_mailman.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1144","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110376890429798&w=2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-689.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18686","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10439","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110376890429798&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-689.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18686","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10439","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1145","sourceIdentifier":"cve@mitre.org","published":"2004-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9:*:*:*:*:*:*:*","matchCriteriaId":"83C48EC3-D0BA-4A5D-93B0-6931CB3587AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CB461B6B-B731-4732-AAD0-191BE50189D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"19961880-D38A-4785-A7C5-879A061119BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"831705D2-C4DE-475F-B908-8859064AFB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"A4622585-20E2-46E9-B773-74729FF22EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E86ADCB6-0940-4CB9-85F1-A7694210FB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"042B6289-D2E2-4369-BB40-EA6EE7025D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"F0A48938-30B8-4403-B08A-177FFCB9054B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"67B81EFD-27C1-411C-AFF3-E5340627E3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"680934CF-7F9B-41E4-AA03-ECD96F477AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"DBCCE368-64E6-4CEC-B068-9B8BA2527289"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"CF5374A4-5194-45FD-895D-B04FDC7E853C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10:*:*:*:*:*:*:*","matchCriteriaId":"338CEFD7-EBC0-43FB-B482-9A3D0834447E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"136FF83B-2B03-4E5F-95C1-84195BE8392A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"350ABD20-6BB8-4EDB-9DD1-6D1802D892A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.4:*:*:*:*:*:*:*","matchCriteriaId":"F5A659C0-2CDA-44EF-9D5F-0A57B3F14E5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.5:*:*:*:*:*:*:*","matchCriteriaId":"FB12CA01-E0EA-4E84-802F-CC52268D65FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.6:*:*:*:*:*:*:*","matchCriteriaId":"9704EC6E-7219-41FC-BE00-CD91A246C61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.7:*:*:*:*:*:*:*","matchCriteriaId":"2B93B95E-F295-468C-A6A2-5AA6DE729E52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F4007B0D-9606-46BD-866A-7911BEA292BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:altlinux:alt_linux:2.3:*:compact:*:*:*:*:*","matchCriteriaId":"64BE98C2-8EFA-4349-9FE2-D62CA63A16C4"},{"vulnerable":true,"criteria":"cpe:2.3:o:altlinux:alt_linux:2.3:*:junior:*:*:*:*:*","matchCriteriaId":"7D0AC3A3-A37C-4053-B05F-A031877AC811"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*","matchCriteriaId":"A6B060E4-B5A6-4469-828E-211C52542547"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*","matchCriteriaId":"974C3541-990C-4CD4-A05A-38FA74A84632"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*","matchCriteriaId":"6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*","matchCriteriaId":"58792F77-B06F-4780-BA25-FE1EE6C3FDD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*","matchCriteriaId":"C9419322-572F-4BB6-8416-C5E96541CF33"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*","matchCriteriaId":"BFC50555-C084-46A3-9C9F-949C5E3BB448"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*","matchCriteriaId":"9C25D6E1-D283-4CEA-B47B-60C47A5C0797"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*","matchCriteriaId":"AD18A446-C634-417E-86AC-B19B6DDDC856"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*","matchCriteriaId":"E4BB852E-61B2-4842-989F-C6C0C901A8D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*","matchCriteriaId":"24DD9D59-E2A2-4116-A887-39E8CC2004FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*","matchCriteriaId":"F28D7457-607E-4E0C-909A-413F91CFCD82"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*","matchCriteriaId":"A4A9461E-C117-42EC-9F14-DF2A82BA7C5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*","matchCriteriaId":"409E324A-C040-494F-A026-9DCAE01C07F8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*","matchCriteriaId":"6474B775-C893-491F-A074-802AFB1FEDD8"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*","matchCriteriaId":"78B46FFA-5B09-473E-AD33-3DB18BD0DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*","matchCriteriaId":"0EFE2E73-9536-41A9-B83B-0A06B54857F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*","matchCriteriaId":"84A50ED3-FD0D-4038-B3E7-CC65D166C968"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium_processor:*:*:*:*:*","matchCriteriaId":"777F9EC0-2919-45CA-BFF8-78A02537C513"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*","matchCriteriaId":"37F124FE-15F1-49D7-9E03-8E036CE1A20C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110356286722875&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13586","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-16.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.heise.de/security/dienste/browsercheck/tests/java.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/420222","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kde.org/info/security/advisory-20041220-1.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:154","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-065.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18596","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10173","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110356286722875&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.heise.de/security/dienste/browsercheck/tests/java.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/420222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kde.org/info/security/advisory-20041220-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-065.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1146","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac before 1.1.5 allow remote attackers to inject arbitrary HTML and web script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvstrac:cvstrac:1.1:*:*:*:*:*:*:*","matchCriteriaId":"BB739BB5-9DEE-43BF-8EC8-1567B3E28C46"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvstrac:cvstrac:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DFAB0125-7125-48D0-84A8-B4BAD15BEFA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvstrac:cvstrac:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"382BAF58-3E11-475A-9453-9FA0CC55BA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvstrac:cvstrac:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A82DCEFC-77F1-4FD3-9825-A779160BD3C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvstrac:cvstrac:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"E31C434A-D807-4397-B794-7BEC4C0898B9"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110332469631253&w=2","source":"cve@mitre.org"},{"url":"http://www.cvstrac.org/cvstrac/chngview?cn=320","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.cvstrac.org/cvstrac/chngview?cn=321","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mikx.de/index.php?p=6","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12017","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18726","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110332469631253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cvstrac.org/cvstrac/chngview?cn=320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.cvstrac.org/cvstrac/chngview?cn=321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mikx.de/index.php?p=6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1150","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long (1) device name or (2) sound track number, as demonstrated with a .m3u or .pls playlist file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0:*:*:*:*:*:*:*","matchCriteriaId":"13EFF2D1-D88F-436F-8E82-EAE681DE7AA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.01:*:*:*:*:*:*:*","matchCriteriaId":"828226F9-29AA-437F-8385-B75A6F4F3B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.02:*:*:*:*:*:*:*","matchCriteriaId":"BAD7DE0D-1018-4E04-A771-B2C619E95C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.03:*:*:*:*:*:*:*","matchCriteriaId":"35D38D15-3588-49E4-9396-11DB96FBD448"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.04:*:*:*:*:*:*:*","matchCriteriaId":"ED120987-6F27-4D8E-95DF-E19EBCB0B8D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.05:*:*:*:*:*:*:*","matchCriteriaId":"7FF40252-7E87-4EE6-B2C7-19E8D78C4025"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.06:*:*:*:*:*:*:*","matchCriteriaId":"B48A746C-1020-4A9C-A9D4-94B6FFFA1FDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.07:*:*:*:*:*:*:*","matchCriteriaId":"AF272FF7-68ED-4D8B-9C17-D9D46AA33335"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.08c:*:*:*:*:*:*:*","matchCriteriaId":"A8FAD29A-6A61-4201-A0E6-1F04BF093600"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110684140108614&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13781","source":"cve@mitre.org"},{"url":"http://www.nsfocus.com/english/homepage/research/0501.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12381","source":"cve@mitre.org"},{"url":"http://www.winamp.com/player/version_history.php","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18840","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110684140108614&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nsfocus.com/english/homepage/research/0501.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.winamp.com/player/version_history.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1155","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the \"window injection\" vulnerability.  NOTE: later research shows that Internet Explorer 7 on Windows XP SP2 is also vulnerable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0.1:*:windows_2000:*:*:*:*:*","matchCriteriaId":"9F9AE3DB-EB7C-4B17-AF7A-CD8FC3C77070"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0.1:*:windows_95:*:*:*:*:*","matchCriteriaId":"151FE30E-9320-495C-84AD-60893FAED223"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0.1:*:windows_98:*:*:*:*:*","matchCriteriaId":"5805FB74-2AD6-4919-BAAE-D995CA2650A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.0.1:*:windows_nt_4.0:*:*:*:*:*","matchCriteriaId":"0D328337-A2FE-4E2E-8A8D-C170DC0A88E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:5.2.3:*:macintosh:*:*:*:*:*","matchCriteriaId":"EB51F2D6-3CCA-4695-8A92-39999749B3DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:7.0:windows_xp_sp2:*:*:*:*:*:*","matchCriteriaId":"DF4D6428-CD8B-4155-A876-89B0938AC02E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*","matchCriteriaId":"8E93C22E-812E-4CDA-9850-2386CE1E817A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://secunia.com/advisories/13251/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22628","source":"cve@mitre.org"},{"url":"http://secunia.com/multiple_browsers_window_injection_vulnerability_test/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2004-13/advisory/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/449917/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11855","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13251/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/multiple_browsers_window_injection_vulnerability_test/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2004-13/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/449917/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-1156","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the \"window injection\" vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5A545A77-2198-4685-A87F-E0F2DAECECF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*","matchCriteriaId":"BA58BA23-4CFE-40F8-A2F4-104007E12E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"22F00276-9071-4B96-B49C-2E0898476874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EB84CC9B-346B-4AF4-929E-D56D85960103"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9420CD82-0E5F-4486-9AF8-9DCD6ED7E037"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"0A9C79AB-4ABE-49E6-BAB2-94610AE0316F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"04DE7CCB-79B8-4F9B-AC14-E4A100F9E473"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"1444C77E-FF98-40E5-9CA9-B4C71B3C9304"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3B40771F-30CB-45D0-9EDE-1F13852085B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"47315EC4-1EED-4070-A087-8E37C8FE6703"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"9F1EB38F-CEB2-40BC-AA5D-CC539F597137"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*","matchCriteriaId":"EE6B0681-B96F-405C-8042-1BF2DDB41648"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*","matchCriteriaId":"5436BBD2-E3FF-4558-B8F5-FFF5CA9FC045"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A76ACC55-754D-4501-8312-5A4E10D053B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8987151-0901-4547-B750-5DC470BB9CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"53E60BCC-6D1C-489E-9F3B-9BE42B46704F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66A87ED8-9E1F-4C2C-B806-A41765081C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C795D86F-9B08-41FE-B82B-5BBB3DE6357D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"2637D552-4A3D-4867-B52A-ACCED8681AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CC237C8-CFE0-4128-B549-93CD16894E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*","matchCriteriaId":"6B8EA79A-8426-44CF-AF13-58F7EF8B6D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"367A5D46-0FF3-4140-9478-251363822E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CAA58EE9-05C7-4395-A8A4-5F54BE4C5DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C656A621-BE62-4BB8-9B25-A3916E60FA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F8DE4889-424F-4A44-8C14-9F18821CE961"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*","matchCriteriaId":"82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*","matchCriteriaId":"1003D688-3EEA-45F9-BB2C-5BAB395D7678"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED69BEB9-8D83-415B-826D-9D17FB67976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9AE678D7-812D-4C55-91B0-F3AC6BE0CD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BCDB64E5-AE26-43DF-8A66-654D5D22A635"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9D75F1-8333-43DE-A08B-142E4C5899D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6BF63077-4E98-497D-8CE6-B84B022DB21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*","matchCriteriaId":"FCEAEDEB-0EE7-4221-B9B8-65438580D331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*","matchCriteriaId":"78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*","matchCriteriaId":"F610FFD5-DF37-4075-AE8B-8D89DF6205A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*","matchCriteriaId":"D093FD25-94C8-49B8-A452-438023BFB105"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*","matchCriteriaId":"3346E7D0-D7EF-4182-BD86-837F14EEB9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*","matchCriteriaId":"150F1B28-0FAB-4880-B1D5-7F244A1C4D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2FE7EA3B-3BF8-4696-9488-78506074D62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"C883B45F-D28D-428E-AAF7-F93522A229DC"}]}]}],"references":[{"url":"http://secunia.com/advisories/13129/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_window_injection_vulnerability_test/","source":"cve@mitre.org"},{"url":"http://secunia.com/secunia_research/2004-13/advisory/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/mfsa2005-13.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-176.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-384.html","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100045","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10117","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13129/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_window_injection_vulnerability_test/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2004-13/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/mfsa2005-13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-176.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-384.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1166","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline (\"%0a\") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110253463305359&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13404","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29346","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012444","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12299","source":"cve@mitre.org"},{"url":"http://www.rapid7.com/advisories/R7-0032.jsp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/489500/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11826","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28208","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/3212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0870","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18384","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A462","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110253463305359&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012444","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rapid7.com/advisories/R7-0032.jsp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/489500/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/28208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2008/0870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A462","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1173","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model (DOM) methods in the DHTML Dynamic HTML (DHTML) Editing Component (DEC) and Javascript that calls showModalDialog."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110271114525795&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=110271016129952&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18444","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110271114525795&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=110271016129952&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1179","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack on temporary directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:debmake:*:*:*:*:*:*:*:*","versionStartIncluding":"3.6","versionEndExcluding":"3.6.10","matchCriteriaId":"EFEC79D0-158C-47D7-B98E-E29549297213"},{"vulnerable":true,"criteria":"cpe:2.3:a:debian:debmake:*:*:*:*:*:*:*:*","versionStartIncluding":"3.7","versionEndExcluding":"3.7.7","matchCriteriaId":"C8EB07A3-83E7-4803-8864-790F7EA7B128"}]}]}],"references":[{"url":"http://secunia.com/advisories/13633/","source":"cve@mitre.org","tags":["Permissions Required"]},{"url":"http://www.debian.org/security/2004/dsa-615","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-12/0645.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/12078","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18646","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/13633/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Permissions Required"]},{"url":"http://www.debian.org/security/2004/dsa-615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-12/0645.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/12078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1180","sourceIdentifier":"cve@mitre.org","published":"2004-02-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote attackers to cause a denial of service (application crash)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:3.0:*:woody:*:*:*:*:*","matchCriteriaId":"436B1E58-17E8-495B-A2DD-FB1626B9D35B"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*","matchCriteriaId":"3528DABD-B821-4D23-AE12-614A9CA92C46"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"9E661D58-18DF-4CCF-9892-F873618F4535"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"052E3862-BFB7-42E7-889D-8590AFA8EF37"}]}]}],"references":[{"url":"http://secunia.com/advisories/14309","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2005/dsa-678","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:039","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/download/updates/81_i386.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/14309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2005/dsa-678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/download/updates/81_i386.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1182","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"hfaxd in HylaFAX before 4.2.1, when installed with a \"weak\" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted (1) username or (2) hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E1932A13-7BC2-4E15-B1E6-54B62F36B5FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1BD3423D-BB76-496E-973B-6F67AB78CAA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"96A9291E-965F-43AB-B0BA-C3067AB24F36"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"5C8555E9-AAB2-44D3-8289-2CD15D18B5DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"E4AA64BB-D5BD-4073-AD35-7EB331A89A4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"9BDA5D79-16C5-4F0E-9447-681E8B89B8D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"E61E349A-1FB8-4B33-8512-23C12EC5147A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"C767786A-5DA1-494A-9B59-C48E6415E4D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"38E60F7E-F609-4B93-A130-B247EEAC1BCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"185B1820-E196-4D4C-8085-30CDC1A15B16"},{"vulnerable":true,"criteria":"cpe:2.3:a:hylafax:hylafax:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B03B611B-5CCE-4004-A0E2-AAF974F10E08"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110546971307585&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=hylafax&m=110545119911558&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13812","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200501-21.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2004/dsa-634","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:006","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110546971307585&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=hylafax&m=110545119911558&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200501-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2004/dsa-634","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1186","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in enscript 1.6.3 allow remote attackers or local users to cause a denial of service (application crash)."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:enscript:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"24957DD9-A63D-4982-B417-1AF27F005AE0"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35074","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1012965","source":"cve@mitre.org"},{"url":"http://support.apple.com/kb/HT3549","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2005/dsa-654","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:033","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-040.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/419768/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/435199/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12329","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19033","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11134","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/68-1/","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1012965","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.apple.com/kb/HT3549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2005/dsa-654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200502-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-040.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/419768/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/435199/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-133A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2009/1297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/68-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1189","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow authenticated users to execute arbitrary code via a heap-based buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-787"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mit:kerberos_5:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.5","matchCriteriaId":"EEEE50BF-0BA8-4352-9837-1A06556972DC"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000917","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110358420909358&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110548298407590&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2004-004-pwhist.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:156","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-012.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-045.html","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2004/0069","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18621","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11911","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110358420909358&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110548298407590&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2004-004-pwhist.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-012.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-045.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2004/0069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2004-1198","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash from memory consumption), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1221.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/382257","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11751","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18282","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1221.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/382257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1200","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Firefox and Mozilla allow remote attackers to cause a denial of service (application crash from memory consumption), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:preview_release:*:*:*:*:*:*:*","matchCriteriaId":"CFDBA992-46F8-42A6-9428-C9E475CA69E3"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029434.html","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029491.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11752","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11760","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18282","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029434.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029491.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1234","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"load_elf_binary in Linux before 2.4.26 allows local users to cause a denial of service (system crash) via an ELF binary in which the interpreter is NULL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.0","matchCriteriaId":"7FC47934-02D1-4154-B4BC-C5D4B757B095"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:pre3:*:*:*:*:*:*","matchCriteriaId":"74F962BE-2187-4C8F-BAE7-EFA3D79FCB8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*","matchCriteriaId":"E1D21AD5-C34F-4005-92F3-98F714DE98D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=142965","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://linux.bkbits.net:8080/linux-2.4/cset%404076466d_SqUm4azg4_v3FIG2-X6XQ","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20162","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20163","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20202","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20338","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-689.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-016.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-017.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12101","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2336","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18687","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10608","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=142965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://linux.bkbits.net:8080/linux-2.4/cset%404076466d_SqUm4azg4_v3FIG2-X6XQ","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2004-689.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10608","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1236","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:directory_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"68AED0FB-C89E-4404-B744-B8B5ABE5B605"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110384298016120","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/14960","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57754-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-083.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/258905","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/12099","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18676","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110384298016120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/14960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57754-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-083.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/258905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/12099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18676","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1238","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:53.340","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2004.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-1239","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:53.373","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2004.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-1240","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:53.407","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2004.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-1241","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:53.443","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2004.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-1242","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:53.477","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2004.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-1243","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:53.503","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2004.  Notes: none"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-1244","sourceIdentifier":"cve@mitre.org","published":"2004-02-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large (1) width or (2) height values, aka the \"PNG Processing Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*","matchCriteriaId":"3778BBD3-6C58-46DF-B1EB-ED02513CA8D6"}]}]}],"references":[{"url":"http://www.kb.cert.org/vuls/id/259890","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-039A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-009","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19096","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1306","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1568","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2379","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/259890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-039A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-009","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1568","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2379","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1296","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) eqn2graph and (2) pic2graph scripts in groff 1.18.1 allow local users to overwrite arbitrary files via a symlink attack on temporary files."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:gnu:groff:1.18.1:*:*:*:*:*:*:*","matchCriteriaId":"A81CEA14-F694-431F-BAC9-BBB8CC09BBCB"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286371","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286372","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110358225615424&w=2","source":"cve@mitre.org"},{"url":"http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:038","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18660","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286372","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110358225615424&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1305","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:ip_softphone_2050:*:*:*:*:*:*:*:*","matchCriteriaId":"5A140A10-720D-4FF5-9559-184D9AC33509"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:media_communication_server_5100:3.0:*:*:*:*:*:*:*","matchCriteriaId":"13A5FC74-1883-4B8E-BC95-2A1E1DC9263D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:media_communication_server_5200:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0E1E251E-BB18-4610-875D-C7FC95621368"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:media_processing_server:*:*:*:*:*:*:*:*","matchCriteriaId":"228FB6B6-F558-4D63-A34A-66DDD4B037FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:periphonics:*:*:*:*:*:*:*:*","matchCriteriaId":"C8B62D86-AD1A-404D-9251-071DD6C9EE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:symposium_agent:*:*:*:*:*:*:*:*","matchCriteriaId":"AD86C573-F25A-4825-9798-8BBC29A56320"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:symposium_network_control_center:*:*:*:*:*:*:*:*","matchCriteriaId":"4B9FB826-61BA-4F13-8E0B-36DCCF30177F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:symposium_tapi_service_provider:*:*:*:*:*:*:*:*","matchCriteriaId":"6AA64080-192C-41A3-A259-74499966C07D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:symposium_web_centre_portal:*:*:*:*:*:*:*:*","matchCriteriaId":"17F13410-3380-4CB8-9E20-92E14B85ADC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:symposium_web_client:*:*:*:*:*:*:*:*","matchCriteriaId":"872353DB-616C-46F8-99F1-7C7B56DEF34F"},{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:symposium_call_center_server:*:*:*:*:*:*:*:*","matchCriteriaId":"ED9D73DA-C251-4CDE-A435-AE68876C9FC8"},{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:symposium_express_call_center:*:*:*:*:*:*:*:*","matchCriteriaId":"FE8126E0-6887-48C3-BA2D-286E83AB73A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*","matchCriteriaId":"E69D0E21-8C62-403E-8097-2CA403CBBB1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*","matchCriteriaId":"B127407D-AE50-4AFE-A780-D85B5AF44A2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*","matchCriteriaId":"5D42E51C-740A-4441-8BAF-D073111B984C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*","matchCriteriaId":"34ACB544-87DD-4D9A-99F0-A10F48C1EE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*","matchCriteriaId":"74AD256D-4BCE-41FB-AD73-C5C63A59A06D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*","matchCriteriaId":"B518E945-5FDE-4A37-878D-6946653C91F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"237D7C18-C8D6-4FDB-A160-FA17DD46A55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*","matchCriteriaId":"B5CAF64E-98AA-4813-A2A2-5AC3387CF230"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*","matchCriteriaId":"B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*","matchCriteriaId":"403945FA-8676-4D98-B903-48452B46F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*","matchCriteriaId":"B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*","matchCriteriaId":"ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*","matchCriteriaId":"6A05337E-18A5-4939-85A0-69583D9B5AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*","matchCriteriaId":"FB2BE2DE-7B06-47ED-A674-15D45448F357"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110382854111833&w=2","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/177584","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/697136","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-012A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.xfocus.net/flashsky/icoExp/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18667","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1304","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2580","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3216","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3957","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A712","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110382854111833&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/177584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/697136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-012A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.xfocus.net/flashsky/icoExp/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A712","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1306","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a crafted .hlp file."},{"lang":"es","value":"El desbordamiento de búfer basado en memoria dinámica (heap) en winhlp32.exe en Windows NT, Windows 2000 a SP4, Windows XP a SP2 y Windows 2003 permite a los atacantes remotos ejecutar código arbitrario a través de un archivo.hlp diseñado."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1_beta_1:*:*:*:*:*:*","matchCriteriaId":"207B8A6E-5158-4636-91D8-38021B91CB42"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*","matchCriteriaId":"E69D0E21-8C62-403E-8097-2CA403CBBB1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1_beta_1:*:*:*:*:*:*","matchCriteriaId":"EAB2E520-56D9-4B3F-99BA-EBC04AC30E4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*","matchCriteriaId":"B127407D-AE50-4AFE-A780-D85B5AF44A2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1_beta_1:*:*:*:*:*:*","matchCriteriaId":"61E9C554-757E-4912-A3F6-6F1DB17483AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*","matchCriteriaId":"5D42E51C-740A-4441-8BAF-D073111B984C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*","matchCriteriaId":"34ACB544-87DD-4D9A-99F0-A10F48C1EE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:sp1_beta_1:*:*:*:*:*:*","matchCriteriaId":"EEAFE154-7058-40A1-9806-22476A7DF0BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*","matchCriteriaId":"74AD256D-4BCE-41FB-AD73-C5C63A59A06D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:standard:sp1_beta_1:*:*:*:*:*:*","matchCriteriaId":"394F16B8-C29F-445A-AA47-AA82F78CFA20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*","matchCriteriaId":"B518E945-5FDE-4A37-878D-6946653C91F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:web:sp1_beta_1:*:*:*:*:*:*","matchCriteriaId":"A2A2852D-64BE-40B1-8811-02EBDC1E044E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"237D7C18-C8D6-4FDB-A160-FA17DD46A55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*","matchCriteriaId":"B5CAF64E-98AA-4813-A2A2-5AC3387CF230"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*","matchCriteriaId":"2FECD4B0-23A0-4C0B-9888-D28A5941D848"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*","matchCriteriaId":"403945FA-8676-4D98-B903-48452B46F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*","matchCriteriaId":"B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*","matchCriteriaId":"6A05337E-18A5-4939-85A0-69583D9B5AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*","matchCriteriaId":"E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*","matchCriteriaId":"7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110383690219440&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12092","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.xfocus.net/flashsky/icoExp/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18678","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110383690219440&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.xfocus.net/flashsky/icoExp/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18678","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1307","sourceIdentifier":"cve@mitre.org","published":"2004-12-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow."}],"vendorComments":[{"organization":"Red Hat","comment":"This issue was resolved in all affected libtiff versions as shipped with Red Hat Enterprise Linux 2.1, 3, and 4 via a patch for CVE-2004-0886.  For updates containing patches for CVE-2004-0886, see: https://rhn.redhat.com/errata/CVE-2004-0886.html","lastModified":"2008-08-12T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:call_management_system_server:8.0:*:*:*:*:*:*:*","matchCriteriaId":"618B807E-29B5-4CD0-BBA2-E20E45AC192D"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:call_management_system_server:9.0:*:*:*:*:*:*:*","matchCriteriaId":"5E9C378A-2151-45D1-A7EC-1F27E794D878"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:call_management_system_server:11.0:*:*:*:*:*:*:*","matchCriteriaId":"18D3AF16-3591-44FB-B3F8-E92DAA8FA936"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:call_management_system_server:12.0:*:*:*:*:*:*:*","matchCriteriaId":"80FF4D54-3E14-42CA-9FC6-2534B3F00903"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:call_management_system_server:13.0:*:*:*:*:*:*:*","matchCriteriaId":"53D3C3D9-D54C-4D6C-9D82-7653445680C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:cvlan:*:*:*:*:*:*:*:*","matchCriteriaId":"2FE82341-3E73-4F5B-BD9E-06C83F22E831"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:integrated_management:*:*:*:*:*:*:*:*","matchCriteriaId":"D12D6986-429E-4152-A6E5-4CC1FB9556D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:interactive_response:*:*:*:*:*:*:*:*","matchCriteriaId":"6EE68944-C31D-4B49-BC8F-07944E0E82AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:interactive_response:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"3427704B-08E7-4B33-B4F0-071EFA4FAE9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:interactive_response:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C70755CC-4FF4-4E0E-9CFC-71F50FCC854E"},{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:intuity_audix_lx:*:*:*:*:*:*:*:*","matchCriteriaId":"12D21889-2F4E-460B-AA92-4E910B7CBBDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:icontrol_service_manager:1.3:*:*:*:*:*:*:*","matchCriteriaId":"2A7379DC-AF87-436C-9942-8CC5CF781918"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:icontrol_service_manager:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3A2B0D82-C75B-43EB-9DD1-4270B8BE52A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:icontrol_service_manager:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"06819549-ECD7-4568-BB15-C0A226A65F91"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:icontrol_service_manager:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"72EA2403-F428-407E-B32E-C8D5792B4DB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.4:*:*:*:*:*:*:*","matchCriteriaId":"CCA5EEB8-9D2C-49A9-BB08-CE5017B79D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"261FAE51-5207-4136-9FFE-2330A281266C"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"B32C83B9-F7DA-450A-A687-9A73734CD712"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"9485283A-B73E-4567-914A-42A86F5FFCB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"95892168-0FB6-4E3F-9303-2F9B3CF60D2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.5:*:*:*:*:*:*:*","matchCriteriaId":"A5021564-5E0A-4DDC-BC68-200B6050043E"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.5.7:*:*:*:*:*:*:*","matchCriteriaId":"19AA66E5-FDDD-4243-B945-DFEBDD25F258"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"62F359CD-5DC4-4919-B8E1-95BDDBD27EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D2C8C550-3313-4266-B4B3-E9E9047CFE04"},{"vulnerable":true,"criteria":"cpe:2.3:a:libtiff:libtiff:3.7.0:*:*:*:*:*:*:*","matchCriteriaId":"ABEEBA7B-81D5-4148-912B-9AD448BBE741"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F4007B0D-9606-46BD-866A-7911BEA292BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:avaya:mn100:*:*:*:*:*:*:*:*","matchCriteriaId":"D073442B-D7E7-4E07-AF2D-E22FE65B09A9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"30897327-44DD-4D6C-B8B6-2D66C44EA55D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B79D8F73-2E78-4A67-96BB-21AD9BCB0094"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"8923EE1A-DD48-4EC8-8698-A33093FD709C"},{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"E25F5CF2-F891-41CA-A40C-13966F72FDF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:avaya:modular_messaging_message_storage_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7417958C-5321-41D6-9D1A-D16BF5511E81"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*","matchCriteriaId":"A3BDD466-84C9-4CFC-A3A8-7AC0F752FB53"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*","matchCriteriaId":"3528DABD-B821-4D23-AE12-614A9CA92C46"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"9E661D58-18DF-4CCF-9892-F873618F4535"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"2BB0B27C-04EA-426F-9016-7406BACD91DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"BB2B1BA5-8370-4281-B5C9-3D4FE6C70FBC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unixware:7.1.4:*:*:*:*:*:*:*","matchCriteriaId":"059218D3-A3AD-4A10-9AA4-FBB689321D90"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*","matchCriteriaId":"3F305CBD-4329-44DE-A85C-DE9FF371425E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*","matchCriteriaId":"7BF232A9-9E0A-481E-918D-65FC82EF36D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*","matchCriteriaId":"0C0C3793-E011-4915-8F86-CE622A2D37D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2005/May/msg00001.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=173&type=vulnerabilities&flashstatus=true","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/539110","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-136A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11175","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce/2005/May/msg00001.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=173&type=vulnerabilities&flashstatus=true","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/539110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-136A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11175","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1315","sourceIdentifier":"cve@mitre.org","published":"2004-11-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special characters are inserted into the result, which is then processed by PHP exec, as exploited by the Santy.A worm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:*:*:*:*:*:*:*:*","matchCriteriaId":"101667DF-0B3E-49A1-A0C9-BDBEEC9F89CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E15A5879-39FE-4BFF-B391-52EAA58D1A0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4951A567-0C73-4C41-A694-B50293545936"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"581594BF-92CE-4B16-95DC-200E11C64591"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AEBFC1B3-8C7D-4B63-8E92-F1759EACA2BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E3575646-AF8E-4D33-97DE-E6EA468D9973"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7717E4CC-C7D1-4DB3-8F15-A6DC3C957B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1B4E7219-C05D-4269-990B-4B523564BF71"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A729BD82-D5BA-4BF9-812C-ADACEF42F68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C74C78D-EEE0-48DF-9721-2A43B996EBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"054EFBD3-2252-4173-B37A-B8CA0218CE0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"00EB368F-5471-42E3-BBBE-EF9E623A7259"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F65406CF-59F1-48DC-8ABC-501F210A8B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03AC5144-140D-48E9-87FD-96F2E248D4E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A8F12660-10A7-4B66-94B0-954C9CD7D36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*","matchCriteriaId":"D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*","matchCriteriaId":"1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*","matchCriteriaId":"69F58020-7D60-4376-BF2B-602A24C3F4EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"3BF566D7-4537-49F6-91BF-F56D64DAE6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*","matchCriteriaId":"18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E3F1F44C-B65B-49C4-B6E8-30560D5B7663"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6DDE0690-6FB1-4E68-9250-7F45E9044B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"639E102D-2BD2-42FF-999A-02135A3E5647"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"AA7F5CF1-4610-47D0-A6DD-DCB55645245D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"FB898F63-F327-44B1-B6A2-889E490E583F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"894A26BD-2D8B-4DE7-BEE3-940A0498DB74"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110029415208724&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110365752909029&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?t=110079440800004&r=1&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13239/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/497400","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.phpbb.com/phpBB/viewtopic.php?t=240513","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/385208","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10701","source":"cve@mitre.org"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-356A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18052","source":"cve@mitre.org"},{"url":"https://security.gentoo.org/glsa/200411-32","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110029415208724&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110365752909029&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?t=110079440800004&r=1&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13239/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/497400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.phpbb.com/phpBB/viewtopic.php?t=240513","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/385208","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-356A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/200411-32","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1316","sourceIdentifier":"cve@mitre.org","published":"2004-12-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a denial of service (application crash) via an NNTP URL (news:) with a trailing '\\' (backslash) character, which prevents a string from being NULL terminated."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","matchCriteriaId":"10E59CDD-9F95-4E38-95B3-AC5C35075378"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C656A621-BE62-4BB8-9B25-A3916E60FA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*","matchCriteriaId":"82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED69BEB9-8D83-415B-826D-9D17FB67976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BCDB64E5-AE26-43DF-8A66-654D5D22A635"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*","matchCriteriaId":"3D8CB42F-8F05-45A6-A408-50A11CC132DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"407F69BE-4026-4B26-AC31-11E7CC942760"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*","matchCriteriaId":"6E8264B5-4D4B-453D-B599-E2AD533A0CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9D75F1-8333-43DE-A08B-142E4C5899D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6BF63077-4E98-497D-8CE6-B84B022DB21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*","matchCriteriaId":"2FEC6B13-3088-4ECB-9D81-6480F439601C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*","matchCriteriaId":"20ECA520-780A-4EF8-8C80-B7564F4148B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*","matchCriteriaId":"FCEAEDEB-0EE7-4221-B9B8-65438580D331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*","matchCriteriaId":"78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*","matchCriteriaId":"F610FFD5-DF37-4075-AE8B-8D89DF6205A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*","matchCriteriaId":"D093FD25-94C8-49B8-A452-438023BFB105"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*","matchCriteriaId":"3346E7D0-D7EF-4182-BD86-837F14EEB9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*","matchCriteriaId":"150F1B28-0FAB-4880-B1D5-7F244A1C4D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2FE7EA3B-3BF8-4696-9488-78506074D62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"C883B45F-D28D-428E-AAF7-F93522A229DC"}]}]}],"references":[{"url":"http://isec.pl/vulnerabilities/isec-0020-mozilla.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110436284718949&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110780717916478&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/19823","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/mfsa2005-06.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2006_04_25.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-038.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/12131","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18711","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100052","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9808","source":"cve@mitre.org"},{"url":"http://isec.pl/vulnerabilities/isec-0020-mozilla.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110436284718949&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110780717916478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/mfsa2005-06.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.novell.com/linux/security/advisories/2006_04_25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-038.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/12131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9808","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1317","sourceIdentifier":"cve@mitre.org","published":"2004-12-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:netcat:netcat:1.1:*:*:*:*:*:*:*","matchCriteriaId":"B63CEAE5-9423-4CBA-A493-D5EC71441857"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110425875504586&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110426936423890&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110429204712327&w=2","source":"cve@mitre.org"},{"url":"http://www.hat-squad.com/en/000142.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18681","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110425875504586&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110426936423890&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110429204712327&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hat-squad.com/en/000142.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18681","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1319","sourceIdentifier":"cve@mitre.org","published":"2004-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by \"AbusiveParent\" in Internet Explorer 6.0.2900.2180."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:ip_softphone_2050:*:*:*:*:*:*:*:*","matchCriteriaId":"5A140A10-720D-4FF5-9559-184D9AC33509"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:mobile_voice_client_2050:*:*:*:*:*:*:*:*","matchCriteriaId":"48E2627D-3244-4A66-9EF6-B790EEFD0D4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nortel:optivity_telephony_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"162EA244-0CED-44BF-9857-13127C833FB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*","matchCriteriaId":"E69D0E21-8C62-403E-8097-2CA403CBBB1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*","matchCriteriaId":"B127407D-AE50-4AFE-A780-D85B5AF44A2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*","matchCriteriaId":"5D42E51C-740A-4441-8BAF-D073111B984C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*","matchCriteriaId":"34ACB544-87DD-4D9A-99F0-A10F48C1EE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*","matchCriteriaId":"74AD256D-4BCE-41FB-AD73-C5C63A59A06D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*","matchCriteriaId":"B518E945-5FDE-4A37-878D-6946653C91F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*","matchCriteriaId":"2D3B703C-79B2-4FA2-9E12-713AB977A880"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*","matchCriteriaId":"AA733AD2-D948-46A0-A063-D29081A56F1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*","matchCriteriaId":"799DA395-C7F8-477C-8BC7-5B4B88FB7503"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*","matchCriteriaId":"403945FA-8676-4D98-B903-48452B46F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*","matchCriteriaId":"B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*","matchCriteriaId":"6A05337E-18A5-4939-85A0-69583D9B5AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*","matchCriteriaId":"E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*","matchCriteriaId":"7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*","matchCriteriaId":"FB2BE2DE-7B06-47ED-A674-15D45448F357"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-12/0167.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://freehost07.websamba.com/greyhats/abusiveparent-discussion.htm","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13482/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/356600","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11950","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-039A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-013","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18504","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1114","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1701","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3464","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3851","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4758","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-12/0167.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://freehost07.websamba.com/greyhats/abusiveparent-discussion.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13482/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/356600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA05-039A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3851","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1320","sourceIdentifier":"cve@mitre.org","published":"2004-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Asante FM2008 running firmware 1.06 is shipped with a default username and password, which could allow remote attackers to gain unauthorized access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:asante:fm2008_managed_ethernet_switch:1.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFB9688-5AA9-4E1A-A03E-A1EBEC07732E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110312733624864&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11947","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18521","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110312733624864&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18521","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1321","sourceIdentifier":"cve@mitre.org","published":"2004-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The configuration backup in Asante FM2008 running firmware 1.06 stores the username and password in cleartext, which could allow remote attackers to gain unauthorized access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:asante:fm2008_managed_ethernet_switch:1.6:*:*:*:*:*:*:*","matchCriteriaId":"FCFB9688-5AA9-4E1A-A03E-A1EBEC07732E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110312733624864&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110312733624864&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1322","sourceIdentifier":"cve@mitre.org","published":"2004-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A6659C2E-691B-47B8-9659-73FF4DEE3C19"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"C0317B33-20DC-4E57-8AFC-097FBC6067F4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D382C84D-C8F7-4257-B6C6-D00C595F6B63"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.3:*:*:*:*:*:*:*","matchCriteriaId":"6DF21240-6275-434F-B7C3-8CC029B9ABA2"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8934A49D-9ABB-4B49-9B69-615B8CFFAF10"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:2.46:*:*:*:*:*:*:*","matchCriteriaId":"0E60BDFE-108B-4621-9B02-774AA844407B"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"856D99BB-1CB3-4A8D-9752-CC854829C65A"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"B13E26E7-8284-4B70-B51C-B3B96995094F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:3.2:*:*:*:*:*:*:*","matchCriteriaId":"2414F807-1EAE-438D-9497-B6259AC1AA2C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"CCB4D983-658F-4B5F-B136-02A9605DAF4C"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:unity_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D26F84D4-B6AC-4BAD-8D9D-B33842FEF9F9"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/p-060.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20041215-unity.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11954","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18489","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/p-060.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20041215-unity.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1323","sourceIdentifier":"cve@mitre.org","published":"2004-12-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service (kernel crash) via a large signal number to (1) xxx_sys_kill, (2) xxx_sys_sigaction, and possibly other translation functions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5:*:*:*:*:*:*:*","matchCriteriaId":"E10D9BF9-FCC7-4680-AD3A-95757FC005EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"78E8C3A4-9FA7-4F2A-8C65-D4404715E674"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DBA2E3A3-EB9B-4B20-B754-EEC914FB1D47"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"7AC78BA4-70F4-4B9F-93C2-B107E4DCC418"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6:*:*:*:*:*:*:*","matchCriteriaId":"28A10F5A-067E-4DD8-B585-ABCD6F6B324E"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"249FA642-3732-4654-88CB-3F1D19A5860A"},{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"5071CA39-65B3-4AFB-8898-21819E57A084"}]}]}],"references":[{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-010.txt.asc","source":"cve@mitre.org"},{"url":"http://gleg.net/advisory_netbsd2.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13501/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18564","source":"cve@mitre.org"},{"url":"ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-010.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://gleg.net/advisory_netbsd2.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13501/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18564","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1324","sourceIdentifier":"cve@mitre.org","published":"2004-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*","matchCriteriaId":"3778BBD3-6C58-46DF-B1EB-ED02513CA8D6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110352518211306&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12031","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18576","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110352518211306&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1325","sourceIdentifier":"cve@mitre.org","published":"2004-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*","matchCriteriaId":"3778BBD3-6C58-46DF-B1EB-ED02513CA8D6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110352518211306&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12032","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18587","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110352518211306&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18587","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1326","sourceIdentifier":"cve@mitre.org","published":"2004-12-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in dxterm in Ultrix 4.5 allows local users to execute arbitrary code via a long -setup parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ultrix:dxterm:*:*:*:*:*:*:*:*","matchCriteriaId":"C05E55F2-F683-4A00-82E0-6B6F277FF207"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110356470029424&w=2","source":"cve@mitre.org"},{"url":"http://www.frsirt.com/exploits/20041220.ultrix_dxterm_4.5_exploit.c.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/12049","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18613","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110356470029424&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.frsirt.com/exploits/20041220.ultrix_dxterm_4.5_exploit.c.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/12049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18613","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1327","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crystal_art_software:crystal_ftp:2.4:*:*:*:*:*:*:*","matchCriteriaId":"D6A0AA3F-A270-4557-9CC8-CDDCFFB11D34"},{"vulnerable":true,"criteria":"cpe:2.3:a:crystal_art_software:crystal_ftp:2.5:*:*:*:*:*:*:*","matchCriteriaId":"DA62A476-64DB-49C0-AA46-F23AFC5A3AD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:crystal_art_software:crystal_ftp:2.6:*:*:*:*:*:*:*","matchCriteriaId":"4800AF4E-47B0-4EB7-BC05-F42EC1A76190"},{"vulnerable":true,"criteria":"cpe:2.3:a:crystal_art_software:crystal_ftp:2.7:*:*:*:*:*:*:*","matchCriteriaId":"8E6E687D-CBD5-4686-A9B5-0DEAD7941374"},{"vulnerable":true,"criteria":"cpe:2.3:a:crystal_art_software:crystal_ftp:2.8:*:*:*:*:*:*:*","matchCriteriaId":"99F30BB3-E863-451F-AACA-998ED64CC1A3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110356203624337&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13583/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12038","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18594","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110356203624337&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13583/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1328","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in newgrp in HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain elevated privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*","matchCriteriaId":"F038B325-A982-43FB-9146-E103CCFB5C41"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110355911415320&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13565/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/12029","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18577","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5622","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110355911415320&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13565/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/12029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1329","sourceIdentifier":"cve@mitre.org","published":"2004-12-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag_exec, (3) invscout, and (4) invscoutd in AIX 5.1 through 5.3 allows local users to execute arbitrary programs by modifying the DIAGNOSTICS environment variable to point to a malicious Dctrl program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*","matchCriteriaId":"43E38D56-80BA-460C-A296-ED7F506E4364"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBD01F19-4B30-4147-AC48-7F5C64EE80CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*","matchCriteriaId":"104E5C14-6D87-494B-8D60-0443ADDCD31A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*","matchCriteriaId":"435340B0-AD02-4174-BC7F-6A7C222A7F6D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110355931920123&w=2","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY64277&apar=only","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY64389&apar=only","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/464276/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/464481/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12041","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18620","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/701","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110355931920123&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY64277&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY64389&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/464276/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/464481/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/701","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1330","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBD01F19-4B30-4147-AC48-7F5C64EE80CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.2_l:*:*:*:*:*:*:*","matchCriteriaId":"104E5C14-6D87-494B-8D60-0443ADDCD31A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3:*:*:*:*:*:*:*","matchCriteriaId":"EA8DDF4A-1C5D-4CB1-95B3-69EAE6572507"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.3_l:*:*:*:*:*:*:*","matchCriteriaId":"435340B0-AD02-4174-BC7F-6A7C222A7F6D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110355931920123&w=2","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY64312&apar=only","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY64358&apar=only","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY64522&apar=only","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.frsirt.com/exploits/20041220.paginit.c.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12043","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18618","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110355931920123&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY64312&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY64358&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY64522&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.frsirt.com/exploits/20041220.paginit.c.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18618","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1331","sourceIdentifier":"cve@mitre.org","published":"2004-11-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the \"File Download - Security Warning\" dialog and save arbitrary files with arbitrary extensions via the SaveAs command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-11/0260.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/13203/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3220","source":"cve@mitre.org"},{"url":"http://www.frsirt.com/exploits/20041119.IESP2Unpatched.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/743974","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11686","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18181","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-11/0260.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/13203/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.frsirt.com/exploits/20041119.IESP2Unpatched.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/743974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18181","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1332","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attackers to execute arbitrary code via a long command request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.01:*:*:*:*:*:*:*","matchCriteriaId":"53BBFE9A-6846-4625-91AC-47AA0BC0933A"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.10:*:*:*:*:*:*:*","matchCriteriaId":"38BFA923-7D80-4F01-AF9F-6F13209948AC"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.20:*:*:*:*:*:*:*","matchCriteriaId":"EDE44C49-172C-4899-8CC8-29AA99A7CD2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:10.24:*:*:*:*:*:*:*","matchCriteriaId":"4259A901-A1CF-44EE-80C4-2031D3FCADC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*","matchCriteriaId":"F038B325-A982-43FB-9146-E103CCFB5C41"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11i:*:*:*:*:*:*:*","matchCriteriaId":"C10245E1-C95C-4219-92C9-888E5966ABF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*","matchCriteriaId":"32310AFE-38CC-4C6C-AE13-54C18720F2C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux_series_700:10.20:*:*:*:*:*:*:*","matchCriteriaId":"8B369244-5327-4946-9C49-AC93AE75866B"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux_series_800:10.20:*:*:*:*:*:*:*","matchCriteriaId":"A40F1951-2AC6-402E-95D6-19ECC3F695F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:sis:*:*:*:*:*:*:*:*","matchCriteriaId":"CDC3AECB-D8A1-413E-BC9B-7245B386FCE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:vvos:10.24:*:*:*:*:*:*:*","matchCriteriaId":"D9B7C178-4BE6-4397-A4E2-01375E4CA978"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:vvos:11.04:*:*:*:*:*:*:*","matchCriteriaId":"1D462D6F-EB68-4E31-87FD-D918F5DEF3FB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110797179710695&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110797179710695&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13608","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1012650","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=175&type=vulnerabilities&flashstatus=false","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/647438","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/12077","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18636","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5701","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110797179710695&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110797179710695&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1012650","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.idefense.com/application/poi/display?id=175&type=vulnerabilities&flashstatus=false","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/647438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/12077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5701","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1333","sourceIdentifier":"cve@mitre.org","published":"2004-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a denial of service (kernel crash) via a short new screen value, which leads to a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*","matchCriteriaId":"6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*","matchCriteriaId":"C5FE15BF-91C7-452A-BE1B-7EC9632421C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*","matchCriteriaId":"15C1923C-D9C4-400D-9F0F-20B519EEC9C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*","matchCriteriaId":"E51913F9-FC7D-450A-9A82-5084AA74A5B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*","matchCriteriaId":"B62E02D5-9EEE-439B-A510-BEEE28A9F358"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*","matchCriteriaId":"02278C07-E649-427D-9E5C-F1738A01BCBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*","matchCriteriaId":"E120257D-346B-4BA6-A431-E6F820FBB5FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A0934C49-5F88-4189-BD88-2F32C39C2F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*","matchCriteriaId":"14B0A230-4054-4483-A3A7-9A5A286C7552"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*","matchCriteriaId":"F90242EF-048B-4539-AA41-87AA84875A9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*","matchCriteriaId":"3C4E9325-2A70-4E15-9AAF-5588BF218055"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*","matchCriteriaId":"01402A85-B681-4DE0-B7BB-F52567DA29E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*","matchCriteriaId":"1FC53528-A67F-42DF-B8DA-778A65893F9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*","matchCriteriaId":"4B130EB7-A951-4717-A906-E2F602F7B69F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6996B14-925B-46B8-982F-3545328B506B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*","matchCriteriaId":"EC80CF67-C51D-442C-9526-CFEDE84A6304"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"138985E6-5107-4E8B-A801-C3D5FE075227"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*","matchCriteriaId":"9B502A61-44FB-4CD4-85BE-88D4ACCCA441"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:i686:*:*:*:*:*","matchCriteriaId":"05853955-CA81-40D3-9A70-1227F3270D3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*","matchCriteriaId":"F3FDE8C4-5FFD-4CC2-9F35-7C32043966D1"}]}]}],"references":[{"url":"http://secunia.com/advisories/17826","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20162","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20163","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20202","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20338","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"cve@mitre.org"},{"url":"http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:218","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:219","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2005_18_kernel.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11956","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18523","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/47-1/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20162","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2005_18_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=152532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18523","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/47-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1334","sourceIdentifier":"cve@mitre.org","published":"2004-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (kernel crash) via a cmsg_len that contains a -1, which leads to a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*","matchCriteriaId":"6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*","matchCriteriaId":"C5FE15BF-91C7-452A-BE1B-7EC9632421C2"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*","matchCriteriaId":"15C1923C-D9C4-400D-9F0F-20B519EEC9C0"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*","matchCriteriaId":"E51913F9-FC7D-450A-9A82-5084AA74A5B2"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*","matchCriteriaId":"B62E02D5-9EEE-439B-A510-BEEE28A9F358"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*","matchCriteriaId":"02278C07-E649-427D-9E5C-F1738A01BCBD"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*","matchCriteriaId":"E120257D-346B-4BA6-A431-E6F820FBB5FB"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A0934C49-5F88-4189-BD88-2F32C39C2F25"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*","matchCriteriaId":"14B0A230-4054-4483-A3A7-9A5A286C7552"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*","matchCriteriaId":"F90242EF-048B-4539-AA41-87AA84875A9E"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*","matchCriteriaId":"3C4E9325-2A70-4E15-9AAF-5588BF218055"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*","matchCriteriaId":"01402A85-B681-4DE0-B7BB-F52567DA29E2"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*","matchCriteriaId":"1FC53528-A67F-42DF-B8DA-778A65893F9D"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*","matchCriteriaId":"4B130EB7-A951-4717-A906-E2F602F7B69F"},{"vulnerable":false,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6996B14-925B-46B8-982F-3545328B506B"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*","matchCriteriaId":"EC80CF67-C51D-442C-9526-CFEDE84A6304"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"138985E6-5107-4E8B-A801-C3D5FE075227"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*","matchCriteriaId":"9B502A61-44FB-4CD4-85BE-88D4ACCCA441"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:i686:*:*:*:*:*","matchCriteriaId":"05853955-CA81-40D3-9A70-1227F3270D3C"},{"vulnerable":false,"criteria":"cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*","matchCriteriaId":"F3FDE8C4-5FFD-4CC2-9F35-7C32043966D1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110383108211524&w=2","source":"cve@mitre.org"},{"url":"http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11956","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18522","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110383108211524&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18522","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1335","sourceIdentifier":"cve@mitre.org","published":"2004-12-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory consumption) by repeatedly calling the ip_cmsg_send function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*","matchCriteriaId":"6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*","matchCriteriaId":"C5FE15BF-91C7-452A-BE1B-7EC9632421C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*","matchCriteriaId":"15C1923C-D9C4-400D-9F0F-20B519EEC9C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*","matchCriteriaId":"E51913F9-FC7D-450A-9A82-5084AA74A5B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*","matchCriteriaId":"B62E02D5-9EEE-439B-A510-BEEE28A9F358"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*","matchCriteriaId":"02278C07-E649-427D-9E5C-F1738A01BCBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*","matchCriteriaId":"E120257D-346B-4BA6-A431-E6F820FBB5FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A0934C49-5F88-4189-BD88-2F32C39C2F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*","matchCriteriaId":"14B0A230-4054-4483-A3A7-9A5A286C7552"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*","matchCriteriaId":"F90242EF-048B-4539-AA41-87AA84875A9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*","matchCriteriaId":"3C4E9325-2A70-4E15-9AAF-5588BF218055"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*","matchCriteriaId":"01402A85-B681-4DE0-B7BB-F52567DA29E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*","matchCriteriaId":"1FC53528-A67F-42DF-B8DA-778A65893F9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*","matchCriteriaId":"4B130EB7-A951-4717-A906-E2F602F7B69F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6996B14-925B-46B8-982F-3545328B506B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*","matchCriteriaId":"EC80CF67-C51D-442C-9526-CFEDE84A6304"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"138985E6-5107-4E8B-A801-C3D5FE075227"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*","matchCriteriaId":"9B502A61-44FB-4CD4-85BE-88D4ACCCA441"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:i686:*:*:*:*:*","matchCriteriaId":"05853955-CA81-40D3-9A70-1227F3270D3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*","matchCriteriaId":"F3FDE8C4-5FFD-4CC2-9F35-7C32043966D1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110383108211524&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20163","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20202","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20338","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"cve@mitre.org"},{"url":"http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-016.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-017.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11956","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18524","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11085","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110383108211524&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20163","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1082","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-016.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-017.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11956","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securitytrap.com/mail/full-disclosure/2004/Dec/0323.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1336","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:debian:tetex-bin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E5300DB0-FCD6-4684-B401-28E02C242517"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286370","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110383942014839&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12100","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18708","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110383942014839&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18708","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1337","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:realtime_linux_security_module:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"5D5094E9-4464-471D-AA5E-E4B4B7A7F1CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*","matchCriteriaId":"6E94583A-5184-462E-9FC4-57B35DA06DA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*","matchCriteriaId":"E905FAAD-37B6-4DD0-A752-2974F8336273"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110384535113035&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12093","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18673","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110384535113035&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18673","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1338","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then performing a DELETE on the SDO_TXN_IDX_INSERTS table, which causes the SDO_CMT_CBK_TRIG trigger to execute the user-supplied functions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.1:r2:*:*:*:*:*:*","matchCriteriaId":"ABF498E5-F7DF-41F4-BC47-AB66E69BC89F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8F012561-EA9E-4665-AD81-0AC7655BA22A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FEF5BE7D-BB10-43E5-8910-626CB6032D64"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5DA959EE-44EE-4B81-B7D3-E1C4B9B29FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"330BE6F7-144F-4188-84A4-6597AED71024"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"ED7598BA-C4F9-46C7-A90D-F80697EA9E4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D52D7F1A-7ADF-439B-9FF6-BF0D18CEF3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BBAA75E1-6ED1-400E-9BBE-1890D7D0FA28"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0D24685E-293E-4292-A7FC-E463723FFA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0A1207BD-F50A-4E5E-89E8-E016AF356149"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"79C42FED-8E75-4AAD-9870-CD16508DDF86"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34E38EFA-AEFB-4B9E-913C-FFE3C2DABFC7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110382230614420&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004I.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18655","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110382230614420&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004I.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1339","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new.column_name parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.2.1:r2:*:*:*:*:*:*","matchCriteriaId":"ABF498E5-F7DF-41F4-BC47-AB66E69BC89F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C2720EA-55FB-40B1-BE58-3E16628DA248"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D9BB176D-7A94-4A91-89FC-9971E19FF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8F012561-EA9E-4665-AD81-0AC7655BA22A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FEF5BE7D-BB10-43E5-8910-626CB6032D64"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5DA959EE-44EE-4B81-B7D3-E1C4B9B29FAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"330BE6F7-144F-4188-84A4-6597AED71024"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"ED7598BA-C4F9-46C7-A90D-F80697EA9E4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D52D7F1A-7ADF-439B-9FF6-BF0D18CEF3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"BBAA75E1-6ED1-400E-9BBE-1890D7D0FA28"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0D24685E-293E-4292-A7FC-E463723FFA9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0A1207BD-F50A-4E5E-89E8-E016AF356149"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"79C42FED-8E75-4AAD-9870-CD16508DDF86"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34E38EFA-AEFB-4B9E-913C-FFE3C2DABFC7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110382230614420&w=2","source":"cve@mitre.org"},{"url":"http://www.ngssoftware.com/advisories/oracle23122004I.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18655","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110382230614420&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ngssoftware.com/advisories/oracle23122004I.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1343","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service (server crash)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10:*:*:*:*:*:*:*","matchCriteriaId":"BEA94DE3-B1DA-40CC-BD60-291B0563500F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.6:*:*:*:*:*:*:*","matchCriteriaId":"A305C6F7-35DA-48E2-B345-14671629226D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.7:*:*:*:*:*:*:*","matchCriteriaId":"C9F7CA6E-7D45-46C9-A437-0D0C4D3F25CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*","matchCriteriaId":"62135DD0-140D-42C2-9302-31B5E2DE1A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*","matchCriteriaId":"D92B456C-5F8E-4DC2-940C-AE06B42DD3A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"37B53C85-AA0E-40DD-B477-058586197714"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.1_p1:*:*:*:*:*:*:*","matchCriteriaId":"D1D1234F-1BB0-432B-B7B7-A97E3ADD5561"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"6D472B97-F7C2-4973-9D71-AB3CF1F8774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.3:*:*:*:*:*:*:*","matchCriteriaId":"9D0DCF26-59A8-46AC-99D7-97C203A0D702"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.4:*:*:*:*:*:*:*","matchCriteriaId":"B31BAACA-7518-48D2-ADEE-F59F4569D3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.5:*:*:*:*:*:*:*","matchCriteriaId":"9D2748A8-5047-4338-A08E-986497AE4B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.6:*:*:*:*:*:*:*","matchCriteriaId":"525C4E91-2186-4D3A-9DF0-1C6A75A3F919"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.10:*:*:*:*:*:*:*","matchCriteriaId":"EB231E7F-1A6F-4A79-8ED2-F6CAD311A5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.11:*:*:*:*:*:*:*","matchCriteriaId":"FF7105E4-25F8-4AE3-9EDD-D44BF3E17145"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.14:*:*:*:*:*:*:*","matchCriteriaId":"7C22BAF3-7B9C-4B2E-B5C6-1F37B896C301"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.15:*:*:*:*:*:*:*","matchCriteriaId":"4AFFAE96-873A-4253-BCC7-1049DA81D9CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.16:*:*:*:*:*:*:*","matchCriteriaId":"D1163535-583A-4504-BE7B-8919143CDF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12:*:*:*:*:*:*:*","matchCriteriaId":"36BFAB00-58EA-43B7-93FB-874EF4104C5B"}]}]}],"references":[{"url":"http://www.debian.org/security/2005/dsa-715","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2005/dsa-715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-1345","sourceIdentifier":"cve@mitre.org","published":"2004-06-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Sun StorEdge Enterprise Storage Manager (ESM) 2.1 for Solaris 8 and Solaris 9 allows local users with the \"ESMUser\" role to gain root access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:storedge_3310_scsi_array:*:*:*:*:*:*:*:*","matchCriteriaId":"C45C1B0D-FA18-4EA1-B389-D4CFE9C7CD71"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:storedge_3510_fc_array:*:*:*:*:*:*:*:*","matchCriteriaId":"BAC898D9-B822-4832-B92B-CBBF274D491A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:enterprise_storage_manager:2.1:*:*:*:*:*:*:*","matchCriteriaId":"8A33B165-90B1-4BE4-90E9-AF24CB5E33E9"}]}]}],"references":[{"url":"http://secunia.com/advisories/11935/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57581-1&searchclause=security","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-166.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/976470","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10580","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16463","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1707","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11935/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57581-1&searchclause=security","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-166.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/976470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1707","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1346","sourceIdentifier":"cve@mitre.org","published":"2004-06-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Sun Solaris Volume Manager (SVM) on Solaris 9 allows local users to cause a denial of service (kernel panic) via a malformed probe request to the SVM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"}]}]}],"references":[{"url":"http://secunia.com/advisories/12104/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57598-1&searchclause=security","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4253","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/390742","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10747","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16729","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3465","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12104/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57598-1&searchclause=security","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/390742","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16729","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1347","sourceIdentifier":"cve@mitre.org","published":"2004-08-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"X Display Manager (XDM) on Solaris 8 allows remote attackers to cause a denial of service (XDM crash) via an invalid X Display Manager Control Protocol (XDMCP) request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*","matchCriteriaId":"3F305CBD-4329-44DE-A85C-DE9FF371425E"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://secunia.com/advisories/12257/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101549-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57619-1&searchclause=security","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/139504","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10911","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16940","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100113","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12257/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101549-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57619-1&searchclause=security","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/139504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100113","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1348","sourceIdentifier":"cve@mitre.org","published":"2004-09-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in in.named on Solaris 8 allows remote attackers to cause a denial of service (process crash)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://secunia.com/advisories/12470/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57614-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4369","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11118","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17269","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3960","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12470/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57614-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4369","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3960","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1349","sourceIdentifier":"cve@mitre.org","published":"2004-10-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gzip:*:*:*:*:*:*:*:*","versionEndExcluding":"1.3","matchCriteriaId":"6693B6AA-575B-4338-B9D4-B17C5FACB88C"},{"vulnerable":true,"criteria":"cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*","matchCriteriaId":"722A52CF-4C6E-44D3-90C4-D2F72A40EF58"}]}]}],"references":[{"url":"http://secunia.com/advisories/12744","source":"cve@mitre.org","tags":["Not Applicable","Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57600-1&searchclause=security","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/635998","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11318","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17577","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1654","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://secunia.com/advisories/12744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57600-1&searchclause=security","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/635998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]}]}},{"cve":{"id":"CVE-2004-1350","sourceIdentifier":"cve@mitre.org","published":"2004-10-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"D36EE342-0A55-4F2E-9037-14C0975CEA9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp1:*:*:*:*:*:*","matchCriteriaId":"DD35DA64-83B8-4EF4-94E8-D692E6FDD0AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp2:*:*:*:*:*:*","matchCriteriaId":"BB5D85FB-D4A6-4518-BBD9-8D021446E433"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp3:*:*:*:*:*:*","matchCriteriaId":"A1102A86-8FB6-418E-808E-A6B94016E0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_proxy_server:3.6:sp4:*:*:*:*:*:*","matchCriteriaId":"E6A1EC8B-311D-4D34-A669-FF52B29BB5C3"}]}]}],"references":[{"url":"http://secunia.com/advisories/13036/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012005","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security","source":"cve@mitre.org"},{"url":"http://www.auscert.org.au/render.html?it=4516","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/p-027.shtml","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/964401","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=11304","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.pentest.co.uk/documents/ptl-2004-06.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11566","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17920","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13036/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012005","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.auscert.org.au/render.html?it=4516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/p-027.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/964401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=11304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.pentest.co.uk/documents/ptl-2004-06.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17920","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1351","sourceIdentifier":"cve@mitre.org","published":"2004-12-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the rwho daemon (in.rwhod) for Solaris 7 through 9 allows remote attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57659-1&searchclause=%22category:security%22%20%22availability%2C%20security%22","source":"cve@mitre.org"},{"url":"http://www.auscert.org.au/render.html?it=4597","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-050.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11840","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18385","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A592","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57659-1&searchclause=%22category:security%22%20%22availability%2C%20security%22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.auscert.org.au/render.html?it=4597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-050.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A592","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1352","sourceIdentifier":"cve@mitre.org","published":"2004-12-01T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ping daemon of Sun Solaris 7 through 9 may allow local users to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://secunia.com/advisories/13340","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1012368","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57675-1&searchclause=%22category:security%22%20%22availability%2C%20security%22","source":"cve@mitre.org"},{"url":"http://www.auscert.org.au/render.html?it=4586","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/p-045.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=12168","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11782","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18310","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3400","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1012368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57675-1&searchclause=%22category:security%22%20%22availability%2C%20security%22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.auscert.org.au/render.html?it=4586","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/p-045.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=12168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11782","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1353","sourceIdentifier":"cve@mitre.org","published":"2004-10-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in LDAP on Sun Solaris 8 and 9, when using Role Based Access Control (RBAC), allows local users to execute certain commands with additional privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://secunia.com/advisories/12873/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011789","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57657-1&searchclause=%22category:security%22%20%22availability%2C%20security%22","source":"cve@mitre.org"},{"url":"http://www.auscert.org.au/render.html?it=4482","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-017.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=10939","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11459","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17757","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4834","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12873/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57657-1&searchclause=%22category:security%22%20%22availability%2C%20security%22","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.auscert.org.au/render.html?it=4482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-017.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=10939","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4834","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1354","sourceIdentifier":"cve@mitre.org","published":"2004-05-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Solaris Management Console (SMC) in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal (..) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*","matchCriteriaId":"3F305CBD-4329-44DE-A85C-DE9FF371425E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://secunia.com/advisories/11616/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://spoofed.org/files/text/solaris-smc-advisory.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57559-1&searchclause=%22category:security%22%20%20111313-02","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4105","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/focus-sun/2003-10/0032.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=6119","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10349","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/8873","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16146","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1482","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11616/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://spoofed.org/files/text/solaris-smc-advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57559-1&searchclause=%22category:security%22%20%20111313-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/focus-sun/2003-10/0032.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=6119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/8873","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1355","sourceIdentifier":"cve@mitre.org","published":"2004-04-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*","matchCriteriaId":"469B74F2-4B89-42B8-8638-731E92D463B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/11483/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57545-1&searchclause=%22category:security%22%20%20111313-02","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4057","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=5665","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10216","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15955","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2972","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11483/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57545-1&searchclause=%22category:security%22%20%20111313-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=5665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2972","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1356","sourceIdentifier":"cve@mitre.org","published":"2004-04-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the sendfilev function in Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://secunia.com/advisories/11457/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57470-1&searchclause=%22category:security%22%20%20108528-27","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4056","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=5619","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10202","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15946","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1684","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11457/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57470-1&searchclause=%22category:security%22%20%20108528-27","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=5619","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1684","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1357","sourceIdentifier":"cve@mitre.org","published":"2004-04-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Secure Shell (SSH) Daemon (SSHD) in Sun Solaris 9 does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0, which makes it easier for remote attackers to hide the source of their activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"}]}]}],"references":[{"url":"http://secunia.com/advisories/11316/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57538-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4003","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/737548","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10080","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15784","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3505","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11316/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57538-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/737548","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15784","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3505","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1358","sourceIdentifier":"cve@mitre.org","published":"2004-03-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The patches (1) 114332-08 and (2) 114929-06 for Sun Solaris 9 disable the auditing functionality of the Basic Security Module (BSM), which allows attackers to avoid having their activity logged."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57478-1&searchclause=%22category:security%22%20%20114332-08","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=3788","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-099.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9852","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14918","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3567","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57478-1&searchclause=%22category:security%22%20%20114332-08","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=3788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-099.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3567","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1359","sourceIdentifier":"cve@mitre.org","published":"2004-03-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in uucp for Sun Solaris 2.6, 7, 8, and 9 allow local users to execute arbitrary code as the uucp user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57508-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=3935","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9837","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15425","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1127","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57508-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=3935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9837","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15425","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1127","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1360","sourceIdentifier":"cve@mitre.org","published":"2004-02-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in conv_fix in Sun Solaris 7 through 9, when invoked by conv_lpd, allows local users to overwrite arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":false,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://secunia.com/advisories/10991","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57509-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=3902","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-089.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/412566","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=4071","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9759","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15331","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1732","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10991","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57509-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=3902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-089.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/412566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=4071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15331","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1732","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1361","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a malformed .hlp file, which leads to a heap-based buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*","matchCriteriaId":"294EBA01-147B-4DA0-937E-ACBB655EDE53"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*","matchCriteriaId":"4E8B7346-F2AA-434C-A048-7463EC1BB117"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*","matchCriteriaId":"BE1A6107-DE00-4A1C-87FC-9E4015165B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*","matchCriteriaId":"83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*","matchCriteriaId":"E69D0E21-8C62-403E-8097-2CA403CBBB1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1_beta_1:*:*:*:*:*:*","matchCriteriaId":"EAB2E520-56D9-4B3F-99BA-EBC04AC30E4F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*","matchCriteriaId":"B127407D-AE50-4AFE-A780-D85B5AF44A2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*","matchCriteriaId":"5D42E51C-740A-4441-8BAF-D073111B984C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*","matchCriteriaId":"34ACB544-87DD-4D9A-99F0-A10F48C1EE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:sp1_beta_1:*:*:*:*:*:*","matchCriteriaId":"EEAFE154-7058-40A1-9806-22476A7DF0BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*","matchCriteriaId":"74AD256D-4BCE-41FB-AD73-C5C63A59A06D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:standard:sp1_beta_1:*:*:*:*:*:*","matchCriteriaId":"394F16B8-C29F-445A-AA47-AA82F78CFA20"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*","matchCriteriaId":"B518E945-5FDE-4A37-878D-6946653C91F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:web:sp1_beta_1:*:*:*:*:*:*","matchCriteriaId":"A2A2852D-64BE-40B1-8811-02EBDC1E044E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"237D7C18-C8D6-4FDB-A160-FA17DD46A55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*","matchCriteriaId":"7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*","matchCriteriaId":"6E7E6AD3-5418-4FEA-84B5-833059CA880D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*","matchCriteriaId":"35346A7B-2CB5-446D-B0C3-1F21D71A746D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise_server:*:*:*:*:*","matchCriteriaId":"064F4E76-1B89-4FA5-97ED-64624285C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*","matchCriteriaId":"089A953C-8446-4E6F-B506-430C38DF37B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_server:*:*:*:*:*","matchCriteriaId":"EA262C44-C0E6-493A-B8E5-4D26E4013226"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*","matchCriteriaId":"416F06DD-980E-4A54-822D-CBA499FD1F86"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:enterprise_server:*:*:*:*:*","matchCriteriaId":"F66DC6FF-2B3D-4718-838F-9E055E89961F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:server:*:*:*:*:*","matchCriteriaId":"656AE014-AEEC-46E8-A696-61FEA7932F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:terminal_server:*:*:*:*:*","matchCriteriaId":"EB519FE0-9E7D-4E71-8873-356C9D7CEAB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp2:workstation:*:*:*:*:*","matchCriteriaId":"A08D0EA1-DA1B-4C52-883A-3F156F032517"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:enterprise_server:*:*:*:*:*","matchCriteriaId":"DA267420-56C5-4697-B0AA-52932F78B24B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:server:*:*:*:*:*","matchCriteriaId":"93BA426E-DD51-44AC-BE78-3164670FF9E1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:terminal_server:*:*:*:*:*","matchCriteriaId":"224F8968-9F4C-4727-AAA3-61F5578EF54C"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp3:workstation:*:*:*:*:*","matchCriteriaId":"02BE9817-E1AE-4619-8302-CA7AA4167F48"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:enterprise_server:*:*:*:*:*","matchCriteriaId":"363E3895-A19B-42EC-B479-765168DC0B17"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:server:*:*:*:*:*","matchCriteriaId":"FBBBF25A-709B-4716-9894-AD82180091AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:terminal_server:*:*:*:*:*","matchCriteriaId":"407DA6E8-0832-49FE-AE14-35C104C237EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp4:workstation:*:*:*:*:*","matchCriteriaId":"88B70B7A-5BCC-4626-AAC7-D1ACFF25D66E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:enterprise_server:*:*:*:*:*","matchCriteriaId":"81B7961D-151D-4773-80CB-CCD0456BFEAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:server:*:*:*:*:*","matchCriteriaId":"82781A72-A34F-4668-9EE8-C203B04E3367"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:terminal_server:*:*:*:*:*","matchCriteriaId":"AFE612D2-DF38-404F-AED1-B8C9C24012DE"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp5:workstation:*:*:*:*:*","matchCriteriaId":"12ED7363-6EEE-4688-A9B7-C5EB1107A7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:enterprise_server:*:*:*:*:*","matchCriteriaId":"B5CAF64E-98AA-4813-A2A2-5AC3387CF230"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:server:*:*:*:*:*","matchCriteriaId":"BCDFDBBA-6C4F-472A-9F4F-461C424794E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:terminal_server:*:*:*:*:*","matchCriteriaId":"BCC5E316-FB61-408B-BAA2-7FE03D581250"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6:workstation:*:*:*:*:*","matchCriteriaId":"EDDD8DA8-D074-4543-AEDF-F856B5567F21"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:enterprise_server:*:*:*:*:*","matchCriteriaId":"CA7BA525-6DB8-4444-934A-932AFED69816"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:server:*:*:*:*:*","matchCriteriaId":"90CFA69B-7814-4F97-A14D-D76310065CF3"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:terminal_server:*:*:*:*:*","matchCriteriaId":"2FECD4B0-23A0-4C0B-9888-D28A5941D848"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_nt:4.0:sp6a:workstation:*:*:*:*:*","matchCriteriaId":"AB6ADBAF-6EB0-4CFA-9D33-A814AC20484E"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*","matchCriteriaId":"91D6D065-A28D-49DA-B7F4-38421FF86498"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*","matchCriteriaId":"403945FA-8676-4D98-B903-48452B46F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*","matchCriteriaId":"B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*","matchCriteriaId":"6A05337E-18A5-4939-85A0-69583D9B5AD9"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*","matchCriteriaId":"E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*","matchCriteriaId":"7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110383690219440&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12091","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.xfocus.net/flashsky/icoExp/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18678","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110383690219440&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.xfocus.net/flashsky/icoExp/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18678","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1362","sourceIdentifier":"cve@mitre.org","published":"2004-08-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with \"%FF\" encoded sequences that are improperly converted to \"Y\" characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E59B89D9-AAF9-40CB-931C-EB4958491B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C64888FB-133F-4930-8368-1BD2A4FB11A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"87DEB7BD-FB71-4C22-A0FF-89923B263DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BAAD1A33-4333-4AFB-8D49-1274AE345BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"852BF209-3C6F-403B-920D-50C46D37515B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"335143DB-4538-49F4-BAFB-C47802318667"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F6A3E2D8-617C-4740-B662-F8884CE26BF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4FFBB096-523E-4634-ADC4-6CFB03F9577B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:release_1:*:*:*:*:*:*:*","matchCriteriaId":"3D1A1DC8-A38C-4061-A825-C6CC2ED453E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A9E237E5-9E1A-4F20-9A3D-E3418E3B1329"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F57A5AE0-90B5-410E-8878-BD514C3B7946"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EA7EAC35-E890-444A-B070-C91382F2E242"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*","matchCriteriaId":"69568B66-122B-4946-B630-2960DAA1885E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*","matchCriteriaId":"6C3E4A5C-8D0F-4105-8618-26586BEDE84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*","matchCriteriaId":"D07FEA4F-B1C7-4250-81FD-AC1289769348"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9:*:*:*:*:*:*:*","matchCriteriaId":"E3595689-13AE-4349-8684-D73D33D4A9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53F57A30-BE27-4F93-B8E4-B0956007F625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_database_control:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F074FCED-60D9-4B07-8A6F-85A89C8CFC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"016AFE8B-049D-4BA9-9270-E18DFDFDC61F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"BF667575-AD5F-43D6-B7BF-F255C1A14A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"6CEA97EC-FC86-4F53-A134-B98F25892BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E41C0DB6-CD92-4FDC-A705-83CFB92C062A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"ACC43855-2664-42CC-87DD-3C90DB1430C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25A4D091-1D89-484E-A3F7-0F98F8814686"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D96A60B5-7B83-4E94-AF2B-AF3DF28EE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0C5C8D47-953E-41DF-9852-955611F6D387"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C4798CAE-9AAA-4623-85B2-309DB46DD28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"121CF7A1-1710-4DA1-B7B6-028557D3FA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"616AD7A7-C8F3-4125-8E26-64109EA40730"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C7365AA-ACDA-461A-A84C-6B4FF04F295F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"42C22E50-FDB8-4314-9F36-70D0130EAA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2C65AC14-2AA0-4475-9932-E4AEA410CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BA730ABB-F315-4F7F-B820-33C5558B05DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B4CE4E08-4892-419D-AC51-68DD42073092"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EF52682E-0AB7-4C3F-94D4-7B4A7E08F2C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C65C2671-2FFE-4461-A570-72E3BBC312D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6_.3:*:*:*:*:*:*:*","matchCriteriaId":"CA59E72F-ACC1-44F3-AE63-B42F1EB83F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B5CB4061-855C-4DAA-BDAD-AA1E68EFC1E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"07F81AC9-DEBD-4B04-8753-C68BAE509B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"0785C55D-183D-42D8-A9F9-DBD297FE7F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8086BBDC-76BE-47C0-8F11-CEC57A23FC27"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.1:*:*:*:*:*:*:*","matchCriteriaId":"72BAAEF7-74CA-4C4F-8D52-AC4D5DE2E0E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EECAE774-22F3-4872-9E05-A14376F3883D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DFAA7E8B-263B-40A2-B6D8-8A303A7D4358"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"085FF0CB-B426-4DCB-9411-017A45280A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ED4991B9-67A9-4EE9-A30F-27950BF3A3DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2201796B-013B-4440-B366-1F2966AA86FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"43C6FFA8-18A6-4EE1-BE10-A1B7F3C1A47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F90F6C4F-CEF5-4172-97FC-617B71EAA636"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2FFA2A5C-B289-4505-85F5-7F6F0222B552"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4E876825-D6E5-4958-B737-4CE43A32BEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8E07567-754A-40C0-9428-D151880EE6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6233345D-5100-404A-9B61-524D9679D9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB739C3-A9BD-433F-8547-12BC615DB18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7231B057-9B7E-43CA-9E91-6DF74D6ADAE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F4D7A3CB-54CC-4CD9-9672-366233BF0CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"58DB0B6B-EB97-448A-B63E-E5997382DD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DA77BC6D-661F-46E9-B144-1587C1192B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"16F9C7F3-8140-4FEF-8319-64CE51B830AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2:*:*:*:*:*:*:*","matchCriteriaId":"68286D06-9EBA-4FBD-AB0B-D80993895416"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C059683-E0A1-4E97-B393-CB6B0EACF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675664-7036-48D0-9524-0350F626D4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EA9F3EE8-DA8B-4605-B70B-CFCA25B07C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D0DE0FB4-3C1A-460D-B48E-11D7AF415A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"597EE9ED-6A95-46C7-BE83-ADEC6AA65341"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"DCAD9D1D-A7E5-4D88-B93B-C518BF1986AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0:*:*:*:*:*:*:*","matchCriteriaId":"6E46FE2E-CA1A-4970-81FF-0BFFF2CF6849"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3EE7A2B1-A161-4A20-9EEC-B1EF7F2E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D65D66A0-23F7-4110-AF71-05CBFB3F92F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F207CBC6-D186-418D-8F11-3E623530E00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB2708A-58D1-4F17-8504-3748D6667788"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E83B1C7A-287A-405F-B44E-85F891183D2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34FC1E19-8F20-4215-8D90-E42EF7126BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2:*:*:*:*:*:*:*","matchCriteriaId":"CB172848-A873-4137-A335-AD034806A5EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B78BD7D2-7B48-438C-8C24-01C4007C1A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0DDCC0D1-32AD-4902-8383-2AA169C3F3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2D4D70A8-A6FE-4F82-82F1-AB1E9C28FB35"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7F64908D-FDAA-499B-8060-8A6EC2443418"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E77BCF6E-0D09-4DAF-B147-D11FEEE7371C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110382306006205&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/435974","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004G.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10871","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18657","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110382306006205&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/435974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004G.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18657","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1363","sourceIdentifier":"cve@mitre.org","published":"2004-08-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-131"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E59B89D9-AAF9-40CB-931C-EB4958491B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C64888FB-133F-4930-8368-1BD2A4FB11A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"87DEB7BD-FB71-4C22-A0FF-89923B263DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BAAD1A33-4333-4AFB-8D49-1274AE345BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"852BF209-3C6F-403B-920D-50C46D37515B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"335143DB-4538-49F4-BAFB-C47802318667"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F6A3E2D8-617C-4740-B662-F8884CE26BF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4FFBB096-523E-4634-ADC4-6CFB03F9577B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:-:*:*:*:*:*:*:*","matchCriteriaId":"0F72FA3A-068D-4DC8-84DF-A86FDA7CAE1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:8.1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"B559C62F-88A7-42D3-9629-9F5CAD43F8B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2109201B-89F7-4FF2-BFD1-2B220E3146FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B6C67572-800C-4214-AD12-E9017A9A5BAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"E108197C-DCA8-4624-9FEF-621BFB299662"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B4C63EC8-73D7-46AE-81E7-04DF212BC8B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"47CC3066-82BA-41AB-B6C8-D2E7D7AE7D6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"553BAC35-0A37-40C2-A150-F34D59D097F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A9E237E5-9E1A-4F20-9A3D-E3418E3B1329"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F57A5AE0-90B5-410E-8878-BD514C3B7946"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EA7EAC35-E890-444A-B070-C91382F2E242"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*","matchCriteriaId":"69568B66-122B-4946-B630-2960DAA1885E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*","matchCriteriaId":"6C3E4A5C-8D0F-4105-8618-26586BEDE84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*","matchCriteriaId":"D07FEA4F-B1C7-4250-81FD-AC1289769348"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9:*:*:*:*:*:*:*","matchCriteriaId":"E3595689-13AE-4349-8684-D73D33D4A9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53F57A30-BE27-4F93-B8E4-B0956007F625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_database_control:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F074FCED-60D9-4B07-8A6F-85A89C8CFC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"016AFE8B-049D-4BA9-9270-E18DFDFDC61F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110382345829397&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004.txt","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10871","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18659","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=110382345829397&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1364","sourceIdentifier":"cve@mitre.org","published":"2004-08-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\\bin directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E59B89D9-AAF9-40CB-931C-EB4958491B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C64888FB-133F-4930-8368-1BD2A4FB11A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"87DEB7BD-FB71-4C22-A0FF-89923B263DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BAAD1A33-4333-4AFB-8D49-1274AE345BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"852BF209-3C6F-403B-920D-50C46D37515B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"335143DB-4538-49F4-BAFB-C47802318667"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F6A3E2D8-617C-4740-B662-F8884CE26BF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4FFBB096-523E-4634-ADC4-6CFB03F9577B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:release_1:*:*:*:*:*:*:*","matchCriteriaId":"3D1A1DC8-A38C-4061-A825-C6CC2ED453E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A9E237E5-9E1A-4F20-9A3D-E3418E3B1329"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F57A5AE0-90B5-410E-8878-BD514C3B7946"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EA7EAC35-E890-444A-B070-C91382F2E242"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*","matchCriteriaId":"69568B66-122B-4946-B630-2960DAA1885E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*","matchCriteriaId":"6C3E4A5C-8D0F-4105-8618-26586BEDE84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*","matchCriteriaId":"D07FEA4F-B1C7-4250-81FD-AC1289769348"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9:*:*:*:*:*:*:*","matchCriteriaId":"E3595689-13AE-4349-8684-D73D33D4A9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53F57A30-BE27-4F93-B8E4-B0956007F625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_database_control:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F074FCED-60D9-4B07-8A6F-85A89C8CFC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"016AFE8B-049D-4BA9-9270-E18DFDFDC61F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"BF667575-AD5F-43D6-B7BF-F255C1A14A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"6CEA97EC-FC86-4F53-A134-B98F25892BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E41C0DB6-CD92-4FDC-A705-83CFB92C062A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"ACC43855-2664-42CC-87DD-3C90DB1430C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25A4D091-1D89-484E-A3F7-0F98F8814686"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D96A60B5-7B83-4E94-AF2B-AF3DF28EE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0C5C8D47-953E-41DF-9852-955611F6D387"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C4798CAE-9AAA-4623-85B2-309DB46DD28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"121CF7A1-1710-4DA1-B7B6-028557D3FA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"616AD7A7-C8F3-4125-8E26-64109EA40730"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C7365AA-ACDA-461A-A84C-6B4FF04F295F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"42C22E50-FDB8-4314-9F36-70D0130EAA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2C65AC14-2AA0-4475-9932-E4AEA410CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BA730ABB-F315-4F7F-B820-33C5558B05DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B4CE4E08-4892-419D-AC51-68DD42073092"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EF52682E-0AB7-4C3F-94D4-7B4A7E08F2C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C65C2671-2FFE-4461-A570-72E3BBC312D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6_.3:*:*:*:*:*:*:*","matchCriteriaId":"CA59E72F-ACC1-44F3-AE63-B42F1EB83F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B5CB4061-855C-4DAA-BDAD-AA1E68EFC1E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"07F81AC9-DEBD-4B04-8753-C68BAE509B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"0785C55D-183D-42D8-A9F9-DBD297FE7F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8086BBDC-76BE-47C0-8F11-CEC57A23FC27"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.1:*:*:*:*:*:*:*","matchCriteriaId":"72BAAEF7-74CA-4C4F-8D52-AC4D5DE2E0E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EECAE774-22F3-4872-9E05-A14376F3883D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DFAA7E8B-263B-40A2-B6D8-8A303A7D4358"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"085FF0CB-B426-4DCB-9411-017A45280A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ED4991B9-67A9-4EE9-A30F-27950BF3A3DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2201796B-013B-4440-B366-1F2966AA86FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"43C6FFA8-18A6-4EE1-BE10-A1B7F3C1A47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F90F6C4F-CEF5-4172-97FC-617B71EAA636"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2FFA2A5C-B289-4505-85F5-7F6F0222B552"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4E876825-D6E5-4958-B737-4CE43A32BEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8E07567-754A-40C0-9428-D151880EE6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6233345D-5100-404A-9B61-524D9679D9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB739C3-A9BD-433F-8547-12BC615DB18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7231B057-9B7E-43CA-9E91-6DF74D6ADAE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F4D7A3CB-54CC-4CD9-9672-366233BF0CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"58DB0B6B-EB97-448A-B63E-E5997382DD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DA77BC6D-661F-46E9-B144-1587C1192B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"16F9C7F3-8140-4FEF-8319-64CE51B830AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2:*:*:*:*:*:*:*","matchCriteriaId":"68286D06-9EBA-4FBD-AB0B-D80993895416"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C059683-E0A1-4E97-B393-CB6B0EACF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675664-7036-48D0-9524-0350F626D4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EA9F3EE8-DA8B-4605-B70B-CFCA25B07C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D0DE0FB4-3C1A-460D-B48E-11D7AF415A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"597EE9ED-6A95-46C7-BE83-ADEC6AA65341"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"DCAD9D1D-A7E5-4D88-B93B-C518BF1986AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0:*:*:*:*:*:*:*","matchCriteriaId":"6E46FE2E-CA1A-4970-81FF-0BFFF2CF6849"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3EE7A2B1-A161-4A20-9EEC-B1EF7F2E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D65D66A0-23F7-4110-AF71-05CBFB3F92F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F207CBC6-D186-418D-8F11-3E623530E00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB2708A-58D1-4F17-8504-3748D6667788"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E83B1C7A-287A-405F-B44E-85F891183D2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34FC1E19-8F20-4215-8D90-E42EF7126BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2:*:*:*:*:*:*:*","matchCriteriaId":"CB172848-A873-4137-A335-AD034806A5EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B78BD7D2-7B48-438C-8C24-01C4007C1A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0DDCC0D1-32AD-4902-8383-2AA169C3F3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2D4D70A8-A6FE-4F82-82F1-AB1E9C28FB35"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7F64908D-FDAA-499B-8060-8A6EC2443418"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E77BCF6E-0D09-4DAF-B147-D11FEEE7371C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110382406002365&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"cve@mitre.org"},{"url":"http://www.0xdeadbeef.info/exploits/raptor_oraextproc.sql","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004B.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/454861/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10871","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18658","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110382406002365&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.0xdeadbeef.info/exploits/raptor_oraextproc.sql","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004B.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/454861/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18658","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1365","sourceIdentifier":"cve@mitre.org","published":"2004-08-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E59B89D9-AAF9-40CB-931C-EB4958491B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C64888FB-133F-4930-8368-1BD2A4FB11A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"87DEB7BD-FB71-4C22-A0FF-89923B263DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BAAD1A33-4333-4AFB-8D49-1274AE345BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"852BF209-3C6F-403B-920D-50C46D37515B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"335143DB-4538-49F4-BAFB-C47802318667"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F6A3E2D8-617C-4740-B662-F8884CE26BF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4FFBB096-523E-4634-ADC4-6CFB03F9577B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:release_1:*:*:*:*:*:*:*","matchCriteriaId":"3D1A1DC8-A38C-4061-A825-C6CC2ED453E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A9E237E5-9E1A-4F20-9A3D-E3418E3B1329"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F57A5AE0-90B5-410E-8878-BD514C3B7946"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EA7EAC35-E890-444A-B070-C91382F2E242"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*","matchCriteriaId":"69568B66-122B-4946-B630-2960DAA1885E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*","matchCriteriaId":"6C3E4A5C-8D0F-4105-8618-26586BEDE84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*","matchCriteriaId":"D07FEA4F-B1C7-4250-81FD-AC1289769348"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9:*:*:*:*:*:*:*","matchCriteriaId":"E3595689-13AE-4349-8684-D73D33D4A9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53F57A30-BE27-4F93-B8E4-B0956007F625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_database_control:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F074FCED-60D9-4B07-8A6F-85A89C8CFC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"016AFE8B-049D-4BA9-9270-E18DFDFDC61F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"BF667575-AD5F-43D6-B7BF-F255C1A14A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"6CEA97EC-FC86-4F53-A134-B98F25892BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E41C0DB6-CD92-4FDC-A705-83CFB92C062A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"ACC43855-2664-42CC-87DD-3C90DB1430C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25A4D091-1D89-484E-A3F7-0F98F8814686"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D96A60B5-7B83-4E94-AF2B-AF3DF28EE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0C5C8D47-953E-41DF-9852-955611F6D387"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C4798CAE-9AAA-4623-85B2-309DB46DD28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"121CF7A1-1710-4DA1-B7B6-028557D3FA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"616AD7A7-C8F3-4125-8E26-64109EA40730"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C7365AA-ACDA-461A-A84C-6B4FF04F295F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"42C22E50-FDB8-4314-9F36-70D0130EAA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2C65AC14-2AA0-4475-9932-E4AEA410CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BA730ABB-F315-4F7F-B820-33C5558B05DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B4CE4E08-4892-419D-AC51-68DD42073092"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EF52682E-0AB7-4C3F-94D4-7B4A7E08F2C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C65C2671-2FFE-4461-A570-72E3BBC312D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6_.3:*:*:*:*:*:*:*","matchCriteriaId":"CA59E72F-ACC1-44F3-AE63-B42F1EB83F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B5CB4061-855C-4DAA-BDAD-AA1E68EFC1E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"07F81AC9-DEBD-4B04-8753-C68BAE509B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"0785C55D-183D-42D8-A9F9-DBD297FE7F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8086BBDC-76BE-47C0-8F11-CEC57A23FC27"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.1:*:*:*:*:*:*:*","matchCriteriaId":"72BAAEF7-74CA-4C4F-8D52-AC4D5DE2E0E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EECAE774-22F3-4872-9E05-A14376F3883D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DFAA7E8B-263B-40A2-B6D8-8A303A7D4358"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"085FF0CB-B426-4DCB-9411-017A45280A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ED4991B9-67A9-4EE9-A30F-27950BF3A3DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2201796B-013B-4440-B366-1F2966AA86FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"43C6FFA8-18A6-4EE1-BE10-A1B7F3C1A47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F90F6C4F-CEF5-4172-97FC-617B71EAA636"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2FFA2A5C-B289-4505-85F5-7F6F0222B552"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4E876825-D6E5-4958-B737-4CE43A32BEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8E07567-754A-40C0-9428-D151880EE6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6233345D-5100-404A-9B61-524D9679D9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB739C3-A9BD-433F-8547-12BC615DB18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7231B057-9B7E-43CA-9E91-6DF74D6ADAE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F4D7A3CB-54CC-4CD9-9672-366233BF0CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"58DB0B6B-EB97-448A-B63E-E5997382DD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DA77BC6D-661F-46E9-B144-1587C1192B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"16F9C7F3-8140-4FEF-8319-64CE51B830AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2:*:*:*:*:*:*:*","matchCriteriaId":"68286D06-9EBA-4FBD-AB0B-D80993895416"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C059683-E0A1-4E97-B393-CB6B0EACF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675664-7036-48D0-9524-0350F626D4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EA9F3EE8-DA8B-4605-B70B-CFCA25B07C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D0DE0FB4-3C1A-460D-B48E-11D7AF415A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"597EE9ED-6A95-46C7-BE83-ADEC6AA65341"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"DCAD9D1D-A7E5-4D88-B93B-C518BF1986AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0:*:*:*:*:*:*:*","matchCriteriaId":"6E46FE2E-CA1A-4970-81FF-0BFFF2CF6849"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3EE7A2B1-A161-4A20-9EEC-B1EF7F2E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D65D66A0-23F7-4110-AF71-05CBFB3F92F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F207CBC6-D186-418D-8F11-3E623530E00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB2708A-58D1-4F17-8504-3748D6667788"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E83B1C7A-287A-405F-B44E-85F891183D2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34FC1E19-8F20-4215-8D90-E42EF7126BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2:*:*:*:*:*:*:*","matchCriteriaId":"CB172848-A873-4137-A335-AD034806A5EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B78BD7D2-7B48-438C-8C24-01C4007C1A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0DDCC0D1-32AD-4902-8383-2AA169C3F3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2D4D70A8-A6FE-4F82-82F1-AB1E9C28FB35"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7F64908D-FDAA-499B-8060-8A6EC2443418"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E77BCF6E-0D09-4DAF-B147-D11FEEE7371C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110382471608835&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004C.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10871","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18662","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110382471608835&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004C.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1366","sourceIdentifier":"cve@mitre.org","published":"2004-08-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E59B89D9-AAF9-40CB-931C-EB4958491B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C64888FB-133F-4930-8368-1BD2A4FB11A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"87DEB7BD-FB71-4C22-A0FF-89923B263DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BAAD1A33-4333-4AFB-8D49-1274AE345BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"852BF209-3C6F-403B-920D-50C46D37515B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"335143DB-4538-49F4-BAFB-C47802318667"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F6A3E2D8-617C-4740-B662-F8884CE26BF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4FFBB096-523E-4634-ADC4-6CFB03F9577B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:release_1:*:*:*:*:*:*:*","matchCriteriaId":"3D1A1DC8-A38C-4061-A825-C6CC2ED453E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A9E237E5-9E1A-4F20-9A3D-E3418E3B1329"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F57A5AE0-90B5-410E-8878-BD514C3B7946"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EA7EAC35-E890-444A-B070-C91382F2E242"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*","matchCriteriaId":"69568B66-122B-4946-B630-2960DAA1885E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*","matchCriteriaId":"6C3E4A5C-8D0F-4105-8618-26586BEDE84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*","matchCriteriaId":"D07FEA4F-B1C7-4250-81FD-AC1289769348"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9:*:*:*:*:*:*:*","matchCriteriaId":"E3595689-13AE-4349-8684-D73D33D4A9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53F57A30-BE27-4F93-B8E4-B0956007F625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_database_control:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F074FCED-60D9-4B07-8A6F-85A89C8CFC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"016AFE8B-049D-4BA9-9270-E18DFDFDC61F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"BF667575-AD5F-43D6-B7BF-F255C1A14A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"6CEA97EC-FC86-4F53-A134-B98F25892BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E41C0DB6-CD92-4FDC-A705-83CFB92C062A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"ACC43855-2664-42CC-87DD-3C90DB1430C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25A4D091-1D89-484E-A3F7-0F98F8814686"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D96A60B5-7B83-4E94-AF2B-AF3DF28EE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0C5C8D47-953E-41DF-9852-955611F6D387"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C4798CAE-9AAA-4623-85B2-309DB46DD28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"121CF7A1-1710-4DA1-B7B6-028557D3FA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"616AD7A7-C8F3-4125-8E26-64109EA40730"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C7365AA-ACDA-461A-A84C-6B4FF04F295F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"42C22E50-FDB8-4314-9F36-70D0130EAA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2C65AC14-2AA0-4475-9932-E4AEA410CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BA730ABB-F315-4F7F-B820-33C5558B05DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B4CE4E08-4892-419D-AC51-68DD42073092"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EF52682E-0AB7-4C3F-94D4-7B4A7E08F2C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C65C2671-2FFE-4461-A570-72E3BBC312D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6_.3:*:*:*:*:*:*:*","matchCriteriaId":"CA59E72F-ACC1-44F3-AE63-B42F1EB83F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B5CB4061-855C-4DAA-BDAD-AA1E68EFC1E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"07F81AC9-DEBD-4B04-8753-C68BAE509B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"0785C55D-183D-42D8-A9F9-DBD297FE7F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8086BBDC-76BE-47C0-8F11-CEC57A23FC27"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.1:*:*:*:*:*:*:*","matchCriteriaId":"72BAAEF7-74CA-4C4F-8D52-AC4D5DE2E0E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EECAE774-22F3-4872-9E05-A14376F3883D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DFAA7E8B-263B-40A2-B6D8-8A303A7D4358"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"085FF0CB-B426-4DCB-9411-017A45280A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ED4991B9-67A9-4EE9-A30F-27950BF3A3DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2201796B-013B-4440-B366-1F2966AA86FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"43C6FFA8-18A6-4EE1-BE10-A1B7F3C1A47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F90F6C4F-CEF5-4172-97FC-617B71EAA636"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2FFA2A5C-B289-4505-85F5-7F6F0222B552"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4E876825-D6E5-4958-B737-4CE43A32BEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8E07567-754A-40C0-9428-D151880EE6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6233345D-5100-404A-9B61-524D9679D9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB739C3-A9BD-433F-8547-12BC615DB18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7231B057-9B7E-43CA-9E91-6DF74D6ADAE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F4D7A3CB-54CC-4CD9-9672-366233BF0CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"58DB0B6B-EB97-448A-B63E-E5997382DD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DA77BC6D-661F-46E9-B144-1587C1192B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"16F9C7F3-8140-4FEF-8319-64CE51B830AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2:*:*:*:*:*:*:*","matchCriteriaId":"68286D06-9EBA-4FBD-AB0B-D80993895416"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C059683-E0A1-4E97-B393-CB6B0EACF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675664-7036-48D0-9524-0350F626D4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EA9F3EE8-DA8B-4605-B70B-CFCA25B07C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D0DE0FB4-3C1A-460D-B48E-11D7AF415A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"597EE9ED-6A95-46C7-BE83-ADEC6AA65341"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"DCAD9D1D-A7E5-4D88-B93B-C518BF1986AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0:*:*:*:*:*:*:*","matchCriteriaId":"6E46FE2E-CA1A-4970-81FF-0BFFF2CF6849"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3EE7A2B1-A161-4A20-9EEC-B1EF7F2E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D65D66A0-23F7-4110-AF71-05CBFB3F92F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F207CBC6-D186-418D-8F11-3E623530E00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB2708A-58D1-4F17-8504-3748D6667788"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E83B1C7A-287A-405F-B44E-85F891183D2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34FC1E19-8F20-4215-8D90-E42EF7126BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2:*:*:*:*:*:*:*","matchCriteriaId":"CB172848-A873-4137-A335-AD034806A5EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B78BD7D2-7B48-438C-8C24-01C4007C1A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0DDCC0D1-32AD-4902-8383-2AA169C3F3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2D4D70A8-A6FE-4F82-82F1-AB1E9C28FB35"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7F64908D-FDAA-499B-8060-8A6EC2443418"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E77BCF6E-0D09-4DAF-B147-D11FEEE7371C"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004D.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/385323","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/10871","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18661","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004D.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/385323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/10871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18661","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1367","sourceIdentifier":"cve@mitre.org","published":"2004-08-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle 10g Database Server, when installed with a password that contains an exclamation point (\"!\") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain that password and use it against SYS or SYSTEM accounts, which may have been installed with the same password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E59B89D9-AAF9-40CB-931C-EB4958491B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C64888FB-133F-4930-8368-1BD2A4FB11A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"87DEB7BD-FB71-4C22-A0FF-89923B263DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BAAD1A33-4333-4AFB-8D49-1274AE345BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"852BF209-3C6F-403B-920D-50C46D37515B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"335143DB-4538-49F4-BAFB-C47802318667"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F6A3E2D8-617C-4740-B662-F8884CE26BF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4FFBB096-523E-4634-ADC4-6CFB03F9577B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:release_1:*:*:*:*:*:*:*","matchCriteriaId":"3D1A1DC8-A38C-4061-A825-C6CC2ED453E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A9E237E5-9E1A-4F20-9A3D-E3418E3B1329"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F57A5AE0-90B5-410E-8878-BD514C3B7946"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EA7EAC35-E890-444A-B070-C91382F2E242"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*","matchCriteriaId":"69568B66-122B-4946-B630-2960DAA1885E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*","matchCriteriaId":"6C3E4A5C-8D0F-4105-8618-26586BEDE84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*","matchCriteriaId":"D07FEA4F-B1C7-4250-81FD-AC1289769348"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9:*:*:*:*:*:*:*","matchCriteriaId":"E3595689-13AE-4349-8684-D73D33D4A9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53F57A30-BE27-4F93-B8E4-B0956007F625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_database_control:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F074FCED-60D9-4B07-8A6F-85A89C8CFC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"016AFE8B-049D-4BA9-9270-E18DFDFDC61F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"BF667575-AD5F-43D6-B7BF-F255C1A14A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"6CEA97EC-FC86-4F53-A134-B98F25892BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E41C0DB6-CD92-4FDC-A705-83CFB92C062A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"ACC43855-2664-42CC-87DD-3C90DB1430C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25A4D091-1D89-484E-A3F7-0F98F8814686"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D96A60B5-7B83-4E94-AF2B-AF3DF28EE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0C5C8D47-953E-41DF-9852-955611F6D387"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C4798CAE-9AAA-4623-85B2-309DB46DD28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"121CF7A1-1710-4DA1-B7B6-028557D3FA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"616AD7A7-C8F3-4125-8E26-64109EA40730"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C7365AA-ACDA-461A-A84C-6B4FF04F295F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"42C22E50-FDB8-4314-9F36-70D0130EAA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2C65AC14-2AA0-4475-9932-E4AEA410CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BA730ABB-F315-4F7F-B820-33C5558B05DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B4CE4E08-4892-419D-AC51-68DD42073092"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EF52682E-0AB7-4C3F-94D4-7B4A7E08F2C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C65C2671-2FFE-4461-A570-72E3BBC312D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6_.3:*:*:*:*:*:*:*","matchCriteriaId":"CA59E72F-ACC1-44F3-AE63-B42F1EB83F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B5CB4061-855C-4DAA-BDAD-AA1E68EFC1E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"07F81AC9-DEBD-4B04-8753-C68BAE509B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"0785C55D-183D-42D8-A9F9-DBD297FE7F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8086BBDC-76BE-47C0-8F11-CEC57A23FC27"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.1:*:*:*:*:*:*:*","matchCriteriaId":"72BAAEF7-74CA-4C4F-8D52-AC4D5DE2E0E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EECAE774-22F3-4872-9E05-A14376F3883D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DFAA7E8B-263B-40A2-B6D8-8A303A7D4358"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"085FF0CB-B426-4DCB-9411-017A45280A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ED4991B9-67A9-4EE9-A30F-27950BF3A3DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2201796B-013B-4440-B366-1F2966AA86FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"43C6FFA8-18A6-4EE1-BE10-A1B7F3C1A47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F90F6C4F-CEF5-4172-97FC-617B71EAA636"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2FFA2A5C-B289-4505-85F5-7F6F0222B552"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4E876825-D6E5-4958-B737-4CE43A32BEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8E07567-754A-40C0-9428-D151880EE6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6233345D-5100-404A-9B61-524D9679D9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB739C3-A9BD-433F-8547-12BC615DB18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7231B057-9B7E-43CA-9E91-6DF74D6ADAE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F4D7A3CB-54CC-4CD9-9672-366233BF0CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"58DB0B6B-EB97-448A-B63E-E5997382DD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DA77BC6D-661F-46E9-B144-1587C1192B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"16F9C7F3-8140-4FEF-8319-64CE51B830AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2:*:*:*:*:*:*:*","matchCriteriaId":"68286D06-9EBA-4FBD-AB0B-D80993895416"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C059683-E0A1-4E97-B393-CB6B0EACF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675664-7036-48D0-9524-0350F626D4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EA9F3EE8-DA8B-4605-B70B-CFCA25B07C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D0DE0FB4-3C1A-460D-B48E-11D7AF415A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"597EE9ED-6A95-46C7-BE83-ADEC6AA65341"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"DCAD9D1D-A7E5-4D88-B93B-C518BF1986AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0:*:*:*:*:*:*:*","matchCriteriaId":"6E46FE2E-CA1A-4970-81FF-0BFFF2CF6849"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3EE7A2B1-A161-4A20-9EEC-B1EF7F2E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D65D66A0-23F7-4110-AF71-05CBFB3F92F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F207CBC6-D186-418D-8F11-3E623530E00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB2708A-58D1-4F17-8504-3748D6667788"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E83B1C7A-287A-405F-B44E-85F891183D2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34FC1E19-8F20-4215-8D90-E42EF7126BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2:*:*:*:*:*:*:*","matchCriteriaId":"CB172848-A873-4137-A335-AD034806A5EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B78BD7D2-7B48-438C-8C24-01C4007C1A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0DDCC0D1-32AD-4902-8383-2AA169C3F3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2D4D70A8-A6FE-4F82-82F1-AB1E9C28FB35"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7F64908D-FDAA-499B-8060-8A6EC2443418"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E77BCF6E-0D09-4DAF-B147-D11FEEE7371C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110382247308064&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004D.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://marc.info/?l=bugtraq&m=110382247308064&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004D.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]}]}},{"cve":{"id":"CVE-2004-1368","sourceIdentifier":"cve@mitre.org","published":"2004-08-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E59B89D9-AAF9-40CB-931C-EB4958491B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C64888FB-133F-4930-8368-1BD2A4FB11A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"87DEB7BD-FB71-4C22-A0FF-89923B263DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BAAD1A33-4333-4AFB-8D49-1274AE345BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"852BF209-3C6F-403B-920D-50C46D37515B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"335143DB-4538-49F4-BAFB-C47802318667"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F6A3E2D8-617C-4740-B662-F8884CE26BF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4FFBB096-523E-4634-ADC4-6CFB03F9577B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:release_1:*:*:*:*:*:*:*","matchCriteriaId":"3D1A1DC8-A38C-4061-A825-C6CC2ED453E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A9E237E5-9E1A-4F20-9A3D-E3418E3B1329"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F57A5AE0-90B5-410E-8878-BD514C3B7946"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EA7EAC35-E890-444A-B070-C91382F2E242"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*","matchCriteriaId":"69568B66-122B-4946-B630-2960DAA1885E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*","matchCriteriaId":"6C3E4A5C-8D0F-4105-8618-26586BEDE84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*","matchCriteriaId":"D07FEA4F-B1C7-4250-81FD-AC1289769348"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9:*:*:*:*:*:*:*","matchCriteriaId":"E3595689-13AE-4349-8684-D73D33D4A9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53F57A30-BE27-4F93-B8E4-B0956007F625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_database_control:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F074FCED-60D9-4B07-8A6F-85A89C8CFC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"016AFE8B-049D-4BA9-9270-E18DFDFDC61F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"BF667575-AD5F-43D6-B7BF-F255C1A14A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"6CEA97EC-FC86-4F53-A134-B98F25892BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E41C0DB6-CD92-4FDC-A705-83CFB92C062A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"ACC43855-2664-42CC-87DD-3C90DB1430C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25A4D091-1D89-484E-A3F7-0F98F8814686"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D96A60B5-7B83-4E94-AF2B-AF3DF28EE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0C5C8D47-953E-41DF-9852-955611F6D387"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C4798CAE-9AAA-4623-85B2-309DB46DD28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"121CF7A1-1710-4DA1-B7B6-028557D3FA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"616AD7A7-C8F3-4125-8E26-64109EA40730"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C7365AA-ACDA-461A-A84C-6B4FF04F295F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"42C22E50-FDB8-4314-9F36-70D0130EAA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2C65AC14-2AA0-4475-9932-E4AEA410CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BA730ABB-F315-4F7F-B820-33C5558B05DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B4CE4E08-4892-419D-AC51-68DD42073092"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EF52682E-0AB7-4C3F-94D4-7B4A7E08F2C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C65C2671-2FFE-4461-A570-72E3BBC312D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6_.3:*:*:*:*:*:*:*","matchCriteriaId":"CA59E72F-ACC1-44F3-AE63-B42F1EB83F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B5CB4061-855C-4DAA-BDAD-AA1E68EFC1E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"07F81AC9-DEBD-4B04-8753-C68BAE509B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"0785C55D-183D-42D8-A9F9-DBD297FE7F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8086BBDC-76BE-47C0-8F11-CEC57A23FC27"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.1:*:*:*:*:*:*:*","matchCriteriaId":"72BAAEF7-74CA-4C4F-8D52-AC4D5DE2E0E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EECAE774-22F3-4872-9E05-A14376F3883D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DFAA7E8B-263B-40A2-B6D8-8A303A7D4358"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"085FF0CB-B426-4DCB-9411-017A45280A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ED4991B9-67A9-4EE9-A30F-27950BF3A3DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2201796B-013B-4440-B366-1F2966AA86FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"43C6FFA8-18A6-4EE1-BE10-A1B7F3C1A47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F90F6C4F-CEF5-4172-97FC-617B71EAA636"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2FFA2A5C-B289-4505-85F5-7F6F0222B552"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4E876825-D6E5-4958-B737-4CE43A32BEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8E07567-754A-40C0-9428-D151880EE6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6233345D-5100-404A-9B61-524D9679D9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB739C3-A9BD-433F-8547-12BC615DB18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7231B057-9B7E-43CA-9E91-6DF74D6ADAE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F4D7A3CB-54CC-4CD9-9672-366233BF0CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"58DB0B6B-EB97-448A-B63E-E5997382DD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DA77BC6D-661F-46E9-B144-1587C1192B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"16F9C7F3-8140-4FEF-8319-64CE51B830AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2:*:*:*:*:*:*:*","matchCriteriaId":"68286D06-9EBA-4FBD-AB0B-D80993895416"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C059683-E0A1-4E97-B393-CB6B0EACF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675664-7036-48D0-9524-0350F626D4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EA9F3EE8-DA8B-4605-B70B-CFCA25B07C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D0DE0FB4-3C1A-460D-B48E-11D7AF415A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"597EE9ED-6A95-46C7-BE83-ADEC6AA65341"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"DCAD9D1D-A7E5-4D88-B93B-C518BF1986AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0:*:*:*:*:*:*:*","matchCriteriaId":"6E46FE2E-CA1A-4970-81FF-0BFFF2CF6849"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3EE7A2B1-A161-4A20-9EEC-B1EF7F2E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D65D66A0-23F7-4110-AF71-05CBFB3F92F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F207CBC6-D186-418D-8F11-3E623530E00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB2708A-58D1-4F17-8504-3748D6667788"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E83B1C7A-287A-405F-B44E-85F891183D2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34FC1E19-8F20-4215-8D90-E42EF7126BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2:*:*:*:*:*:*:*","matchCriteriaId":"CB172848-A873-4137-A335-AD034806A5EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B78BD7D2-7B48-438C-8C24-01C4007C1A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0DDCC0D1-32AD-4902-8383-2AA169C3F3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2D4D70A8-A6FE-4F82-82F1-AB1E9C28FB35"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7F64908D-FDAA-499B-8060-8A6EC2443418"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E77BCF6E-0D09-4DAF-B147-D11FEEE7371C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110382264415387&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/435974","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004E.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10871","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18656","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110382264415387&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/435974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004E.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18656","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1369","sourceIdentifier":"cve@mitre.org","published":"2004-08-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E59B89D9-AAF9-40CB-931C-EB4958491B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C64888FB-133F-4930-8368-1BD2A4FB11A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"87DEB7BD-FB71-4C22-A0FF-89923B263DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BAAD1A33-4333-4AFB-8D49-1274AE345BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"852BF209-3C6F-403B-920D-50C46D37515B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"335143DB-4538-49F4-BAFB-C47802318667"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F6A3E2D8-617C-4740-B662-F8884CE26BF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4FFBB096-523E-4634-ADC4-6CFB03F9577B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:release_1:*:*:*:*:*:*:*","matchCriteriaId":"3D1A1DC8-A38C-4061-A825-C6CC2ED453E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A9E237E5-9E1A-4F20-9A3D-E3418E3B1329"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F57A5AE0-90B5-410E-8878-BD514C3B7946"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EA7EAC35-E890-444A-B070-C91382F2E242"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*","matchCriteriaId":"69568B66-122B-4946-B630-2960DAA1885E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*","matchCriteriaId":"6C3E4A5C-8D0F-4105-8618-26586BEDE84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*","matchCriteriaId":"D07FEA4F-B1C7-4250-81FD-AC1289769348"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9:*:*:*:*:*:*:*","matchCriteriaId":"E3595689-13AE-4349-8684-D73D33D4A9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53F57A30-BE27-4F93-B8E4-B0956007F625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_database_control:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F074FCED-60D9-4B07-8A6F-85A89C8CFC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"016AFE8B-049D-4BA9-9270-E18DFDFDC61F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"BF667575-AD5F-43D6-B7BF-F255C1A14A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"6CEA97EC-FC86-4F53-A134-B98F25892BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E41C0DB6-CD92-4FDC-A705-83CFB92C062A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"ACC43855-2664-42CC-87DD-3C90DB1430C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25A4D091-1D89-484E-A3F7-0F98F8814686"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D96A60B5-7B83-4E94-AF2B-AF3DF28EE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0C5C8D47-953E-41DF-9852-955611F6D387"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C4798CAE-9AAA-4623-85B2-309DB46DD28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"121CF7A1-1710-4DA1-B7B6-028557D3FA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"616AD7A7-C8F3-4125-8E26-64109EA40730"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C7365AA-ACDA-461A-A84C-6B4FF04F295F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"42C22E50-FDB8-4314-9F36-70D0130EAA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2C65AC14-2AA0-4475-9932-E4AEA410CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BA730ABB-F315-4F7F-B820-33C5558B05DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B4CE4E08-4892-419D-AC51-68DD42073092"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EF52682E-0AB7-4C3F-94D4-7B4A7E08F2C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C65C2671-2FFE-4461-A570-72E3BBC312D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6_.3:*:*:*:*:*:*:*","matchCriteriaId":"CA59E72F-ACC1-44F3-AE63-B42F1EB83F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B5CB4061-855C-4DAA-BDAD-AA1E68EFC1E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"07F81AC9-DEBD-4B04-8753-C68BAE509B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"0785C55D-183D-42D8-A9F9-DBD297FE7F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8086BBDC-76BE-47C0-8F11-CEC57A23FC27"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.1:*:*:*:*:*:*:*","matchCriteriaId":"72BAAEF7-74CA-4C4F-8D52-AC4D5DE2E0E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EECAE774-22F3-4872-9E05-A14376F3883D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DFAA7E8B-263B-40A2-B6D8-8A303A7D4358"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"085FF0CB-B426-4DCB-9411-017A45280A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ED4991B9-67A9-4EE9-A30F-27950BF3A3DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2201796B-013B-4440-B366-1F2966AA86FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"43C6FFA8-18A6-4EE1-BE10-A1B7F3C1A47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F90F6C4F-CEF5-4172-97FC-617B71EAA636"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2FFA2A5C-B289-4505-85F5-7F6F0222B552"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4E876825-D6E5-4958-B737-4CE43A32BEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8E07567-754A-40C0-9428-D151880EE6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6233345D-5100-404A-9B61-524D9679D9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB739C3-A9BD-433F-8547-12BC615DB18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7231B057-9B7E-43CA-9E91-6DF74D6ADAE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F4D7A3CB-54CC-4CD9-9672-366233BF0CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"58DB0B6B-EB97-448A-B63E-E5997382DD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DA77BC6D-661F-46E9-B144-1587C1192B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"16F9C7F3-8140-4FEF-8319-64CE51B830AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2:*:*:*:*:*:*:*","matchCriteriaId":"68286D06-9EBA-4FBD-AB0B-D80993895416"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C059683-E0A1-4E97-B393-CB6B0EACF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675664-7036-48D0-9524-0350F626D4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EA9F3EE8-DA8B-4605-B70B-CFCA25B07C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D0DE0FB4-3C1A-460D-B48E-11D7AF415A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"597EE9ED-6A95-46C7-BE83-ADEC6AA65341"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"DCAD9D1D-A7E5-4D88-B93B-C518BF1986AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0:*:*:*:*:*:*:*","matchCriteriaId":"6E46FE2E-CA1A-4970-81FF-0BFFF2CF6849"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3EE7A2B1-A161-4A20-9EEC-B1EF7F2E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D65D66A0-23F7-4110-AF71-05CBFB3F92F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F207CBC6-D186-418D-8F11-3E623530E00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB2708A-58D1-4F17-8504-3748D6667788"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E83B1C7A-287A-405F-B44E-85F891183D2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34FC1E19-8F20-4215-8D90-E42EF7126BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2:*:*:*:*:*:*:*","matchCriteriaId":"CB172848-A873-4137-A335-AD034806A5EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B78BD7D2-7B48-438C-8C24-01C4007C1A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0DDCC0D1-32AD-4902-8383-2AA169C3F3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2D4D70A8-A6FE-4F82-82F1-AB1E9C28FB35"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7F64908D-FDAA-499B-8060-8A6EC2443418"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E77BCF6E-0D09-4DAF-B147-D11FEEE7371C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110382524401468&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004F.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10871","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18664","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110382524401468&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004F.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1370","sourceIdentifier":"cve@mitre.org","published":"2004-08-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.STORE_ACL, (4) WK_ADM.COMPLETE_ACL_SNAPSHOT, (5) WK_ACL.DELETE_ACLS_WITH_STATEMENT, or (6) DRILOAD.VALIDATE_STMT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E59B89D9-AAF9-40CB-931C-EB4958491B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C64888FB-133F-4930-8368-1BD2A4FB11A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"87DEB7BD-FB71-4C22-A0FF-89923B263DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BAAD1A33-4333-4AFB-8D49-1274AE345BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"852BF209-3C6F-403B-920D-50C46D37515B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"335143DB-4538-49F4-BAFB-C47802318667"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F6A3E2D8-617C-4740-B662-F8884CE26BF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4FFBB096-523E-4634-ADC4-6CFB03F9577B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:release_1:*:*:*:*:*:*:*","matchCriteriaId":"3D1A1DC8-A38C-4061-A825-C6CC2ED453E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A9E237E5-9E1A-4F20-9A3D-E3418E3B1329"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F57A5AE0-90B5-410E-8878-BD514C3B7946"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EA7EAC35-E890-444A-B070-C91382F2E242"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*","matchCriteriaId":"69568B66-122B-4946-B630-2960DAA1885E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*","matchCriteriaId":"6C3E4A5C-8D0F-4105-8618-26586BEDE84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*","matchCriteriaId":"D07FEA4F-B1C7-4250-81FD-AC1289769348"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9:*:*:*:*:*:*:*","matchCriteriaId":"E3595689-13AE-4349-8684-D73D33D4A9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53F57A30-BE27-4F93-B8E4-B0956007F625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_database_control:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F074FCED-60D9-4B07-8A6F-85A89C8CFC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"016AFE8B-049D-4BA9-9270-E18DFDFDC61F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"BF667575-AD5F-43D6-B7BF-F255C1A14A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"6CEA97EC-FC86-4F53-A134-B98F25892BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E41C0DB6-CD92-4FDC-A705-83CFB92C062A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"ACC43855-2664-42CC-87DD-3C90DB1430C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25A4D091-1D89-484E-A3F7-0F98F8814686"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D96A60B5-7B83-4E94-AF2B-AF3DF28EE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0C5C8D47-953E-41DF-9852-955611F6D387"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C4798CAE-9AAA-4623-85B2-309DB46DD28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"121CF7A1-1710-4DA1-B7B6-028557D3FA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"616AD7A7-C8F3-4125-8E26-64109EA40730"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C7365AA-ACDA-461A-A84C-6B4FF04F295F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"42C22E50-FDB8-4314-9F36-70D0130EAA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2C65AC14-2AA0-4475-9932-E4AEA410CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BA730ABB-F315-4F7F-B820-33C5558B05DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B4CE4E08-4892-419D-AC51-68DD42073092"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EF52682E-0AB7-4C3F-94D4-7B4A7E08F2C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C65C2671-2FFE-4461-A570-72E3BBC312D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6_.3:*:*:*:*:*:*:*","matchCriteriaId":"CA59E72F-ACC1-44F3-AE63-B42F1EB83F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B5CB4061-855C-4DAA-BDAD-AA1E68EFC1E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"07F81AC9-DEBD-4B04-8753-C68BAE509B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"0785C55D-183D-42D8-A9F9-DBD297FE7F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8086BBDC-76BE-47C0-8F11-CEC57A23FC27"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.1:*:*:*:*:*:*:*","matchCriteriaId":"72BAAEF7-74CA-4C4F-8D52-AC4D5DE2E0E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EECAE774-22F3-4872-9E05-A14376F3883D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DFAA7E8B-263B-40A2-B6D8-8A303A7D4358"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"085FF0CB-B426-4DCB-9411-017A45280A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ED4991B9-67A9-4EE9-A30F-27950BF3A3DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2201796B-013B-4440-B366-1F2966AA86FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"43C6FFA8-18A6-4EE1-BE10-A1B7F3C1A47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F90F6C4F-CEF5-4172-97FC-617B71EAA636"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2FFA2A5C-B289-4505-85F5-7F6F0222B552"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4E876825-D6E5-4958-B737-4CE43A32BEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8E07567-754A-40C0-9428-D151880EE6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6233345D-5100-404A-9B61-524D9679D9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB739C3-A9BD-433F-8547-12BC615DB18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7231B057-9B7E-43CA-9E91-6DF74D6ADAE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F4D7A3CB-54CC-4CD9-9672-366233BF0CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"58DB0B6B-EB97-448A-B63E-E5997382DD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DA77BC6D-661F-46E9-B144-1587C1192B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"16F9C7F3-8140-4FEF-8319-64CE51B830AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2:*:*:*:*:*:*:*","matchCriteriaId":"68286D06-9EBA-4FBD-AB0B-D80993895416"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C059683-E0A1-4E97-B393-CB6B0EACF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675664-7036-48D0-9524-0350F626D4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EA9F3EE8-DA8B-4605-B70B-CFCA25B07C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D0DE0FB4-3C1A-460D-B48E-11D7AF415A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"597EE9ED-6A95-46C7-BE83-ADEC6AA65341"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"DCAD9D1D-A7E5-4D88-B93B-C518BF1986AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0:*:*:*:*:*:*:*","matchCriteriaId":"6E46FE2E-CA1A-4970-81FF-0BFFF2CF6849"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3EE7A2B1-A161-4A20-9EEC-B1EF7F2E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D65D66A0-23F7-4110-AF71-05CBFB3F92F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F207CBC6-D186-418D-8F11-3E623530E00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB2708A-58D1-4F17-8504-3748D6667788"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E83B1C7A-287A-405F-B44E-85F891183D2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34FC1E19-8F20-4215-8D90-E42EF7126BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2:*:*:*:*:*:*:*","matchCriteriaId":"CB172848-A873-4137-A335-AD034806A5EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B78BD7D2-7B48-438C-8C24-01C4007C1A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0DDCC0D1-32AD-4902-8383-2AA169C3F3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2D4D70A8-A6FE-4F82-82F1-AB1E9C28FB35"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7F64908D-FDAA-499B-8060-8A6EC2443418"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E77BCF6E-0D09-4DAF-B147-D11FEEE7371C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110382596129607&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004H.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10871","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18665","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110382596129607&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004H.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18665","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1371","sourceIdentifier":"cve@mitre.org","published":"2004-08-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E59B89D9-AAF9-40CB-931C-EB4958491B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C64888FB-133F-4930-8368-1BD2A4FB11A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"87DEB7BD-FB71-4C22-A0FF-89923B263DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BAAD1A33-4333-4AFB-8D49-1274AE345BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"852BF209-3C6F-403B-920D-50C46D37515B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4:*:*:*:*:*:*:*","matchCriteriaId":"335143DB-4538-49F4-BAFB-C47802318667"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"F6A3E2D8-617C-4740-B662-F8884CE26BF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4FFBB096-523E-4634-ADC4-6CFB03F9577B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:collaboration_suite:release_1:*:*:*:*:*:*:*","matchCriteriaId":"3D1A1DC8-A38C-4061-A825-C6CC2ED453E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9i_application_server:*:*:*:*:*:*:*","matchCriteriaId":"0D51C24E-B1DB-4C48-A2C3-7A75C93E764B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EBD7B7B5-4C37-4EC7-8B1D-66C1E5043E11"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.2:*:*:*:*:*:*:*","matchCriteriaId":"A9E237E5-9E1A-4F20-9A3D-E3418E3B1329"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F57A5AE0-90B5-410E-8878-BD514C3B7946"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.4:*:*:*:*:*:*:*","matchCriteriaId":"EA7EAC35-E890-444A-B070-C91382F2E242"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.5:*:*:*:*:*:*:*","matchCriteriaId":"69568B66-122B-4946-B630-2960DAA1885E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.6:*:*:*:*:*:*:*","matchCriteriaId":"EB6E1838-B4DA-4F62-8713-9E8D7E79CDF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.7:*:*:*:*:*:*:*","matchCriteriaId":"6C3E4A5C-8D0F-4105-8618-26586BEDE84B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.8:*:*:*:*:*:*:*","matchCriteriaId":"D07FEA4F-B1C7-4250-81FD-AC1289769348"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:e-business_suite:11.5.9:*:*:*:*:*:*:*","matchCriteriaId":"78408427-3FFB-45C4-82EF-C8D636B3A718"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9:*:*:*:*:*:*:*","matchCriteriaId":"E3595689-13AE-4349-8684-D73D33D4A9FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"53F57A30-BE27-4F93-B8E4-B0956007F625"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_database_control:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F074FCED-60D9-4B07-8A6F-85A89C8CFC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:enterprise_manager_grid_control:10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"016AFE8B-049D-4BA9-9270-E18DFDFDC61F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"BF667575-AD5F-43D6-B7BF-F255C1A14A0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"6CEA97EC-FC86-4F53-A134-B98F25892BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E41C0DB6-CD92-4FDC-A705-83CFB92C062A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_9.0.4_.0:*:*:*:*:*:*:*","matchCriteriaId":"ACC43855-2664-42CC-87DD-3C90DB1430C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_10.1_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"25A4D091-1D89-484E-A3F7-0F98F8814686"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D96A60B5-7B83-4E94-AF2B-AF3DF28EE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0C5C8D47-953E-41DF-9852-955611F6D387"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C4798CAE-9AAA-4623-85B2-309DB46DD28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"121CF7A1-1710-4DA1-B7B6-028557D3FA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"616AD7A7-C8F3-4125-8E26-64109EA40730"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C7365AA-ACDA-461A-A84C-6B4FF04F295F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"42C22E50-FDB8-4314-9F36-70D0130EAA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2C65AC14-2AA0-4475-9932-E4AEA410CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BA730ABB-F315-4F7F-B820-33C5558B05DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B4CE4E08-4892-419D-AC51-68DD42073092"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EF52682E-0AB7-4C3F-94D4-7B4A7E08F2C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C65C2671-2FFE-4461-A570-72E3BBC312D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6_.3:*:*:*:*:*:*:*","matchCriteriaId":"CA59E72F-ACC1-44F3-AE63-B42F1EB83F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B5CB4061-855C-4DAA-BDAD-AA1E68EFC1E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"07F81AC9-DEBD-4B04-8753-C68BAE509B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"0785C55D-183D-42D8-A9F9-DBD297FE7F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8086BBDC-76BE-47C0-8F11-CEC57A23FC27"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.1:*:*:*:*:*:*:*","matchCriteriaId":"72BAAEF7-74CA-4C4F-8D52-AC4D5DE2E0E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EECAE774-22F3-4872-9E05-A14376F3883D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DFAA7E8B-263B-40A2-B6D8-8A303A7D4358"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"085FF0CB-B426-4DCB-9411-017A45280A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"ED4991B9-67A9-4EE9-A30F-27950BF3A3DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2201796B-013B-4440-B366-1F2966AA86FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"43C6FFA8-18A6-4EE1-BE10-A1B7F3C1A47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F90F6C4F-CEF5-4172-97FC-617B71EAA636"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2FFA2A5C-B289-4505-85F5-7F6F0222B552"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4E876825-D6E5-4958-B737-4CE43A32BEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8E07567-754A-40C0-9428-D151880EE6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6233345D-5100-404A-9B61-524D9679D9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB739C3-A9BD-433F-8547-12BC615DB18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7231B057-9B7E-43CA-9E91-6DF74D6ADAE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F4D7A3CB-54CC-4CD9-9672-366233BF0CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"58DB0B6B-EB97-448A-B63E-E5997382DD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DA77BC6D-661F-46E9-B144-1587C1192B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"16F9C7F3-8140-4FEF-8319-64CE51B830AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2:*:*:*:*:*:*:*","matchCriteriaId":"68286D06-9EBA-4FBD-AB0B-D80993895416"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C059683-E0A1-4E97-B393-CB6B0EACF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675664-7036-48D0-9524-0350F626D4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EA9F3EE8-DA8B-4605-B70B-CFCA25B07C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D0DE0FB4-3C1A-460D-B48E-11D7AF415A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"597EE9ED-6A95-46C7-BE83-ADEC6AA65341"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"DCAD9D1D-A7E5-4D88-B93B-C518BF1986AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0:*:*:*:*:*:*:*","matchCriteriaId":"6E46FE2E-CA1A-4970-81FF-0BFFF2CF6849"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3EE7A2B1-A161-4A20-9EEC-B1EF7F2E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D65D66A0-23F7-4110-AF71-05CBFB3F92F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F207CBC6-D186-418D-8F11-3E623530E00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB2708A-58D1-4F17-8504-3748D6667788"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E83B1C7A-287A-405F-B44E-85F891183D2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34FC1E19-8F20-4215-8D90-E42EF7126BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2:*:*:*:*:*:*:*","matchCriteriaId":"CB172848-A873-4137-A335-AD034806A5EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B78BD7D2-7B48-438C-8C24-01C4007C1A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0DDCC0D1-32AD-4902-8383-2AA169C3F3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2D4D70A8-A6FE-4F82-82F1-AB1E9C28FB35"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7F64908D-FDAA-499B-8060-8A6EC2443418"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"E77BCF6E-0D09-4DAF-B147-D11FEEE7371C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110382570313035&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004J.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10871","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18666","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110382570313035&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/316206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.ngssoftware.com/advisories/oracle23122004J.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10871","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA04-245A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18666","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1372","sourceIdentifier":"cve@mitre.org","published":"2004-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:7.0:*:linux:*:*:*:*:*","matchCriteriaId":"6EA810DB-104E-412A-8B6E-DBB5BEE743A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:7.1:*:linux:*:*:*:*:*","matchCriteriaId":"56D0096E-8145-4A36-BC18-A9C5C780D1A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:7.2:*:linux:*:*:*:*:*","matchCriteriaId":"80DE2026-D9F0-4AAA-97E6-F4FB0EBDB265"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:db2_universal_database:8.1:*:aix:*:*:*:*:*","matchCriteriaId":"3DC757E1-EC37-48C5-BE72-53184624ACDC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110382462924162&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110382730431065&w=2","source":"cve@mitre.org"},{"url":"http://www.ngssoftware.com/advisories/db223122004K.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ngssoftware.com/advisories/db223122004L.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11089","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18663","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18682","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110382462924162&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110382730431065&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ngssoftware.com/advisories/db223122004K.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ngssoftware.com/advisories/db223122004L.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18682","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1373","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:shoutcast_server:1.9.4:*:linux:*:*:*:*:*","matchCriteriaId":"5199CE97-4B9A-4515-979F-7629F7E24842"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:shoutcast_server:1.9.4:*:mac_os_x:*:*:*:*:*","matchCriteriaId":"7A4E885A-D64C-41E6-8F79-3569C7E95642"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:shoutcast_server:1.9.4:*:win32:*:*:*:*:*","matchCriteriaId":"BC4BF564-908B-4996-A3AF-0D73C2C80283"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110382975516003&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110886444014745&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1012675","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-04.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/12096","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18669","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110382975516003&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110886444014745&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1012675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/12096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18669","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1374","sourceIdentifier":"cve@mitre.org","published":"2004-12-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in NetBSD kernel may allow local users to execute arbitrary code and gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36419DD6-0DB4-4BB6-A35F-D8FDB89402F1"}]}]}],"references":[{"url":"http://gleg.net/advisory_netbsd2.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://gleg.net/advisory_netbsd2.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-1375","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in System Administration Manager (SAM) in HP-UX B.11.00, B.11.11, B.11.22, and B.11.23 allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*","matchCriteriaId":"F038B325-A982-43FB-9146-E103CCFB5C41"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*","matchCriteriaId":"D73D159B-C3D8-4BBD-8BAA-E9E8D3AD3A04"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110384155209555&w=2","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/p-085.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/12098","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18674","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5435","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110384155209555&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/p-085.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/12098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18674","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1376","sourceIdentifier":"cve@mitre.org","published":"2004-12-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote malicious FTP servers to overwrite arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110461358930103&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13704","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.7a69ezine.org/node/view/176","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110461358930103&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.7a69ezine.org/node/view/176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-1377","sourceIdentifier":"cve@mitre.org","published":"2004-12-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.","lastModified":"2007-03-14T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:a2ps:4.13:*:*:*:*:*:*:*","matchCriteriaId":"AC69D9F0-0F97-43AA-929D-432865098239"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:a2ps:4.13b:*:*:*:*:*:*:*","matchCriteriaId":"59EB22BD-FA9C-4715-A948-3309E3AD1F85"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_home:*:*:*:*:*:*:*:*","matchCriteriaId":"065FF0F1-7FAC-4584-92EA-EAA87DC76FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"839D2945-1417-43F5-A526-A14C491CBCEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_server:8.0:*:*:*:*:*:*:*","matchCriteriaId":"E06DCF0D-3241-453A-A0E4-937FE25EC404"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"EA8F79B3-2FBD-4CF1-B202-AB302C5F9CC2"},{"vulnerable":true,"criteria":"cpe:2.3:o:turbolinux:turbolinux_workstation:8.0:*:*:*:*:*:*:*","matchCriteriaId":"9428589A-0BD2-469E-978D-38239117D972"}]}]}],"references":[{"url":"http://secunia.com/advisories/13641","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-02.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/12108","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/12109","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vuxml.org/freebsd/9168253c-5a6d-11d9-a9e7-0001020eed82.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18671","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18672","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13641","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/12108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/12109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vuxml.org/freebsd/9168253c-5a6d-11d9-a9e7-0001020eed82.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18671","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18672","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1378","sourceIdentifier":"cve@mitre.org","published":"2004-09-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service (application crash) via a malformed packet to a socket that accepts XML connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabberd:1.4:*:*:*:*:*:*:*","matchCriteriaId":"CF04B475-4901-48FD-AD5D-A962D3765664"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabberd:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1D5D1C4E-FD89-4FAF-B58B-3410DA938A89"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabberd:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"082926C3-B1C7-4030-B4F8-45151F37BE24"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabberd:1.4.2a:*:*:*:*:*:*:*","matchCriteriaId":"CB1F2CEB-AE60-409F-A1C3-A45384782E28"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabberd:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"DC8D1462-9E72-4160-8792-3A9AFF8589C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jadc2s:0.6:*:*:*:*:*:*:*","matchCriteriaId":"C7C26238-1611-4A04-A2C5-60BE493CCDE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jadc2s:0.7:*:*:*:*:*:*:*","matchCriteriaId":"60AAD395-7AEC-48AC-90C4-960A268A9154"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jadc2s:0.8:*:*:*:*:*:*:*","matchCriteriaId":"87B97785-7A56-4D71-93DD-B05D5404256B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jadc2s:0.9:*:*:*:*:*:*:*","matchCriteriaId":"E2F55F44-A474-40DB-9B06-9D327418E93F"}]}]}],"references":[{"url":"http://devel.amessage.info/jabberd14/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://mail.jabber.org/pipermail/jabberd/2004-September/002004.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109583829122679&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12636","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011383","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011384","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-31.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/10257","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11231","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vuxml.org/freebsd/2e25d38b-54d1-11d9-b612-000c6e8f12ef.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17466","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17467","source":"cve@mitre.org"},{"url":"http://devel.amessage.info/jabberd14/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://mail.jabber.org/pipermail/jabberd/2004-September/002004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109583829122679&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-31.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/10257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vuxml.org/freebsd/2e25d38b-54d1-11d9-b612-000c6e8f12ef.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17467","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1379","sourceIdentifier":"cve@mitre.org","published":"2004-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a (1) DVD or (2) MPEG subpicture header where the second field reuses RLE data from the end of the first field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_alpha:*:*:*:*:*:*:*","matchCriteriaId":"367A04A4-10DE-4CDA-BF81-349C65213169"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"BC260B04-C616-4A6A-9773-D535EA8A45AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"72DEB448-0F57-40FD-889E-6C8AC6920C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"DE750368-54FD-4CCD-AFF7-B26B3A4BA539"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"58476B06-9E48-4649-8761-B32FE01BA7C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"76CE8EF1-0578-4E12-A87D-832978ED484D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A0DF434D-3BE2-4BCF-A6FC-397475830FDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"AFA95FC2-2082-4367-AD3D-0F876972E5A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"005EA1B5-7717-4CBD-9D21-249A5A497D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"19A33FCB-47FE-4F2E-9043-1F13805F0F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"AE1A9A53-860B-41CF-8BFD-4792775765E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"5246E535-1B8F-4BC1-AD1D-9BFA7BF28D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta12:*:*:*:*:*:*:*","matchCriteriaId":"C247EF56-6E67-41DA-8C49-C9310C42B8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc0:*:*:*:*:*:*:*","matchCriteriaId":"9790E7B0-E2D3-4DA5-915A-D236446E1B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc0a:*:*:*:*:*:*:*","matchCriteriaId":"D4E5CCDF-3472-4994-A47A-5A94D10F1C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"BAFC4559-D7E3-4C75-8B79-85A79067E261"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"3544B231-8C98-42D1-A2B2-E62109BDD796"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc3:*:*:*:*:*:*:*","matchCriteriaId":"3C69FEB8-DFE6-4241-9341-D8A4929F0FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc3a:*:*:*:*:*:*:*","matchCriteriaId":"99D8D224-15C4-4D15-9A04-4A1F3E1F63B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc3b:*:*:*:*:*:*:*","matchCriteriaId":"F469DA5D-6020-4490-B671-2CEFB151C736"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc4:*:*:*:*:*:*:*","matchCriteriaId":"283D1C9D-00E5-456E-8E82-52963B9A07F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc5:*:*:*:*:*:*:*","matchCriteriaId":"56D5CAA8-B9CF-4036-9BB1-B6096A0B7A62"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"AEB839B0-408E-4D96-B576-D9300082B7A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"DFE9819F-A620-41A6-A102-41746457753F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"A7D6474F-C678-498C-9A61-287E2FDD8B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"06402BDD-77EA-447A-8C34-E1A0F41D0628"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"7387773A-81F1-464A-9489-E103C51BED46"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A03194CD-2CFA-4F11-90DE-3573BA06B6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"1C39D002-E323-423D-8895-9179DFDF6535"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"73E621C7-A5BA-4D71-9D57-4311360FF3A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta12:*:*:*:*:*:*:*","matchCriteriaId":"75965D14-6EFC-4F1D-B343-FD593FB37048"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc0:*:*:*:*:*:*:*","matchCriteriaId":"F2F8891F-7FE9-44F3-95A5-282E8B3BB05D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"2F146421-8772-4B2C-B202-097BE15F8472"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"7C8F4701-C5CC-4FBA-AFF6-5AB890306AC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc3:*:*:*:*:*:*:*","matchCriteriaId":"A5AF6387-6E37-4310-8893-7228DC01607E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc3a:*:*:*:*:*:*:*","matchCriteriaId":"3295F345-26D0-4B23-848F-83CFE067EA01"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc3b:*:*:*:*:*:*:*","matchCriteriaId":"D2915303-7347-4811-B7D2-5AF367081797"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc3c:*:*:*:*:*:*:*","matchCriteriaId":"6976E802-011F-44A2-B668-F9D643FC7A86"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc4:*:*:*:*:*:*:*","matchCriteriaId":"08B7236E-DCFB-40DB-BFC8-88F8491BBD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc5:*:*:*:*:*:*:*","matchCriteriaId":"EDF4423C-790B-411A-9AEC-2B36DA0140AA"}]}]}],"references":[{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.320308","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2005/dsa-657","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/375482/2004-09-02/2004-09-08/0","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11205","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vuxml.org/freebsd/131bd7c4-64a3-11d9-829a-000a95bc6fae.html","source":"cve@mitre.org"},{"url":"http://xinehq.de/index.php/security/XSA-2004-5","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17423","source":"cve@mitre.org"},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.320308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2005/dsa-657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/375482/2004-09-02/2004-09-08/0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vuxml.org/freebsd/131bd7c4-64a3-11d9-829a-000a95bc6fae.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://xinehq.de/index.php/security/XSA-2004-5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17423","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1380","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Firefox before 1.0 and Mozilla before 1.7.5 allows inactive (background) tabs to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows and facilitate phishing attacks, aka the \"Dialog Box Spoofing Vulnerability.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","matchCriteriaId":"10E59CDD-9F95-4E38-95B3-AC5C35075378"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C656A621-BE62-4BB8-9B25-A3916E60FA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*","matchCriteriaId":"82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED69BEB9-8D83-415B-826D-9D17FB67976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BCDB64E5-AE26-43DF-8A66-654D5D22A635"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*","matchCriteriaId":"3D8CB42F-8F05-45A6-A408-50A11CC132DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"407F69BE-4026-4B26-AC31-11E7CC942760"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*","matchCriteriaId":"6E8264B5-4D4B-453D-B599-E2AD533A0CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9D75F1-8333-43DE-A08B-142E4C5899D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6BF63077-4E98-497D-8CE6-B84B022DB21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*","matchCriteriaId":"2FEC6B13-3088-4ECB-9D81-6480F439601C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*","matchCriteriaId":"20ECA520-780A-4EF8-8C80-B7564F4148B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*","matchCriteriaId":"FCEAEDEB-0EE7-4221-B9B8-65438580D331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*","matchCriteriaId":"78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*","matchCriteriaId":"F610FFD5-DF37-4075-AE8B-8D89DF6205A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*","matchCriteriaId":"D093FD25-94C8-49B8-A452-438023BFB105"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*","matchCriteriaId":"3346E7D0-D7EF-4182-BD86-837F14EEB9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*","matchCriteriaId":"150F1B28-0FAB-4880-B1D5-7F244A1C4D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2FE7EA3B-3BF8-4696-9488-78506074D62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"C883B45F-D28D-428E-AAF7-F93522A229DC"}]}]}],"references":[{"url":"http://secunia.com/advisories/12712","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_dialog_box_spoofing_test/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_form_field_focus_test/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/mfsa2005-05.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-323.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-335.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18864","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100050","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10211","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_dialog_box_spoofing_test/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_form_field_focus_test/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/mfsa2005-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-323.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-335.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10211","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1381","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:*:*:*:*:*:*:*:*","matchCriteriaId":"10E59CDD-9F95-4E38-95B3-AC5C35075378"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C656A621-BE62-4BB8-9B25-A3916E60FA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*","matchCriteriaId":"82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED69BEB9-8D83-415B-826D-9D17FB67976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BCDB64E5-AE26-43DF-8A66-654D5D22A635"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:alpha:*:*:*:*:*:*","matchCriteriaId":"3D8CB42F-8F05-45A6-A408-50A11CC132DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:rc1:*:*:*:*:*:*","matchCriteriaId":"407F69BE-4026-4B26-AC31-11E7CC942760"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:rc2:*:*:*:*:*:*","matchCriteriaId":"6E8264B5-4D4B-453D-B599-E2AD533A0CF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9D75F1-8333-43DE-A08B-142E4C5899D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6BF63077-4E98-497D-8CE6-B84B022DB21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:alpha:*:*:*:*:*:*","matchCriteriaId":"2FEC6B13-3088-4ECB-9D81-6480F439601C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:beta:*:*:*:*:*:*","matchCriteriaId":"20ECA520-780A-4EF8-8C80-B7564F4148B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*","matchCriteriaId":"FCEAEDEB-0EE7-4221-B9B8-65438580D331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*","matchCriteriaId":"78A75EE3-DC19-4F21-86F4-834FCEAFEFA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*","matchCriteriaId":"F610FFD5-DF37-4075-AE8B-8D89DF6205A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*","matchCriteriaId":"D093FD25-94C8-49B8-A452-438023BFB105"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*","matchCriteriaId":"3346E7D0-D7EF-4182-BD86-837F14EEB9FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*","matchCriteriaId":"150F1B28-0FAB-4880-B1D5-7F244A1C4D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2FE7EA3B-3BF8-4696-9488-78506074D62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"C883B45F-D28D-428E-AAF7-F93522A229DC"}]}]}],"references":[{"url":"http://secunia.com/advisories/12712","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_dialog_box_spoofing_test/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_form_field_focus_test/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/mfsa2005-05.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17789","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100053","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_dialog_box_spoofing_test/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/multiple_browsers_form_field_focus_test/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mozilla.org/security/announce/mfsa2005-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1382","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The glibcbug script in glibc 2.3.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2004-0968."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E5C0577C-6BC7-418F-B2C5-B74800D43418"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FEA795F7-8AAC-42BA-971B-601346704BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5CADA314-C0D0-40F8-9019-884F17D0B54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"255E0C0D-0B70-4C10-BF7C-34193AA24C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F424F2F5-D7E4-4A13-A8CF-32D466610BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6DC4E7AE-BDC4-48F1-9FDE-3F3FAA3F40F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"F1329215-C53A-40D5-8E9C-F457D092E483"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E2A0F12-FD00-40B9-86AD-7D082385E5DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8ED8F0E8-A969-4F7F-A100-662F4A5426FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"9416576F-A605-45BE-AA01-FEF357A66979"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AE582B8F-4E31-4D0F-B2F9-AC83C855F751"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"DB56D9C9-13B3-418C-B06C-0997E165F1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"8AFD93D5-70BB-475C-BDD3-DEDE9965C5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"19D5667D-5EA4-4B44-BF8A-9C10506BD4E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2:*:*:*:*:*:*:*","matchCriteriaId":"21F23D2F-A01F-4949-A917-D1164E14EAA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"64576C9A-FCD9-4410-B590-AB43F9F85D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"229AC4E3-AFBA-4EF4-8534-8FBE1E630253"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5B91503A-E8DC-4DFF-98D4-687B5AE41438"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"241A4B59-7BBC-4656-93AC-7DD8BE29EB58"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"00D0DBDC-1559-406D-AADC-12B5ABDD2BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.3:*:*:*:*:*:*:*","matchCriteriaId":"A5294FCC-3933-4CD5-8DFE-BCDC00F4BD18"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C5CA3E33-7CC6-4AC5-999A-3C46D7FD14A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"CAADC158-B7EF-4135-B383-0DA43065B43E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"261A4A17-3B9E-46E6-897B-DB0C8358A1D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"DAAC8483-5060-428B-8D8E-C30E5823BB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"47AD8A88-DAF0-4206-8661-70075BA2AE55"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109899903129801&w=2","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2005/dsa-636","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:159","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-261.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109899903129801&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2005/dsa-636","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-261.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1383","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to execute arbitrary SQL statements via the (1) order, (2) project_id, (3) pro_main, or (4) hours_id parameters to index.php or (5) ticket_id to viewticket_details.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"011F15E1-145A-4CB2-BC55-261CB9DF0AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"3AE1DA09-E7A2-41EB-92DB-A4DA42EA0477"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"C7CBAEFF-C857-40A4-B3E9-2837DD2D30B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.003:*:*:*:*:*:*:*","matchCriteriaId":"9D030C9B-9A82-42A8-B7AA-EFA3B30FDFC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.005:*:*:*:*:*:*:*","matchCriteriaId":"4E8922FC-6D92-41E6-B228-951432FF631A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.006:*:*:*:*:*:*:*","matchCriteriaId":"2E215C57-88E0-4A41-BB54-6E53524113A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.007:*:*:*:*:*:*:*","matchCriteriaId":"68FB431C-DC8F-4E97-AA58-BA8DBB37766B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000:*:*:*:*:*:*:*","matchCriteriaId":"1C011E73-A072-421D-8500-C414A5B67BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.002:*:*:*:*:*:*:*","matchCriteriaId":"B2FBB83A-AADB-44D2-A227-2D76D4EF40CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.003:*:*:*:*:*:*:*","matchCriteriaId":"6D7BA9C4-E9B0-420A-936F-50EAC81B7EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16_rc1:*:*:*:*:*:*:*","matchCriteriaId":"9DCD2911-C254-40CE-B707-6268877141B8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110312656029072&w=2","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gulftech.org/?node=research&article_id=00054-12142004","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11952","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18498","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110312656029072&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gulftech.org/?node=research&article_id=00054-12142004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18498","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1384","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) kp3, (2) type, (3) msg, (4) forum_id, (5) pos, (6) cats_app, (7) cat_id, (8) msgball[msgnum], (9) fldball[acctnum] parameters to index.php or (10) ticket_id to viewticket_details.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"011F15E1-145A-4CB2-BC55-261CB9DF0AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"3AE1DA09-E7A2-41EB-92DB-A4DA42EA0477"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"C7CBAEFF-C857-40A4-B3E9-2837DD2D30B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.003:*:*:*:*:*:*:*","matchCriteriaId":"9D030C9B-9A82-42A8-B7AA-EFA3B30FDFC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.005:*:*:*:*:*:*:*","matchCriteriaId":"4E8922FC-6D92-41E6-B228-951432FF631A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.006:*:*:*:*:*:*:*","matchCriteriaId":"2E215C57-88E0-4A41-BB54-6E53524113A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.007:*:*:*:*:*:*:*","matchCriteriaId":"68FB431C-DC8F-4E97-AA58-BA8DBB37766B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000:*:*:*:*:*:*:*","matchCriteriaId":"1C011E73-A072-421D-8500-C414A5B67BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.002:*:*:*:*:*:*:*","matchCriteriaId":"B2FBB83A-AADB-44D2-A227-2D76D4EF40CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.003:*:*:*:*:*:*:*","matchCriteriaId":"6D7BA9C4-E9B0-420A-936F-50EAC81B7EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16_rc1:*:*:*:*:*:*:*","matchCriteriaId":"9DCD2911-C254-40CE-B707-6268877141B8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110312656029072&w=2","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gulftech.org/?node=research&article_id=00054-12142004","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11952","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18496","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110312656029072&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gulftech.org/?node=research&article_id=00054-12142004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11952","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18496","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1385","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpGroupWare 0.9.16.003 and earlier allows remote attackers to gain sensitive information via (1) unexpected characters in the session ID such as shell metacharacters, (2) an invalid appname parameter to preferences.php or (3) an invalid menuaction parameter to index.php, which reveals the web server path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"011F15E1-145A-4CB2-BC55-261CB9DF0AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"3AE1DA09-E7A2-41EB-92DB-A4DA42EA0477"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"C7CBAEFF-C857-40A4-B3E9-2837DD2D30B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.003:*:*:*:*:*:*:*","matchCriteriaId":"9D030C9B-9A82-42A8-B7AA-EFA3B30FDFC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.005:*:*:*:*:*:*:*","matchCriteriaId":"4E8922FC-6D92-41E6-B228-951432FF631A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.006:*:*:*:*:*:*:*","matchCriteriaId":"2E215C57-88E0-4A41-BB54-6E53524113A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.007:*:*:*:*:*:*:*","matchCriteriaId":"68FB431C-DC8F-4E97-AA58-BA8DBB37766B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000:*:*:*:*:*:*:*","matchCriteriaId":"1C011E73-A072-421D-8500-C414A5B67BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.002:*:*:*:*:*:*:*","matchCriteriaId":"B2FBB83A-AADB-44D2-A227-2D76D4EF40CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.003:*:*:*:*:*:*:*","matchCriteriaId":"6D7BA9C4-E9B0-420A-936F-50EAC81B7EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16_rc1:*:*:*:*:*:*:*","matchCriteriaId":"9DCD2911-C254-40CE-B707-6268877141B8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110312656029072&w=2","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gulftech.org/?node=research&article_id=00054-12142004","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18497","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110312656029072&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gulftech.org/?node=research&article_id=00054-12142004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1386","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TikiWiki before 1.8.4.1 does not properly verify uploaded images, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2005-0200."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.1","matchCriteriaId":"E4003F93-8AE6-461B-BDB9-D55A1683B6B9"}]}]}],"references":[{"url":"http://securitytracker.com/id?1012700","source":"cve@mitre.org"},{"url":"http://tikiwiki.org/tiki-read_article.php?articleId=97","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/p-084.shtml","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-12.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/12628","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12110","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18691","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1012700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://tikiwiki.org/tiki-read_article.php?articleId=97","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/p-084.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200501-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/12628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18691","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1387","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:1.3.31:*:*:*:*:*:*:*","matchCriteriaId":"4058CE14-1CC8-42FD-A6BD-6869C1610E57"}]}]}],"references":[{"url":"http://lists.debian.org/debian-apache/2005/01/msg00076.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13925","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18993","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/65-1/","source":"cve@mitre.org"},{"url":"http://lists.debian.org/debian-apache/2005/01/msg00076.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/65-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1388","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:1.9.0:*:*:*:*:*:*:*","matchCriteriaId":"F1BF5B43-E991-499C-8486-3C3D10FF3838"},{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:1.25:*:*:*:*:*:*:*","matchCriteriaId":"98CB56A2-F595-4E6A-857E-3752BB11FCFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:1.26:*:*:*:*:*:*:*","matchCriteriaId":"DCD5473A-D42A-4898-82D7-D6876702CA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:1.91:*:*:*:*:*:*:*","matchCriteriaId":"D1BE9813-7D38-4846-A6F7-DCB46BADFCCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:1.92:*:*:*:*:*:*:*","matchCriteriaId":"FCEC3092-B77C-46EA-B885-82BDCA5FD73A"},{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:1.93:*:*:*:*:*:*:*","matchCriteriaId":"217F2CD2-F88E-4BDA-B112-EC71E6AFE222"},{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:1.94:*:*:*:*:*:*:*","matchCriteriaId":"1BE9DA6B-F330-4FB4-8E92-50B24444B049"},{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:1.95:*:*:*:*:*:*:*","matchCriteriaId":"2E49EFDE-9FE7-4C0F-B0B2-947F3748E549"},{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:1.96:*:*:*:*:*:*:*","matchCriteriaId":"76771AAF-8D1B-4E38-98EB-D61055F22157"},{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:1.97:*:*:*:*:*:*:*","matchCriteriaId":"0FD194D6-B291-4572-83EF-4D6C411428C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:1.98:*:*:*:*:*:*:*","matchCriteriaId":"14AC539E-FD65-4E93-B2D5-9ABAE8B9D94C"},{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:2.0:*:*:*:*:*:*:*","matchCriteriaId":"119AC07F-DE36-4BB5-A359-A11846147BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:2.1:*:*:*:*:*:*:*","matchCriteriaId":"C971C2DE-924A-4488-BB14-5516013E19E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:2.2:*:*:*:*:*:*:*","matchCriteriaId":"443BF6C5-95DA-4F5B-B664-7CED2F28C389"},{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:2.3:*:*:*:*:*:*:*","matchCriteriaId":"C3ABA05A-BEC5-49EF-9A37-309FEE10B56A"},{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:2.4:*:*:*:*:*:*:*","matchCriteriaId":"950A0BC0-6B60-48EA-887E-B6FFA6F58099"},{"vulnerable":true,"criteria":"cpe:2.3:a:berlios:gps_daemon:2.7:*:*:*:*:*:*:*","matchCriteriaId":"4CF452D8-F3B8-4F81-98EF-344562B962B6"}]}]}],"references":[{"url":"http://lists.berlios.de/pipermail/gpsd-announce/2005-January/000018.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=110677341711505&w=2","source":"cve@mitre.org"},{"url":"http://www.digitalmunition.com/DMA%5B2005-0125a%5D.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mail-archive.com/debian-bugs-closed%40lists.debian.org/msg02103.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19079","source":"cve@mitre.org"},{"url":"http://lists.berlios.de/pipermail/gpsd-announce/2005-January/000018.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=110677341711505&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digitalmunition.com/DMA%5B2005-0125a%5D.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mail-archive.com/debian-bugs-closed%40lists.debian.org/msg02103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1389","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:S/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":1.5,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:3.4.0:*:businessserver:*:*:*:*:*","matchCriteriaId":"B0A9F84C-E5EF-441B-89A2-FAA8D4968681"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:3.4.0:*:datacenter:*:*:*:*:*","matchCriteriaId":"B8967ED7-3FE2-4F38-AA20-FCEC0C3D2CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:3.4.1:*:businessserver:*:*:*:*:*","matchCriteriaId":"BACC4230-D744-49CE-BAB8-7D3D11877B81"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:3.4.1:*:datacenter:*:*:*:*:*","matchCriteriaId":"6EC2AABD-38A2-4BC4-AD91-8205808CD302"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:4.5.0:*:businessserver:*:*:*:*:*","matchCriteriaId":"E5CD1A9D-8EC4-4435-A266-46EB53C0C81F"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:4.5.0:*:datacenter:*:*:*:*:*","matchCriteriaId":"DDB99533-907E-48FD-85F5-495263CE59F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:5.0:*:server:*:*:*:*:*","matchCriteriaId":"790282C3-9148-4D78-95ED-058D2166EB92"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:5.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"D6AD552C-8462-4B56-865C-7858A1892E58"},{"vulnerable":true,"criteria":"cpe:2.3:a:veritas:netbackup:5.1:*:server:*:*:*:*:*","matchCriteriaId":"F570650A-8E21-4F66-B4D2-447FBB8EA9D9"}]}]}],"references":[{"url":"http://secunia.com/advisories/12901/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://seer.support.veritas.com/docs/271727.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-020.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/685456","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11494","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17811","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12901/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://seer.support.veritas.com/docs/271727.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/p-020.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/685456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11494","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17811","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1390","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the (1) -F, (2) name, (3) en, (4) upscript, (5) downscript, (6) retries, (7) timeout, (8) scriptdetach, (9) noscript, (10) nodetach, (11) remote_mac, or (12) local_mac flags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:2.4:*:*:*:*:*:*:*","matchCriteriaId":"9D9806F4-7848-482D-86C2-46E36D02BED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:4.25:*:*:*:*:*:*:*","matchCriteriaId":"F05ACD69-8EEF-4D6B-A825-92051DFE9C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C37EB0A5-8A16-42A1-B229-BB223AAF9AA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7B3A983E-7A0C-4BA9-AC9C-131437BFE793"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.2.0a:*:*:*:*:*:*:*","matchCriteriaId":"6C896443-5476-43FC-A437-50EFE29DEA72"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtp:6.1:*:*:*:*:*:*:*","matchCriteriaId":"76AB2330-A25F-48CB-A272-81B4D188912E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/961686","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.rfdslabs.com.br/qnx-advs-01-2004.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11104","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17280","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/961686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.rfdslabs.com.br/qnx-advs-01-2004.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17280","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1391","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious mount program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.1.0:*:*:*:*:*:*:*","matchCriteriaId":"C37EB0A5-8A16-42A1-B229-BB223AAF9AA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.1.0a:*:*:*:*:*:*:*","matchCriteriaId":"BECBFF00-B06B-452E-9A4A-C9CF737FFCEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7B3A983E-7A0C-4BA9-AC9C-131437BFE793"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.2.1a:*:*:*:*:*:*:*","matchCriteriaId":"D48EB2D8-393D-4BBC-8F04-7DA6EB5E16CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.2.1b:*:*:*:*:*:*:*","matchCriteriaId":"BE4BA42D-1272-4909-B292-3362A3E51D66"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtos:6.3.0:*:*:*:*:*:*:*","matchCriteriaId":"4F795DA5-84CB-4772-BC54-91B1DB760BEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtp:6.1:*:*:*:*:*:*:*","matchCriteriaId":"76AB2330-A25F-48CB-A272-81B4D188912E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/577566","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/9661","source":"cve@mitre.org"},{"url":"http://www.rfdslabs.com.br/qnx-advs-01-2004.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11105","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17284","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/577566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/9661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rfdslabs.com.br/qnx-advs-01-2004.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1392","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_init function."}],"vendorComments":[{"organization":"Red Hat","comment":"We do not consider these to be security issues:\nhttp://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=169857#c1\n","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EDBEC461-D553-41B7-8D85-20B6A933C21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78BAA18C-E5A0-4210-B64B-709BBFF31EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*","matchCriteriaId":"419867C6-37BE-43B4-BFE0-6325FEE3807D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*","matchCriteriaId":"37896E87-95C2-4039-8362-BC03B1C56706"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"13A159B4-B847-47DE-B7F8-89384E6C551B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"57B59616-A309-40B4-94B1-50A7BC00E35C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*","matchCriteriaId":"8667FBC6-04B6-40E5-93B3-6C22BEED4B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0F39A1B1-416E-4436-8007-733B66904A14"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"FC2E5F96-66D2-4F99-A74D-6A2305EE218E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"2D724D09-0D45-4701-93C9-348301217C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*","matchCriteriaId":"FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*","matchCriteriaId":"AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*","matchCriteriaId":"6E36203C-1392-49BB-AE7E-49626963D673"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109898213806099&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110625060220934&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011984","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-405.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-406.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11557","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2344","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17900","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9279","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109898213806099&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110625060220934&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-405.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-406.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17900","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9279","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1393","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the tcsetattr function for Sun Solaris for SPARC 2.6, 7, and 8 allows local users to cause a denial of service (system hang)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://secunia.com/advisories/10730/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57474-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=3806","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/379390","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3786","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9548","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14998","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10730/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57474-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=3806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/379390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1394","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the exec_attr database, which may allow local users with custom rights profiles to execute profile commands with additional privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://secunia.com/advisories/10755/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57453-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=3800","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3764","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9534","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008893","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14988","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10755/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57453-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=3800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14988","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1395","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier, (3) Tron 2.0 1.042 and earlier, (4) F.E.A.R. (First Encounter Assault and Recon), and possibly other games, allows remote attackers to cause a denial of service (connection refused) via a UDP packet that causes recvfrom to generate a return code that causes the listening loop to exit, as demonstrated using zero byte packets or packets between 8193 and 12280 bytes, which result in conditions that are not \"Operation would block.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:contract_jack:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2A21049A-D71F-4FD6-879A-A00A5AC206B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:no_one_lives_forever_2:1.0.004:*:*:*:*:*:*:*","matchCriteriaId":"608310E1-699F-453C-B9C4-432C7AD88DF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:no_one_lives_forever_2:1.3:*:*:*:*:*:*:*","matchCriteriaId":"730AB53D-7261-4A89-94A1-92334828CFE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:tron:2.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"76163D0E-CE6E-4699-8B27-9F3A208EE78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:tron:2.0.1.42:*:*:*:*:*:*:*","matchCriteriaId":"B8CC61B7-7187-4D76-8F56-FFC693BF765C"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/lithsock-adv.txt","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/029932.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038095.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110297515500671&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13446/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17317","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11902","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18456","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/lithsock-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/029932.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038095.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110297515500671&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13446/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11902","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1396","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service (application crash or CPU consumption) via (1) an mp4 or m4a playlist file that contains invalid tag data or (2) an invalid .nsv or .nsa file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.07:*:*:*:*:*:*:*","matchCriteriaId":"AF272FF7-68ED-4D8B-9C17-D9D46AA33335"}]}]}],"references":[{"url":"http://forums.winamp.com/showthread.php?s=&threadid=202007","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=110297310503541&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=110303988101973&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Dec/1012525.html","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/372968","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11909","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18466","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18467","source":"cve@mitre.org"},{"url":"http://forums.winamp.com/showthread.php?s=&threadid=202007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=110297310503541&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=110303988101973&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2004/Dec/1012525.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/372968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18466","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18467","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1397","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in UseModWiki 1.0 allows remote attackers to inject arbitrary web script or HTML via an argument to wiki.pl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:usemod:usemodwiki:1.0:*:*:*:*:*:*:*","matchCriteriaId":"00EC7444-D64A-4F26-A51A-425F5344FBA0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110305173302388&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13441/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11924","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18458","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110305173302388&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13441/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18458","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1398","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in prelink.c in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via format string specifiers in the extension argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roxio:toast:*:*:*:*:*:*:*:*","matchCriteriaId":"6BC8D36C-2E66-45FB-8AB0-8D5FD6413E43"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110305083706943&w=2","source":"cve@mitre.org"},{"url":"http://www.netragard.com/pdfs/research/apple-kext-tools-20060822.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11926","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/20031","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18472","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110305083706943&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.netragard.com/pdfs/research/apple-kext-tools-20060822.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/20031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18472","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1399","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the Attachment module 2.3.10 and earlier for phpBB allows remote attackers to read arbitrary files via a .. (dot dot) in the filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opentools:attachment_mod:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"626E98FA-1EDB-49CF-9A03-B9D2F21B6CC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentools:attachment_mod:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"6C7B4E6E-1890-4974-AB51-15B2C670A60C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentools:attachment_mod:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"AC155A0F-DB78-4D17-A726-4970E569FCC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentools:attachment_mod:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"A72A217E-D6F1-4132-B249-E279D0CC4180"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentools:attachment_mod:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6EE097A3-F2AB-4F17-AD93-F186153EE98F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentools:attachment_mod:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"11B11B13-9379-4147-9180-70EA25DDE1D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentools:attachment_mod:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"0215AB18-41C7-43E9-A9AE-8795A76DE5A4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110304269031484&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13421/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11893","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18437","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110304269031484&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13421/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18437","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1400","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The control panel in ASP Calendar does not require authentication to access, which allows remote attackers to gain unauthorized access via a direct request to main.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:active_server_corner:asp_calendar:1.0:*:*:*:*:*:*:*","matchCriteriaId":"51BA3A76-45F4-483B-9523-491E5C2E2AF3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110304839629822&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11931","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18474","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110304839629822&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1401","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in verify.asp in Asp-rider allows remote attackers to execute arbitrary SQL statements and bypass authentication via the username parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asp-rider:asp-rider:*:*:*:*:*:*:*:*","matchCriteriaId":"C70E6C98-A4D8-4301-8B7F-FA2AA5745547"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110305802005220&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13470/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11933","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18479","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110305802005220&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13470/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18479","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1402","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string parameter for index.php, (2) comments.php, or (3) the administrator login page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iwebnegar:iwebnegar:*:*:*:*:*:*:*:*","matchCriteriaId":"96418291-59B9-402B-BF1C-5232ADDC80EF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110314454810163&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11946","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18505","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110314454810163&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18505","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1403","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers to execute arbitrary PHP code by modifying the doc parameter to reference a URL on a remote web server that contains the code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sir:gnuboard:3.30:*:*:*:*:*:*:*","matchCriteriaId":"08E70D59-49EB-4A2B-80CA-0BD651050DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sir:gnuboard:3.31:*:*:*:*:*:*:*","matchCriteriaId":"CCBA9CFF-F981-4603-9899-AF33D9A06E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sir:gnuboard:3.32:*:*:*:*:*:*:*","matchCriteriaId":"F384348F-4D25-4554-96FD-DAD9F114D6F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sir:gnuboard:3.33:*:*:*:*:*:*:*","matchCriteriaId":"E64226B8-DC52-495E-BBB7-D87E957959CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sir:gnuboard:3.34:*:*:*:*:*:*:*","matchCriteriaId":"FBA8ABCF-ECEE-4D8E-8C21-D3E3FBA3A8AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sir:gnuboard:3.35:*:*:*:*:*:*:*","matchCriteriaId":"9FE17003-86D7-4DBF-8505-DA1C0A577379"},{"vulnerable":true,"criteria":"cpe:2.3:a:sir:gnuboard:3.36:*:*:*:*:*:*:*","matchCriteriaId":"008FCD6F-3031-4FB7-AE33-EF570143C52F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sir:gnuboard:3.37:*:*:*:*:*:*:*","matchCriteriaId":"458802ED-A3D7-433C-AE78-135384BEC79E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sir:gnuboard:3.38:*:*:*:*:*:*:*","matchCriteriaId":"FD69FD0C-DCED-4CF7-8D60-5E74BA019C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:sir:gnuboard:3.39:*:*:*:*:*:*:*","matchCriteriaId":"83D1664D-CE27-4AFA-8A91-13F7519ABDCF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110313585810712&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13479/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sir.co.kr/?doc=bbs/gnuboard.php&bo_table=pds&page=1&wr_id=1871","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11948","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18494","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110313585810712&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13479/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sir.co.kr/?doc=bbs/gnuboard.php&bo_table=pds&page=1&wr_id=1871","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18494","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1404","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Attachment Mod 2.3.10 module for phpBB, when used with Apache mod_mime, does not properly handle files with multiple file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opentools:attachment_mod:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"626E98FA-1EDB-49CF-9A03-B9D2F21B6CC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentools:attachment_mod:2.3.5:*:*:*:*:*:*:*","matchCriteriaId":"6C7B4E6E-1890-4974-AB51-15B2C670A60C"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentools:attachment_mod:2.3.6:*:*:*:*:*:*:*","matchCriteriaId":"AC155A0F-DB78-4D17-A726-4970E569FCC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentools:attachment_mod:2.3.7:*:*:*:*:*:*:*","matchCriteriaId":"A72A217E-D6F1-4132-B249-E279D0CC4180"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentools:attachment_mod:2.3.8:*:*:*:*:*:*:*","matchCriteriaId":"6EE097A3-F2AB-4F17-AD93-F186153EE98F"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentools:attachment_mod:2.3.9:*:*:*:*:*:*:*","matchCriteriaId":"11B11B13-9379-4147-9180-70EA25DDE1D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:opentools:attachment_mod:2.3.10:*:*:*:*:*:*:*","matchCriteriaId":"0215AB18-41C7-43E9-A9AE-8795A76DE5A4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110321557806215&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13421/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.opentools.de/board/viewtopic.php?t=3590","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11893","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18438","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110321557806215&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13421/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.opentools.de/board/viewtopic.php?t=3590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11893","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18438","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1405","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3:*:*:*:*:*:*:*","matchCriteriaId":"49AFC6EE-41C7-4369-8BA1-DDBF8A744ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"30F54837-5004-4D10-B3B0-502CED4F6592"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A09F36C1-CBC0-489E-B62D-4590A2E5A4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A9F0067D-534A-4238-A244-D92A73845432"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3BEC422E-49BC-41D4-9F71-B834D4108EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"6D854161-28AA-4386-B90A-97F9692CE37F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"D5A0FA49-99DC-4691-968F-6AEB76B74370"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"2A0C6A2C-992B-45A0-8E0C-1AE983881337"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"292A77C7-8C7B-4F3A-B7FD-3505A9F37E4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"C77FC97A-3BB2-4AA5-B0D6-C0D1FBEA5FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"F9DE6A4E-6BCE-499E-B017-1E0F8D1F65B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"AD90730F-BF26-46C5-83F8-039CD661C968"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110321710420059&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13478/","source":"cve@mitre.org"},{"url":"http://wikipedia.sourceforge.net/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11985","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=110321710420059&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13478/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wikipedia.sourceforge.net/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2004-1406","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitrary SQL commands via the (1) st or (2) keywords parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ikonboard.com:ikonboard:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DDC5C0A0-5DE4-4B6D-8328-4D0D100D6AC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikonboard.com:ikonboard:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3739756D-B9B0-48B6-8C45-FE9A36D203B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikonboard.com:ikonboard:3.1.2a:*:*:*:*:*:*:*","matchCriteriaId":"FCAB8510-C73D-4EFF-A657-F678F3D1C696"},{"vulnerable":true,"criteria":"cpe:2.3:a:ikonboard.com:ikonboard:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"60BD6ED0-FC50-48CC-BA08-A642E5671D34"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110321654705580&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13513","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11982","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18533","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110321654705580&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13513","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18533","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1407","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in singapore Image Gallery Web Application 0.9.10 allow remote attackers to (1) read arbitrary files via the showThumb method for thumb.php, or (2) delete arbitrary files via admin.class.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:singapore:image_gallery_web_application:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"00B76E92-C8C9-429E-8B0D-F5E2142295FE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110323479715051&w=2","source":"cve@mitre.org"},{"url":"http://www.security.org.sg/vuln/singapore0910.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11990","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18528","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18532","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110323479715051&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security.org.sg/vuln/singapore0910.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18528","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18532","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1408","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The addImage method for admin.class.php in Image Gallery Web Application 0.9.10 does not properly check filenames, which allows remote attackers to upload and execute arbitrary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:singapore:image_gallery_web_application:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"00B76E92-C8C9-429E-8B0D-F5E2142295FE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110323479715051&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11990","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18531","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110323479715051&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18531","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1409","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting vulnerabilities in Image Gallery Web Application 0.9.10 allow remote attackers to inject arbitrary web script or HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:singapore:image_gallery_web_application:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"00B76E92-C8C9-429E-8B0D-F5E2142295FE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110323479715051&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11990","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=110323479715051&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-1410","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary web script via a URL, which is echoed in a popup window that displays a parsing error message, a different vulnerability than CVE-2004-1229."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build149:*:*:*:*:*:*:*","matchCriteriaId":"47FF1D1D-473E-41DC-86E9-9DD8D7B969CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build150:*:*:*:*:*:*:*","matchCriteriaId":"244EC342-310F-4DF2-AEDF-9C02E3DA3AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build151:*:*:*:*:*:*:*","matchCriteriaId":"F7961BD7-F28A-4F45-AD85-BE9538B87D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build152:*:*:*:*:*:*:*","matchCriteriaId":"8BDE9E06-3221-4D0F-9198-AF68159BCA66"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build153:*:*:*:*:*:*:*","matchCriteriaId":"545080CE-9717-481E-978A-1BFB787F722D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build154:*:*:*:*:*:*:*","matchCriteriaId":"EF1B6F7D-9A0D-40C3-A071-366C80316CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build155:*:*:*:*:*:*:*","matchCriteriaId":"14578816-52F2-4A0C-93B4-DCF36AB54E17"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110330741828726&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13450","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12524","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11998","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110330741828726&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13450","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12524","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11998","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1411","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gadu-Gadu build 155 and earlier allows remote attackers to cause a denial of service (infinite loop) via a message that contains an image whose filename does not start with restricted characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build149:*:*:*:*:*:*:*","matchCriteriaId":"47FF1D1D-473E-41DC-86E9-9DD8D7B969CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build150:*:*:*:*:*:*:*","matchCriteriaId":"244EC342-310F-4DF2-AEDF-9C02E3DA3AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build151:*:*:*:*:*:*:*","matchCriteriaId":"F7961BD7-F28A-4F45-AD85-BE9538B87D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build152:*:*:*:*:*:*:*","matchCriteriaId":"8BDE9E06-3221-4D0F-9198-AF68159BCA66"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build153:*:*:*:*:*:*:*","matchCriteriaId":"545080CE-9717-481E-978A-1BFB787F722D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build154:*:*:*:*:*:*:*","matchCriteriaId":"EF1B6F7D-9A0D-40C3-A071-366C80316CE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build155:*:*:*:*:*:*:*","matchCriteriaId":"14578816-52F2-4A0C-93B4-DCF36AB54E17"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110330741828726&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11998","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18580","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110330741828726&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11998","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18580","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1412","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote attackers to inject arbitrary web script or HTML via the searchm parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"CC09C97F-C24C-458E-9660-163CA3389065"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"5E050349-5775-4CA5-BD12-B9E48A0CDDB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:2.2:*:*:*:*:*:*:*","matchCriteriaId":"FB479D2B-AA67-47EC-89F7-73CFB4852BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B5C16F63-65D9-4644-AC8F-1B18CAC125D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:2.3:*:*:*:*:*:*:*","matchCriteriaId":"4B098914-D522-426C-B54F-4844A2EEDC9B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110352428607171&w=2","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00056-12182004","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12037","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18571","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110352428607171&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00056-12182004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1413","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the (1) subcat, (2) rate, (3) questiondetails, (4) ticketkey22, (5) email22 parameters to index.php, or (6) the e-mail field of the Forgot Key feature."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"CC09C97F-C24C-458E-9660-163CA3389065"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"5E050349-5775-4CA5-BD12-B9E48A0CDDB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:2.2:*:*:*:*:*:*:*","matchCriteriaId":"FB479D2B-AA67-47EC-89F7-73CFB4852BD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"B5C16F63-65D9-4644-AC8F-1B18CAC125D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kayako:esupport:2.3:*:*:*:*:*:*:*","matchCriteriaId":"4B098914-D522-426C-B54F-4844A2EEDC9B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110352428607171&w=2","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00056-12182004","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12037","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18572","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110352428607171&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00056-12182004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18572","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1414","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gadu-Gadu 6.1 build 156 allows remote attackers to cause a denial of service (application hang) via a message that contains many special strings that are converted to images."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.1_build156:*:*:*:*:*:*:*","matchCriteriaId":"590D0702-76E6-40A2-8690-96F4D2214108"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110357519312200&w=2","source":"cve@mitre.org"},{"url":"http://www.soltysiak.com/gg-dos.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=110357519312200&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.soltysiak.com/gg-dos.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-1415","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in (1) disp_album.php and possibly (2) disp_img.php in 2Bgal 2.4 and 2.5.1 allows remote attackers to execute arbitrary SQL commands via the id_album parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ben3w:2bgal:2.4:*:*:*:*:*:*:*","matchCriteriaId":"250CC5AC-0B6F-4B5C-A045-0370D9E13C7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ben3w:2bgal:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3E2F5EA3-15BA-4C01-9273-D24B3B15059D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110375900916558&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13620","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12083","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18645","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110375900916558&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13620","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18645","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1416","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pnxr3260.dll in the RealOne 2.0 build 6.0.11.868 browser plugin, as used in Internet Explorer, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embed tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*","matchCriteriaId":"F86E7189-CE21-4007-A3FA-39A6B51A5AB9"},{"vulnerable":false,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.11.868:*:*:*:*:*:*:*","matchCriteriaId":"3908DB26-D8C4-4368-A1B6-C067085CE4B7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110374765215675&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12660","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110374765215675&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1417","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:psychostats:psychostats:*:beta:*:*:*:*:*:*","versionEndIncluding":"2.2.4","matchCriteriaId":"36A35CB9-440C-457D-882F-8381118B1314"},{"vulnerable":true,"criteria":"cpe:2.3:a:psychostats:psychostats:2.0:beta:*:*:*:*:*:*","matchCriteriaId":"F24E5671-BAF8-41A4-BF02-C1C13B97D658"},{"vulnerable":true,"criteria":"cpe:2.3:a:psychostats:psychostats:2.0.1:beta:*:*:*:*:*:*","matchCriteriaId":"5D9D38BA-EAC6-4E62-88B3-15F75D5A4F04"},{"vulnerable":true,"criteria":"cpe:2.3:a:psychostats:psychostats:2.1:beta:*:*:*:*:*:*","matchCriteriaId":"1F576013-6554-4821-9456-8AC507ECEE5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:psychostats:psychostats:2.2:beta:*:*:*:*:*:*","matchCriteriaId":"B7A346E7-9054-42E4-AE52-1C8402E76AF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:psychostats:psychostats:2.2.1:beta:*:*:*:*:*:*","matchCriteriaId":"41AC658C-7F48-4D0D-B54A-A4E4522E5EA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:psychostats:psychostats:2.2.2:beta:*:*:*:*:*:*","matchCriteriaId":"23FE2E44-26D4-4D31-9BC2-5DAAF61B69C6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110383119525592&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13619/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00057-12222004","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.psychostats.com/forums/viewtopic.php?t=11022","source":"cve@mitre.org","tags":["Patch","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/12089","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18651","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110383119525592&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13619/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00057-12222004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.psychostats.com/forums/viewtopic.php?t=11022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/12089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18651","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1418","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WPKontakt 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via an e-mail address, which is not quoted when a parsing error is generated."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wirtualna_polska:wpkontakt:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"75F170A7-CC60-4289-B3C0-75AC4F46876A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110384387332443&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12097","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18685","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110384387332443&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18685","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1419","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorComment":"requires that register_globals be enabled","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) _zb_path parameter to outlogin.php or (2) dir parameter to write.php to reference a URL on a remote web server that contains the code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*","matchCriteriaId":"021147FB-D153-440D-95F2-B812FB9DEA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroboard:zeroboard:4.1_pl3:*:*:*:*:*:*:*","matchCriteriaId":"ABAEFB19-C049-4C09-89CF-00E128FEC5DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroboard:zeroboard:4.1_pl4:*:*:*:*:*:*:*","matchCriteriaId":"D9FC71F5-C279-40A8-ABC3-5A141D7DF419"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030224.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=110391024404947&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13649","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1012677","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12580","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12581","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12103","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18677","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18679","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030224.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=110391024404947&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13649","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1012677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12580","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12581","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18679","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1420","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) site_title or (2) http_images parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:whm:autopilot:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"92DB6766-D148-4532-80AE-226A29388B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:whm:autopilot:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"EB3B79CA-5E16-47D4-BC98-F420BF68E402"},{"vulnerable":true,"criteria":"cpe:2.3:a:whm:autopilot:2.4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"06B5A22B-7E57-408B-8CFE-B1C230881190"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110425620105529&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110451997904494&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13673","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gulftech.org/?node=research&article_id=00059-12272004","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12119","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.whmautopilot.com/forum/lofiversion/index.php/t6785.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18700","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110425620105529&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110451997904494&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gulftech.org/?node=research&article_id=00059-12272004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.whmautopilot.com/forum/lofiversion/index.php/t6785.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1421","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities (1) step_one.php, (2) step_one_tables.php, (3) step_two_tables.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the server_inc parameter to reference a URL on a remote web server that contains the code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:whm:whm_autopilot:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A1FDED9A-9F13-4592-93B3-5E23AAE14B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:whm:whm_autopilot:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"28C88FC2-9895-49A3-8CA5-DACA0D2D4DED"},{"vulnerable":true,"criteria":"cpe:2.3:a:whm:whm_autopilot:2.4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"14A7D6C1-272F-43AB-9EC4-78D76EF844CB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110425620105529&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110451997904494&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13673","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1012707","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00059-12272004","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/12695","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12119","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.whmautopilot.com/forum/lofiversion/index.php/t6785.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18699","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110425620105529&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110451997904494&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1012707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00059-12272004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/12695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.whmautopilot.com/forum/lofiversion/index.php/t6785.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18699","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1422","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php settings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:whm:whm_autopilot:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A1FDED9A-9F13-4592-93B3-5E23AAE14B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:whm:whm_autopilot:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"28C88FC2-9895-49A3-8CA5-DACA0D2D4DED"},{"vulnerable":true,"criteria":"cpe:2.3:a:whm:whm_autopilot:2.4.6.5:*:*:*:*:*:*:*","matchCriteriaId":"14A7D6C1-272F-43AB-9EC4-78D76EF844CB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110425620105529&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110451997904494&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13673","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gulftech.org/?node=research&article_id=00059-12272004","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12119","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.whmautopilot.com/forum/lofiversion/index.php/t6785.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18701","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110425620105529&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110451997904494&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gulftech.org/?node=research&article_id=00059-12272004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.whmautopilot.com/forum/lofiversion/index.php/t6785.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18701","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1423","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virtual Law Office (VLO) and other products, allow remote attackers to execute arbitrary PHP code via a URL in the phpc_root_path parameter to (1) includes/calendar.php or (2) includes/setup.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php-calendar:php-calendar:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10","matchCriteriaId":"605A0A42-DA23-4620-8654-CB688D5F2DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-calendar:php-calendar:0.1:*:*:*:*:*:*:*","matchCriteriaId":"4D946970-FBAA-4680-A477-29FB5459A688"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-calendar:php-calendar:0.2:*:*:*:*:*:*:*","matchCriteriaId":"43A95ABF-AEC5-4998-9771-4DAB7F40AC60"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-calendar:php-calendar:0.3:*:*:*:*:*:*:*","matchCriteriaId":"F575FD3A-F285-43CB-8C20-AF873D120B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-calendar:php-calendar:0.4:*:*:*:*:*:*:*","matchCriteriaId":"30D9539B-C7E0-4BFE-B81B-BA84CA279E17"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-calendar:php-calendar:0.5:*:*:*:*:*:*:*","matchCriteriaId":"3FE693CC-C9AC-4DDB-8956-889257945963"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-calendar:php-calendar:0.6:*:*:*:*:*:*:*","matchCriteriaId":"9751D90E-9840-4DD5-947C-EB032BC40E07"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-calendar:php-calendar:0.7:*:*:*:*:*:*:*","matchCriteriaId":"6B3E5878-3DAA-4321-85C2-8C612BA7C411"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-calendar:php-calendar:0.8:*:*:*:*:*:*:*","matchCriteriaId":"9A223858-6E35-4F35-BDFB-C7C5AA464429"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-calendar:php-calendar:0.9:*:*:*:*:*:*:*","matchCriteriaId":"B5375358-8547-4765-AC7D-5BE96C8D9FA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:php-calendar:php-calendar:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"92B713ED-A97C-4EE9-B4AD-6EC9D139C9C6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110434580716205&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22516","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1017107","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=296020&group_id=46800","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00060-12292004","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/archive/1/449397/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12127","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/20657","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/4145","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18710","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29710","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/2608","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110434580716205&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1017107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=296020&group_id=46800","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00060-12292004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/archive/1/449397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/20657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/2608","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1424","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"044E2E34-470C-45C9-8136-22493077D842"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5FB2555-7146-4A75-9D24-250BBC09244A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"949F0BC0-A79E-4B1D-894D-650CF68109F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"616AE17F-F5B4-4D64-B287-0AAB189C802A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"74246580-F351-4EAE-9406-2386CFF1819D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"077FFAAB-BACD-43F4-B146-DBFFD58CE619"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"9C715839-F020-4F42-94F0-9FA34F294578"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3113CF64-DFDD-413F-BB85-5A8B251608D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"99CFB2E0-B99B-4154-8A6E-B6A8483ACEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CE4F8CC3-5428-4F72-B4DC-299A50EE9C88"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110425409614735&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110444531816566&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13694","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/12120","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18702","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110425409614735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110444531816566&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/12120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18702","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1425","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. (dot dot) in the file parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"044E2E34-470C-45C9-8136-22493077D842"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5FB2555-7146-4A75-9D24-250BBC09244A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"949F0BC0-A79E-4B1D-894D-650CF68109F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"616AE17F-F5B4-4D64-B287-0AAB189C802A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"74246580-F351-4EAE-9406-2386CFF1819D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"077FFAAB-BACD-43F4-B146-DBFFD58CE619"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"9C715839-F020-4F42-94F0-9FA34F294578"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3113CF64-DFDD-413F-BB85-5A8B251608D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"99CFB2E0-B99B-4154-8A6E-B6A8483ACEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CE4F8CC3-5428-4F72-B4DC-299A50EE9C88"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110425409614735&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110444531816566&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12120","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18550","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110425409614735&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110444531816566&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1426","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to read arbitrary files and execute arbitrary PHP files via .. (dot dot) sequences in the lng parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:korweblog:korweblog:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F37724A1-D156-4A84-8FF0-EBD07EE8808B"},{"vulnerable":true,"criteria":"cpe:2.3:a:korweblog:korweblog:1.6.2cvs:*:*:*:*:*:*:*","matchCriteriaId":"F945FA83-8F25-4F96-A7DE-EB27B35CB69D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110442847614890&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12132","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=110442847614890&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-1427","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in main.inc in KorWeblog 1.6.2-cvs and earlier allows remote attackers to execute arbitrary PHP code by modifying the G_PATH parameter to reference a URL on a remote web server that contains the code, as demonstrated in index.php when using .. (dot dot) sequences in the lng parameter to cause main.inc to be loaded."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:korweblog:korweblog:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"F37724A1-D156-4A84-8FF0-EBD07EE8808B"},{"vulnerable":true,"criteria":"cpe:2.3:a:korweblog:korweblog:1.6.2cvs:*:*:*:*:*:*:*","matchCriteriaId":"F945FA83-8F25-4F96-A7DE-EB27B35CB69D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110442847614890&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13700","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12132","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18717","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110442847614890&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18717","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1428","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ArGoSoft FTP before 1.4.2.1 generates an error message if the user name does not exist instead of prompting for a password, which allows remote attackers to determine valid usernames."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.4.2.1","matchCriteriaId":"7F9239DB-DD7A-44B0-968D-0910A4F5443F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110451582011666&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/13063","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1012744","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.argosoft.com/ftpserver/changelist.aspx","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.lovebug.org/argosoft_advisory.txt","source":"cve@mitre.org","tags":["Broken Link","URL Repurposed"]},{"url":"http://www.osvdb.org/11335","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/12139","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18721","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=110451582011666&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/13063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/id?1012744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.argosoft.com/ftpserver/changelist.aspx","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.lovebug.org/argosoft_advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","URL Repurposed"]},{"url":"http://www.osvdb.org/11335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/12139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1429","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ArGoSoft FTP 1.4.2.4 and earlier does not limit the number of times that a bad password can be entered, which makes it easier for remote attackers to guess passwords via a brute force attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2.4","matchCriteriaId":"610F65EF-6D80-494D-8ED5-E237AE5B8367"},{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:1.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E52B7406-3481-4692-A897-7B8E4BCF4ADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:1.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"92A87072-6A64-4400-B839-D7E178AA03AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:1.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"47EA17F1-AE32-43AF-B11C-13B8D1D5B448"},{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:1.4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"FED4F896-AC49-44C5-A7DE-13052F6B9C26"},{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:1.4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"C462CC04-10A2-4F4C-9E6D-139599D03E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:1.4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5B8BA120-D506-4688-B524-275A1FB54C18"},{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:1.4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"00BEE9B9-B5B9-4FC5-8BE7-554629042868"},{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:1.4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"AA27A4CC-41E2-424D-A9EF-93FE0D8F1DEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:1.4.1.9:*:*:*:*:*:*:*","matchCriteriaId":"DFE4FC9C-2281-4BDD-88FA-8E94D5CA08FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"5D0097A7-8713-4979-A6CD-F5086741706D"},{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:1.4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"68592EA7-2237-4BF0-8769-5942B6D065D7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110451582011666&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18722","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110451582011666&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18722","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1430","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the show_stats module in Arcade.php in IbProArcade allows remote attackers to execute arbitrary SQL code via the gameid parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipbproarcade:ipbproarcade:2.5:*:*:*:*:*:*:*","matchCriteriaId":"1F698E83-FFC7-4EE6-AB59-6331D0DDC2E7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110451448630711&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13260","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12138","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18720","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110451448630711&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18720","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1431","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FormMail.php 5.0, and possibly other versions, allows remote attackers to read arbitrary files via a full pathname in the ar_file (auto-reply) parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:joe_lumbroso:jacks_formmail.php:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FB7AC026-D618-4085-866C-36732C3F233E"},{"vulnerable":false,"criteria":"cpe:2.3:a:joe_lumbroso:jacks_formmail.php:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E96833B3-087E-48CA-B0BD-6ABC4CE76587"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110460092827419&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10815","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12145","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18724","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110460092827419&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1432","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a denial of service (control card reset) via malformed (1) IP or (2) ICMP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4D1888FF-6126-4F40-A7EA-1ED5123FA729"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.1:*:*:*:*:*:*:*","matchCriteriaId":"15B6D45F-25A7-4055-9D9C-42DEACBFFE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"31461FAA-2F90-47B0-BDA3-D81A8186960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"2EF8D104-CABD-4036-A4AF-68B80D83AE34"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.3\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"5331AAD2-7E21-4407-9DF7-9D2A8058FAE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:2.3\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"C89112E5-3FAC-4E4A-9C7D-F60BCF4A28E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8B0A4FA3-45F4-47B7-BA5B-6AEC8DB14C9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6509622E-7E8D-4238-92F2-7DB88A3DB4DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.2:*:*:*:*:*:*:*","matchCriteriaId":"80460930-7D3D-4315-8D00-FFDCDBA69477"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B80C7D72-D0D1-4328-967C-20EA7590CEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0993B9A9-599B-4662-AEC2-EC771BCE8200"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"04472ED2-EB97-47E1-938E-D69C363E81C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"C607FB31-58DF-4C65-A35B-C9C1A6437CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"10988AA9-A807-4E70-8197-6F9EFC13AE86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"C8951276-CDEF-4F54-93DF-B96DB10E6530"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5D886A75-5A73-4B1C-8B2A-45D589267B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"D5A594C2-98BB-4AC5-9CC5-89FE97D63323"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"9B35325A-98F6-41DF-ADD8-91ED992A3ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"F0B06C5B-73C2-47F1-9ED6-B59F9C1C5AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"D9758019-F6EA-4552-B070-5A9EBE73BB86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.5:*:*:*:*:*:*:*","matchCriteriaId":"BA524BE1-6B13-455A-96EA-17C1A71BD0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"4DEC7814-61D4-420A-AB81-6720F3C2D6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"413133A5-F600-4B2B-82E1-3EAC10B7E6F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/12117","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/918920","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/969344","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10768","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16760","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16761","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/918920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/969344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16761","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1433","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, and ONS 15600 1.x(x), allows remote attackers to cause a denial of service (control card reset) via malformed (1) TCP and (2) UDP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4D1888FF-6126-4F40-A7EA-1ED5123FA729"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.1:*:*:*:*:*:*:*","matchCriteriaId":"15B6D45F-25A7-4055-9D9C-42DEACBFFE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"31461FAA-2F90-47B0-BDA3-D81A8186960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"2EF8D104-CABD-4036-A4AF-68B80D83AE34"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.3\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"5331AAD2-7E21-4407-9DF7-9D2A8058FAE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:2.3\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"C89112E5-3FAC-4E4A-9C7D-F60BCF4A28E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8B0A4FA3-45F4-47B7-BA5B-6AEC8DB14C9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6509622E-7E8D-4238-92F2-7DB88A3DB4DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.2:*:*:*:*:*:*:*","matchCriteriaId":"80460930-7D3D-4315-8D00-FFDCDBA69477"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B80C7D72-D0D1-4328-967C-20EA7590CEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0993B9A9-599B-4662-AEC2-EC771BCE8200"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"04472ED2-EB97-47E1-938E-D69C363E81C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"C607FB31-58DF-4C65-A35B-C9C1A6437CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"10988AA9-A807-4E70-8197-6F9EFC13AE86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"C8951276-CDEF-4F54-93DF-B96DB10E6530"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5D886A75-5A73-4B1C-8B2A-45D589267B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"D5A594C2-98BB-4AC5-9CC5-89FE97D63323"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"9B35325A-98F6-41DF-ADD8-91ED992A3ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"F0B06C5B-73C2-47F1-9ED6-B59F9C1C5AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"D9758019-F6EA-4552-B070-5A9EBE73BB86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.5:*:*:*:*:*:*:*","matchCriteriaId":"BA524BE1-6B13-455A-96EA-17C1A71BD0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"4DEC7814-61D4-420A-AB81-6720F3C2D6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"413133A5-F600-4B2B-82E1-3EAC10B7E6F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/12117","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/486224","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/800384","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10768","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16762","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16764","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/486224","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/800384","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16762","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16764","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1434","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.1(0) to 4.1(2), 4.5(x), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a denial of service (control card reset) via malformed SNMP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4D1888FF-6126-4F40-A7EA-1ED5123FA729"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.1:*:*:*:*:*:*:*","matchCriteriaId":"15B6D45F-25A7-4055-9D9C-42DEACBFFE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"31461FAA-2F90-47B0-BDA3-D81A8186960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"2EF8D104-CABD-4036-A4AF-68B80D83AE34"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.3\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"5331AAD2-7E21-4407-9DF7-9D2A8058FAE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:2.3\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"C89112E5-3FAC-4E4A-9C7D-F60BCF4A28E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8B0A4FA3-45F4-47B7-BA5B-6AEC8DB14C9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6509622E-7E8D-4238-92F2-7DB88A3DB4DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.2:*:*:*:*:*:*:*","matchCriteriaId":"80460930-7D3D-4315-8D00-FFDCDBA69477"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B80C7D72-D0D1-4328-967C-20EA7590CEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0993B9A9-599B-4662-AEC2-EC771BCE8200"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"04472ED2-EB97-47E1-938E-D69C363E81C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"C607FB31-58DF-4C65-A35B-C9C1A6437CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"10988AA9-A807-4E70-8197-6F9EFC13AE86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"C8951276-CDEF-4F54-93DF-B96DB10E6530"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5D886A75-5A73-4B1C-8B2A-45D589267B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"D5A594C2-98BB-4AC5-9CC5-89FE97D63323"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"9B35325A-98F6-41DF-ADD8-91ED992A3ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"F0B06C5B-73C2-47F1-9ED6-B59F9C1C5AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"D9758019-F6EA-4552-B070-5A9EBE73BB86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.5:*:*:*:*:*:*:*","matchCriteriaId":"BA524BE1-6B13-455A-96EA-17C1A71BD0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"4DEC7814-61D4-420A-AB81-6720F3C2D6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"413133A5-F600-4B2B-82E1-3EAC10B7E6F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/12117","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/548968","source":"cve@mitre.org","tags":["Exploit","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10768","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16765","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/548968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16765","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1435","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a denial of service (control card reset) via a large number of TCP connections with an invalid response instead of the final ACK (TCP-ACK)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4D1888FF-6126-4F40-A7EA-1ED5123FA729"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.1:*:*:*:*:*:*:*","matchCriteriaId":"15B6D45F-25A7-4055-9D9C-42DEACBFFE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"31461FAA-2F90-47B0-BDA3-D81A8186960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"2EF8D104-CABD-4036-A4AF-68B80D83AE34"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.3\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"5331AAD2-7E21-4407-9DF7-9D2A8058FAE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:2.3\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"C89112E5-3FAC-4E4A-9C7D-F60BCF4A28E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8B0A4FA3-45F4-47B7-BA5B-6AEC8DB14C9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6509622E-7E8D-4238-92F2-7DB88A3DB4DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.2:*:*:*:*:*:*:*","matchCriteriaId":"80460930-7D3D-4315-8D00-FFDCDBA69477"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B80C7D72-D0D1-4328-967C-20EA7590CEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0993B9A9-599B-4662-AEC2-EC771BCE8200"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"04472ED2-EB97-47E1-938E-D69C363E81C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"C607FB31-58DF-4C65-A35B-C9C1A6437CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"10988AA9-A807-4E70-8197-6F9EFC13AE86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"C8951276-CDEF-4F54-93DF-B96DB10E6530"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5D886A75-5A73-4B1C-8B2A-45D589267B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"D5A594C2-98BB-4AC5-9CC5-89FE97D63323"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"9B35325A-98F6-41DF-ADD8-91ED992A3ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"F0B06C5B-73C2-47F1-9ED6-B59F9C1C5AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"D9758019-F6EA-4552-B070-5A9EBE73BB86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.5:*:*:*:*:*:*:*","matchCriteriaId":"BA524BE1-6B13-455A-96EA-17C1A71BD0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"4DEC7814-61D4-420A-AB81-6720F3C2D6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"413133A5-F600-4B2B-82E1-3EAC10B7E6F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/12117","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/277048","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10768","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16763","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/277048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16763","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1436","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a user account is configured with a blank password, allows remote attackers to gain unauthorized access by logging in with a password larger than 10 characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4D1888FF-6126-4F40-A7EA-1ED5123FA729"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.1:*:*:*:*:*:*:*","matchCriteriaId":"15B6D45F-25A7-4055-9D9C-42DEACBFFE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"31461FAA-2F90-47B0-BDA3-D81A8186960C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"2EF8D104-CABD-4036-A4AF-68B80D83AE34"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:1.3\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"5331AAD2-7E21-4407-9DF7-9D2A8058FAE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:2.3\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"C89112E5-3FAC-4E4A-9C7D-F60BCF4A28E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.0:*:*:*:*:*:*:*","matchCriteriaId":"8B0A4FA3-45F4-47B7-BA5B-6AEC8DB14C9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6509622E-7E8D-4238-92F2-7DB88A3DB4DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.2:*:*:*:*:*:*:*","matchCriteriaId":"80460930-7D3D-4315-8D00-FFDCDBA69477"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B80C7D72-D0D1-4328-967C-20EA7590CEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.3.0:*:*:*:*:*:*:*","matchCriteriaId":"0993B9A9-599B-4662-AEC2-EC771BCE8200"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:3.4.0:*:*:*:*:*:*:*","matchCriteriaId":"04472ED2-EB97-47E1-938E-D69C363E81C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"C607FB31-58DF-4C65-A35B-C9C1A6437CA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"10988AA9-A807-4E70-8197-6F9EFC13AE86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"C8951276-CDEF-4F54-93DF-B96DB10E6530"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5D886A75-5A73-4B1C-8B2A-45D589267B37"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"D5A594C2-98BB-4AC5-9CC5-89FE97D63323"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"9B35325A-98F6-41DF-ADD8-91ED992A3ED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"F0B06C5B-73C2-47F1-9ED6-B59F9C1C5AF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.1\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"D9758019-F6EA-4552-B070-5A9EBE73BB86"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.5:*:*:*:*:*:*:*","matchCriteriaId":"BA524BE1-6B13-455A-96EA-17C1A71BD0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"4DEC7814-61D4-420A-AB81-6720F3C2D6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:optical_networking_systems_software:4.6\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"413133A5-F600-4B2B-82E1-3EAC10B7E6F9"}]}]}],"references":[{"url":"http://secunia.com/advisories/12117","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/760432","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10768","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16766","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/760432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10768","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16766","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1437","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the digest authentication functionality in Pavuk 0.9.28-r2 and earlier allow remote attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pavuk:pavuk:0.9pl28i:*:*:*:*:*:*:*","matchCriteriaId":"8847E10D-BDBE-45D9-8843-D2179FD23703"},{"vulnerable":true,"criteria":"cpe:2.3:a:pavuk:pavuk:0.928r1:*:*:*:*:*:*:*","matchCriteriaId":"79C449B4-EC74-49D6-B9D0-71C0260137FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:pavuk:pavuk:0.928r2:*:*:*:*:*:*:*","matchCriteriaId":"0BDBAC8F-EF13-4161-9E4F-906963A9FCEA"}]}]}],"references":[{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-19.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10797","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16807","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10797","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1438","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4F10E314-3897-4A63-AE40-F4E34C3F0BFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"47B95A69-2535-4844-B819-082D4349708C"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"930953B4-E972-48FB-913B-169E91F93FD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6B41D875-F515-4A3F-9AA5-79BD09F74C30"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"3A8CCC20-8986-4028-B125-66F371A4A1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:subversion:subversion:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6E07F13C-A6FC-49E8-B10E-E4FC1F182DA5"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/60","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010779","source":"cve@mitre.org"},{"url":"http://svn.collab.net/repos/svn/tags/1.0.6/CHANGES","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-20.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10800","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16803","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/60","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010779","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.collab.net/repos/svn/tags/1.0.6/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16803","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1439","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in BlackJumboDog 3.x allows remote attackers to execute arbitrary code via long FTP commands such as (1) USER, (2) PASS, (3) RETR,(4) CWD, (5) XMKD, and (6) XRMD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sapporoworks:black_jumbodog:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"2E6358DE-5686-41E5-BEA2-B054AA454846"}]}]}],"references":[{"url":"http://secunia.com/advisories/12203","source":"cve@mitre.org"},{"url":"http://www.ir3ip.net/pipermail/bugtraq/2004-September/009960.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/714584","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.security.org.sg/vuln/bjd361.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10834","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16842","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ir3ip.net/pipermail/bugtraq/2004-September/009960.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/714584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.security.org.sg/vuln/bjd361.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1440","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in the modpow function in PuTTY before 0.55 allow (1) remote attackers to execute arbitrary code via an SSH2 packet with a base argument that is larger than the mod argument, which causes the modpow function to write memory before the beginning of its buffer, and (2) remote malicious servers to cause a denial of service (client crash) and possibly execute arbitrary code via a large bignum during authentication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.48:*:*:*:*:*:*:*","matchCriteriaId":"1283B462-042C-4857-A700-4179AAE20E2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.49:*:*:*:*:*:*:*","matchCriteriaId":"2791C9DD-F55D-4683-85AF-B6814C34EFBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.50:*:*:*:*:*:*:*","matchCriteriaId":"6D7582C1-AA8E-41E4-9D69-9A18A5B76CB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.51:*:*:*:*:*:*:*","matchCriteriaId":"FC082AE0-C49D-4944-BE76-B751DAD1EF84"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.52:*:*:*:*:*:*:*","matchCriteriaId":"23BAD8E4-2D3A-45EE-A25D-77BD698119BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.53:*:*:*:*:*:*:*","matchCriteriaId":"58BA8E70-9491-4D4F-9182-2F48347BF6FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.53b:*:*:*:*:*:*:*","matchCriteriaId":"8F7716EC-E0F9-4E50-8351-35D2F248B380"},{"vulnerable":true,"criteria":"cpe:2.3:a:putty:putty:0.54:*:*:*:*:*:*:*","matchCriteriaId":"46C2BD4D-9817-459E-ACF4-9C95233200A2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109167869528138&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12212/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html","source":"cve@mitre.org"},{"url":"http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-modpow.html","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-04.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10850","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16885","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109167869528138&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12212/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-modpow.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16885","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1441","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in icq.cgi in Board Power 2.04PF allows remote attackers to inject arbitrary web script or HTML via the action parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:board_power:board_power:2.04pf:*:*:*:*:*:*:*","matchCriteriaId":"56B1CAF6-0A2C-4DCB-920C-02636F5C7BD7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0642.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/744590","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10734","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16698","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0642.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/744590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16698","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1442","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in db2www CGI interpreter in IBM Net.Data 7 and 7.2 allows remote attackers to inject arbitrary web script or HTML via a macro filename, which is not properly handled by error messages such as \"DTWP001E.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.data:7.0:*:*:*:*:*:*:*","matchCriteriaId":"1900FF78-33E3-481D-8984-E45BD83DBF75"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:net.data:7.2:*:*:*:*:*:*:*","matchCriteriaId":"33D2A2A8-BAB1-4A17-883E-46D2D6B7C6F3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0019.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10709/","source":"cve@mitre.org"},{"url":"http://secunia.com/secunia_research/2004-1/advisory/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/197318","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/DMOA-5VNPEL","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3712","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9488","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1008845","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14925","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0019.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10709/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/secunia_research/2004-1/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/197318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/DMOA-5VNPEL","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9488","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1008845","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1443","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the inline MIME viewer in Horde-IMP (Internet Messaging Program) 3.2.4 and earlier, when used with Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via an e-mail message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8D2A8C5B-6155-4B40-B8C8-B4944064E3DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D11E08A4-79D6-46FE-880F-66E9778C298E"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"55A3894F-2E3F-49CA-BEE5-759D603F6EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"FDDBDC41-7E6F-4C97-95BD-7DEB2D9FE837"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3B52D447-8E56-4E04-9650-38D222DA8D2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1C455353-0401-4975-89BC-C23D32A684F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1D9D9E1-D8B7-4A56-BC2F-90BDC97322B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"59DE856E-98FF-4B49-BD7F-3E326FEB89EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"6ED34889-9F98-46BC-9176-557484272C05"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"B7FBC61D-6A08-4DE8-A5E5-A3FC57E7759D"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:2.3:*:*:*:*:*:*:*","matchCriteriaId":"E52AEEE6-2364-4CFB-9337-C5CCA54362E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AD137160-B80D-4C65-A9A9-CEE12107E3DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:3.1:*:*:*:*:*:*:*","matchCriteriaId":"4E6C2AC8-C21A-4152-AAE6-915ACE65CB5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1956C8F0-EB91-4322-85C1-6BE15AA13703"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:3.2:*:*:*:*:*:*:*","matchCriteriaId":"A48DEBEB-0C2D-4F6A-AF63-04990D2FD5AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"8E004FA4-0180-458A-8E8C-8167EF684ED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1F0A1617-17D1-4C9F-A818-27321FD2FEAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D86CDC19-43C3-4ACC-94B4-388BCC8A2203"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:imp:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E9931A5B-CD0C-43A3-B32D-915FF4AF57D5"}]}]}],"references":[{"url":"http://cvs.horde.org/diff.php/imp/docs/CHANGES?r1=1.389.2.106&r2=1.389.2.109&ty=h","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12202/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-07.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10845","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16866","source":"cve@mitre.org"},{"url":"http://cvs.horde.org/diff.php/imp/docs/CHANGES?r1=1.389.2.106&r2=1.389.2.109&ty=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12202/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10845","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16866","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1444","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. (dot dot) sequences in an @@ command in an HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.4","matchCriteriaId":"05AF3815-C649-42AA-94CF-99C0B37B3FFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"19ECB7A0-10A6-4745-A14A-1FDCBA54FA3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"9968A3F6-095B-40E8-B5B3-FF0B9DDF4D66"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"53AB2FBF-3D72-4548-B7EF-A9966DDADE99"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"0079C51C-5341-4ABD-AEC3-ED95D6B3849E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"D942F581-EEE1-4475-91BC-A381F647DB4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"85EA6E14-83A2-4EB5-B288-1BAAAE7BB15E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"3B79CB12-0F99-4337-8FFE-300E1F2635A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5D7924E0-09DE-4231-8543-93F132C525D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.4:*:*:*:*:*:*:*","matchCriteriaId":"B5181473-7735-4C4D-84EB-45123A4CB2EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"611D6B74-E98A-4060-A4E8-0066B23097C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"DDDDAB17-2E78-4F3A-8129-5F6B0AD6824C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"7BC05048-471F-43B8-84F1-B3A4AD0BEB1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D5EA1112-FD27-4560-99B9-F95CB4875B50"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"3B1C7A4E-B709-45B9-820B-9DA47D09A768"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.3.0:pre1:*:*:*:*:*:*","matchCriteriaId":"12248494-B69A-493A-8BAA-AED8B6D90967"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.3.0:pre2:*:*:*:*:*:*","matchCriteriaId":"83D18991-4357-4EDA-B58A-C2B2D55AF65C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.3.0:pre3:*:*:*:*:*:*","matchCriteriaId":"3EA23543-A008-4A35-A2FD-A5C92419B5D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"85911897-FF14-4287-A70C-2BE1533D7DD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.0:b1:*:*:*:*:*:*","matchCriteriaId":"C5AF4647-28B7-4A1F-8CE0-1AECF5E9DA52"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.0:b2:*:*:*:*:*:*","matchCriteriaId":"7491CD5B-BE8B-43D9-9A9C-A9D9091FFF98"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"C170F3BF-A954-4259-AFEA-8FBBA9A03E8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"368312AF-2FC0-4528-A735-FE8E6412637D"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.4.2:pr1:*:*:*:*:*:*","matchCriteriaId":"15A83A5C-A463-4A90-9C2B-CD4BF64D9F93"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5:*:*:*:*:*:*:*","matchCriteriaId":"BFA22ED9-74AB-4B1A-AE32-002CBC70DD33"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.0:*:*:*:*:*:*:*","matchCriteriaId":"7CA7035B-ACAD-43CC-8B0A-5D5C71ED4D00"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.0:beta1:*:*:*:*:*:*","matchCriteriaId":"5FF02B8B-EE0E-490C-B611-9E9073B08A16"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.0:beta2:*:*:*:*:*:*","matchCriteriaId":"FB0B1077-5E96-49D8-8C42-E1B269D977D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.0:pr1:*:*:*:*:*:*","matchCriteriaId":"62D6C85E-EDA1-4F97-86F7-A55D0209E9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"046CAABB-4A40-4734-9506-FE9E5D74ED6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"3D7C743E-B264-4FEB-AE0D-6B63C6D25CD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"18AC89CD-2092-4694-8DA3-268466CB1728"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.4:*:*:*:*:*:*:*","matchCriteriaId":"C8EB5412-927B-49F4-B1F1-0890AB674F1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.5:*:*:*:*:*:*:*","matchCriteriaId":"B52588E4-C6C4-45DE-B8C2-4948AEAA2E75"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.6:*:*:*:*:*:*:*","matchCriteriaId":"7C747D8A-1FD7-4E80-949F-49833D8A871B"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.7:*:*:*:*:*:*:*","matchCriteriaId":"74CEEC73-4AF9-4E5A-A526-101E23A7ED2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.8:stable:*:*:*:*:*:*","matchCriteriaId":"6890C793-5346-4274-91F6-D3A1F4D4454B"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.5.9:*:*:*:*:*:*:*","matchCriteriaId":"10F15818-1EC9-4E72-8E10-BF7CBEE6DECC"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"2136129D-9795-4281-A07E-297BE50A7A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.0:b1:*:*:*:*:*:*","matchCriteriaId":"31430BEC-1190-46F9-82B8-6EBE6CBE1BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.0:b2:*:*:*:*:*:*","matchCriteriaId":"E0855645-97A3-4CA1-9A7C-3050151302E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.0:b3:*:*:*:*:*:*","matchCriteriaId":"86F1057A-0273-4B77-8DD9-32D54676F991"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.0:b4:*:*:*:*:*:*","matchCriteriaId":"ACC3C30E-4796-49CE-AFDF-DC7B29737FAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"068DEB7C-DAC2-45D6-A0B6-DC54EF52DF14"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"960311B7-4C1B-4D7F-B8D1-A99977C389D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:roundup-tracker:roundup:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"953F1AAF-CFF8-462C-99E4-7A4D8404BCEA"}]}]}],"references":[{"url":"http://packetstormsecurity.nl/0406-exploits/roundUP.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11801/","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010415","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=961511&group_id=31577&atid=402788","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-09.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10495","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16350","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.nl/0406-exploits/roundUP.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11801/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=961511&group_id=31577&atid=402788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1445","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nessus:nessus:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A287322-81AF-48F2-8224-975F4E0D9B22"},{"vulnerable":true,"criteria":"cpe:2.3:a:nessus:nessus:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"19A3E4CB-64F3-4635-81E3-25F680CE7FC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nessus:nessus:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CBE40915-230A-4D8F-B12B-FB7E1A2687B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nessus:nessus:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"436FCC9C-08AC-4468-9C0F-FBB4F19C6049"},{"vulnerable":true,"criteria":"cpe:2.3:a:nessus:nessus:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1743641B-5C20-49A6-A3D8-83D2EF5283A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nessus:nessus:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"37422F3F-9688-4F7D-A806-A1BCEBA90208"},{"vulnerable":true,"criteria":"cpe:2.3:a:nessus:nessus:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"F9E9C3B3-501A-4084-8315-7A97914425F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nessus:nessus:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"BD32A25A-C87D-4894-9D3F-CC28D595A9C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nessus:nessus:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"079395B7-2007-49AB-B529-8EAA100C8C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:nessus:nessus:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"85D0F3F2-7FBA-48AF-BF37-248890906274"},{"vulnerable":true,"criteria":"cpe:2.3:a:nessus:nessus:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"873973E3-0FA4-4473-BEFA-DBADF7A4A7B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nessus:nessus:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"0EF4487A-16C7-4FCF-8B71-C40333FC96C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nessus:nessus:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"20F82DDA-2F47-4674-BD7D-542C0A7967D7"}]}]}],"references":[{"url":"http://secunia.com/advisories/12127/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-11.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.nessus.org/nessus_2_0.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10784","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16768","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12127/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-11.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.nessus.org/nessus_2_0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16768","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1446","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in ScreenOS in Juniper Networks NetScreen firewall 3.x through 5.x allows remote attackers to cause a denial of service (device reboot or hang) via a crafted SSH v1 packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:1.7:*:*:*:*:*:*:*","matchCriteriaId":"24BB54A7-24D0-409E-8924-D212543E4AAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:1.64:*:*:*:*:*:*:*","matchCriteriaId":"74187E80-0EDA-4FE7-A113-FCB723AF08B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:1.66:*:*:*:*:*:*:*","matchCriteriaId":"0D6691BE-2591-495A-BB72-2DA9956944A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:1.66_r2:*:*:*:*:*:*:*","matchCriteriaId":"CAB79FD3-29CB-4694-9A67-C6AF2EADA89D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:1.73_r1:*:*:*:*:*:*:*","matchCriteriaId":"92455F85-9BFA-4684-9A6D-0E52AFA7161B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:1.73_r2:*:*:*:*:*:*:*","matchCriteriaId":"1173EA59-AEAE-49E6-B6DD-775B28C678D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.0.1_r8:*:*:*:*:*:*:*","matchCriteriaId":"6711CD61-E16E-41B8-8948-592171D73B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CAD0131A-D07C-4B23-8CEC-E7CF659DB55E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.1_r6:*:*:*:*:*:*:*","matchCriteriaId":"2837DDC0-9F2C-4782-AA1E-5315AB12528F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.1_r7:*:*:*:*:*:*:*","matchCriteriaId":"07B065C9-93C6-43EB-ADD1-532FC6FBEA87"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.5:*:*:*:*:*:*:*","matchCriteriaId":"4D38841C-DF2D-41D8-BD15-EBBB9E9D83E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.5r1:*:*:*:*:*:*:*","matchCriteriaId":"DDDBDBE1-E16B-4F03-9072-8B28E9467FED"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.5r2:*:*:*:*:*:*:*","matchCriteriaId":"4E099835-7C70-44F1-9E2B-07AF5B3C0577"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.5r6:*:*:*:*:*:*:*","matchCriteriaId":"D10CDE09-1896-4E99-B2A0-93F89164225A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F3159CA4-0944-4419-9B60-E93269710377"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"2F43896A-2EF6-4069-8B81-815E4C232C0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r1:*:*:*:*:*:*:*","matchCriteriaId":"6A7DFAB9-4D4D-4179-9DC4-F654D6E2DAB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r2:*:*:*:*:*:*:*","matchCriteriaId":"26EC0CE2-5A5C-44ED-A423-CC20B7FFE22F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r3:*:*:*:*:*:*:*","matchCriteriaId":"E2BD48EE-C23B-412C-895D-F58CD81FC673"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r4:*:*:*:*:*:*:*","matchCriteriaId":"D7A6CA51-F121-44F7-80D1-CF38261D299C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r5:*:*:*:*:*:*:*","matchCriteriaId":"B5064E9A-677E-418E-91A7-2DB686B662DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r6:*:*:*:*:*:*:*","matchCriteriaId":"DB00325B-29C6-41DA-9274-C9B4C54BC53E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r7:*:*:*:*:*:*:*","matchCriteriaId":"8DF67517-638C-4D57-8402-F336A74C4BB8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r8:*:*:*:*:*:*:*","matchCriteriaId":"07AC301B-0487-4FDB-B1F8-B225099B96FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r9:*:*:*:*:*:*:*","matchCriteriaId":"A7CE0BC3-6B59-4EAB-A2BD-CF73B3BD415F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r10:*:*:*:*:*:*:*","matchCriteriaId":"B9B65997-2AB7-42D1-A1D9-E999A33366CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r11:*:*:*:*:*:*:*","matchCriteriaId":"BB3F1262-141B-48E0-8EAC-97B043EBD9FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.6.1r12:*:*:*:*:*:*:*","matchCriteriaId":"214DA9E7-E8E5-4579-86E8-A5A8BC887860"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"1CE7F646-B716-47D7-84E8-CA875A85C983"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1r1:*:*:*:*:*:*:*","matchCriteriaId":"AA96638D-AD5F-4EFD-983B-181DCCF3EAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1r2:*:*:*:*:*:*:*","matchCriteriaId":"2E30F9B6-24EB-44FB-9E73-5DD480A48CB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.7.1r3:*:*:*:*:*:*:*","matchCriteriaId":"B1648D07-823B-4BF9-87EC-DB34797B5B5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.8:*:*:*:*:*:*:*","matchCriteriaId":"2D06FC50-39AE-4988-8C96-38A991CD7F97"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.8_r1:*:*:*:*:*:*:*","matchCriteriaId":"B33B8346-B753-443F-BB24-74FF6C55340B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.10_r3:*:*:*:*:*:*:*","matchCriteriaId":"47DE8E73-0F1B-42E4-9BD6-7F5066D7330B"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:2.10_r4:*:*:*:*:*:*:*","matchCriteriaId":"057B0387-44C0-45BE-9D91-D5A01C9D8020"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"28EB52A7-E8EC-46AA-A3F5-81BFA01666D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.0r1:*:*:*:*:*:*:*","matchCriteriaId":"A25881AB-69D0-46E5-A502-C65933A457B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.0r2:*:*:*:*:*:*:*","matchCriteriaId":"B14314AE-812D-4654-B6CE-43917A1F0542"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.0r3:*:*:*:*:*:*:*","matchCriteriaId":"20F7E636-40E0-45CC-A39E-C8BDF9CFBE6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.0r4:*:*:*:*:*:*:*","matchCriteriaId":"463EC9BA-B241-45D6-AB89-53EB8156E40F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"179C18B1-3731-4DBC-A942-D810671401BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r1:*:*:*:*:*:*:*","matchCriteriaId":"D53868A9-67B6-40AD-B4F0-6911F1D2FC6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r2:*:*:*:*:*:*:*","matchCriteriaId":"8AA52D22-A0D6-413A-9F49-0452356D2BE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r3:*:*:*:*:*:*:*","matchCriteriaId":"02BF2DCD-4F61-4FA2-B82B-FB9DEB33054F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r4:*:*:*:*:*:*:*","matchCriteriaId":"1C844B2C-26BB-460D-A36E-B74F45169F46"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r5:*:*:*:*:*:*:*","matchCriteriaId":"93F618F5-E695-41BA-BFDB-E63A9A422F74"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r6:*:*:*:*:*:*:*","matchCriteriaId":"31811D82-B28F-49CD-8C86-A4DE7CD95F31"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.1r7:*:*:*:*:*:*:*","matchCriteriaId":"56D1957D-9F30-4D66-BA14-8015E260C076"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E9FCB548-2488-4EBC-AA21-4A57F5F87E41"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2A4C0FC0-AB52-498B-84AE-DF2C380B079D"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3_r1.1:*:*:*:*:*:*:*","matchCriteriaId":"05578911-51E3-447B-98B6-083D3F35E8F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r1:*:*:*:*:*:*:*","matchCriteriaId":"6D71F4A5-7380-4E0E-9B81-7CCBECA3EFF0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r2:*:*:*:*:*:*:*","matchCriteriaId":"981D2274-9686-4F6F-83B1-F4D0DA909983"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r3:*:*:*:*:*:*:*","matchCriteriaId":"A5CD9C77-891A-4E0D-9D5D-214466699044"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r4:*:*:*:*:*:*:*","matchCriteriaId":"F27C7E28-915C-4ECC-A9BC-779F70905614"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r5:*:*:*:*:*:*:*","matchCriteriaId":"47206DFC-7840-4CB8-8ED4-2212C287B4DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r6:*:*:*:*:*:*:*","matchCriteriaId":"A46904E1-F2E5-45BA-8945-4FB3EF34D299"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r7:*:*:*:*:*:*:*","matchCriteriaId":"45551432-C02B-426D-89DC-16573A7C8CD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.0.3r8:*:*:*:*:*:*:*","matchCriteriaId":"CBCFE4A9-9018-4F21-8BB4-D12AD0C33690"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5BFC9DEB-00D5-4FC9-A608-1F7364FF21F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r1:*:*:*:*:*:*:*","matchCriteriaId":"EDBA6417-9C4C-41D9-91C7-96C255EB2298"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r2:*:*:*:*:*:*:*","matchCriteriaId":"F7C65E89-186B-4D14-8A40-58B780731DF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r3:*:*:*:*:*:*:*","matchCriteriaId":"26637853-7036-434E-A9AC-AAC88D84D826"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r4:*:*:*:*:*:*:*","matchCriteriaId":"5A890FC9-CF8B-413A-A580-2F59A42D1744"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r5:*:*:*:*:*:*:*","matchCriteriaId":"F555CCA2-95D0-4D11-A182-5A00A03403D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r6:*:*:*:*:*:*:*","matchCriteriaId":"A4B50AC2-39DE-4446-A9ED-0627C4A9DC21"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r7:*:*:*:*:*:*:*","matchCriteriaId":"F01ED64F-5617-412D-807D-7FAF0E45172F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r8:*:*:*:*:*:*:*","matchCriteriaId":"50B215E3-FDB1-43C6-9A7E-A98F381CB311"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r9:*:*:*:*:*:*:*","matchCriteriaId":"058331CE-8DCF-4B8D-83F5-F23D935D9931"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r10:*:*:*:*:*:*:*","matchCriteriaId":"98D3D6B3-7BB7-40AC-8FB3-F8362DA36047"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r11:*:*:*:*:*:*:*","matchCriteriaId":"7C2E0233-3161-4B45-9EB2-D46BE76E1520"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.0r12:*:*:*:*:*:*:*","matchCriteriaId":"12B61290-20EC-4D3C-A7BF-85545F5BA5BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:3.1.1_r2:*:*:*:*:*:*:*","matchCriteriaId":"A85A76EC-8F86-47A6-A85A-8B4216C99142"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"26958BB3-1484-42EC-AC3A-33A748B377F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0:*:dial:*:*:*:*:*","matchCriteriaId":"6AB0B6EE-BEDE-46AD-859E-9601297B0217"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r1:*:*:*:*:*:*:*","matchCriteriaId":"E9E29D5B-872A-4CD5-9A44-EBFA5A7C7554"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r2:*:*:*:*:*:*:*","matchCriteriaId":"BE3851B7-72BC-4DDF-A718-69068128CA15"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r3:*:*:*:*:*:*:*","matchCriteriaId":"19A6D877-DF7D-4E9B-8855-2ACF97C5FC29"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r4:*:*:*:*:*:*:*","matchCriteriaId":"54FBDD05-CAA6-4034-8C2D-94E965BE2132"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r5:*:*:*:*:*:*:*","matchCriteriaId":"7BD1CFF3-3211-43E2-858C-37142EE54490"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r6:*:*:*:*:*:*:*","matchCriteriaId":"9BC0306C-FDDD-4B5F-B371-17CA2231C63A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r7:*:*:*:*:*:*:*","matchCriteriaId":"63E607F4-E348-4385-9C2C-558BB0402585"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r8:*:*:*:*:*:*:*","matchCriteriaId":"35CA445F-428A-4EDB-A18A-5E626D0E04BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r9:*:*:*:*:*:*:*","matchCriteriaId":"9E8885D9-20A0-443D-9650-912F360C9B14"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r10:*:*:*:*:*:*:*","matchCriteriaId":"4FD70CC4-334A-4734-97DE-C31A6C2014AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r11:*:*:*:*:*:*:*","matchCriteriaId":"AC456F90-05EB-4C88-9650-ED71A35A80C5"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.0r12:*:*:*:*:*:*:*","matchCriteriaId":"FAEA92AE-A047-4A20-A209-B9CAC646BFC2"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"78FF0914-F907-41F4-9F2D-6ECD601C73C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r1:*:*:*:*:*:*:*","matchCriteriaId":"48518416-3F00-4174-A0EF-57E5A614F8A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r2:*:*:*:*:*:*:*","matchCriteriaId":"ACCD6F2D-642E-407E-A16D-73B97F709431"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r3:*:*:*:*:*:*:*","matchCriteriaId":"438438F8-C7C3-427A-B7AA-1E7F8DA5C014"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r4:*:*:*:*:*:*:*","matchCriteriaId":"ED08E19A-67ED-47F9-B40F-B8CFF496AF7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r5:*:*:*:*:*:*:*","matchCriteriaId":"FB9021FD-198B-4D7D-BAF3-D83EC3D64EFE"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r6:*:*:*:*:*:*:*","matchCriteriaId":"01E861C0-AF82-4F7C-A515-005083D7D699"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r7:*:*:*:*:*:*:*","matchCriteriaId":"38B7AEE2-BAA4-4FDA-A627-F5A7370D2C5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r8:*:*:*:*:*:*:*","matchCriteriaId":"3BCB5149-8C43-42A2-A9B2-541802FBE5B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r9:*:*:*:*:*:*:*","matchCriteriaId":"2C3A3552-2D77-494E-902E-9529AA2074D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.1r10:*:*:*:*:*:*:*","matchCriteriaId":"BD90D085-60F7-4B3F-8C82-B9F362EFFB89"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"627A41F5-BE3C-41AD-B455-0D73BE5CA010"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7D41144E-9F64-4919-87DA-09092AA2030A"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.3r1:*:*:*:*:*:*:*","matchCriteriaId":"F85BBA70-D185-4A84-8D66-2D3ACE336C6F"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.3r2:*:*:*:*:*:*:*","matchCriteriaId":"D0F6E761-1941-4B9F-98DC-1EED40B851A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.3r3:*:*:*:*:*:*:*","matchCriteriaId":"3A3720A8-B042-4366-A4F2-2262CDD0CAF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:4.0.3r4:*:*:*:*:*:*:*","matchCriteriaId":"66AEC6EE-F483-4156-91DB-E939B45D09E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:juniper:netscreen_screenos:5.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4F4B1021-40CB-4A11-9650-F1BDBD6943D2"}]}]}],"references":[{"url":"http://secunia.com/advisories/12208/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.juniper.net/support/security/alerts/screenos-sshv1-2.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/749870","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10854","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16876","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12208/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.juniper.net/support/security/alerts/screenos-sshv1-2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/749870","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16876","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1447","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Jetbox One 2.0.8 and possibly other versions stores passwords in the database in plaintext, which could allow attackers to gain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jetbox:jetbox_one_cms:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6F64EB3E-FD30-4122-A1A1-CE275FE4A7D2"}]}]}],"references":[{"url":"http://echo.or.id/adv/adv03-y3dips-2004.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12230","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/586720","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/8325","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/370852","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10858","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16898","source":"cve@mitre.org"},{"url":"http://echo.or.id/adv/adv03-y3dips-2004.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/586720","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.osvdb.org/8325","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/370852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10858","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1448","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Jetbox One 2.0.8 and possibly other versions allow remote attackers with Author privileges in the IMAGES module to upload PHP files and execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jetbox:jetbox_one_cms:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6F64EB3E-FD30-4122-A1A1-CE275FE4A7D2"}]}]}],"references":[{"url":"http://echo.or.id/adv/adv03-y3dips-2004.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12230/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/417408","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/370852","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10859","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16900","source":"cve@mitre.org"},{"url":"http://echo.or.id/adv/adv03-y3dips-2004.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12230/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/417408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/370852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1449","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of files on a user's hard drive by obscuring a file upload control and tricking the user into dragging text into that control."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:0.7:*:*:*:*:*:*:*","matchCriteriaId":"F374AF9E-BBBC-4C0E-B00C-5DB7FC83B445"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*","matchCriteriaId":"BA58BA23-4CFE-40F8-A2F4-104007E12E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"22F00276-9071-4B96-B49C-2E0898476874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EB84CC9B-346B-4AF4-929E-D56D85960103"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9420CD82-0E5F-4486-9AF8-9DCD6ED7E037"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"0A9C79AB-4ABE-49E6-BAB2-94610AE0316F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"04DE7CCB-79B8-4F9B-AC14-E4A100F9E473"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"1444C77E-FF98-40E5-9CA9-B4C71B3C9304"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3B40771F-30CB-45D0-9EDE-1F13852085B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"47315EC4-1EED-4070-A087-8E37C8FE6703"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"9F1EB38F-CEB2-40BC-AA5D-CC539F597137"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*","matchCriteriaId":"EE6B0681-B96F-405C-8042-1BF2DDB41648"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*","matchCriteriaId":"5436BBD2-E3FF-4558-B8F5-FFF5CA9FC045"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A76ACC55-754D-4501-8312-5A4E10D053B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8987151-0901-4547-B750-5DC470BB9CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"53E60BCC-6D1C-489E-9F3B-9BE42B46704F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66A87ED8-9E1F-4C2C-B806-A41765081C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C795D86F-9B08-41FE-B82B-5BBB3DE6357D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"2637D552-4A3D-4867-B52A-ACCED8681AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CC237C8-CFE0-4128-B549-93CD16894E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*","matchCriteriaId":"6B8EA79A-8426-44CF-AF13-58F7EF8B6D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"367A5D46-0FF3-4140-9478-251363822E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CAA58EE9-05C7-4395-A8A4-5F54BE4C5DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C656A621-BE62-4BB8-9B25-A3916E60FA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F8DE4889-424F-4A44-8C14-9F18821CE961"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*","matchCriteriaId":"82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*","matchCriteriaId":"1003D688-3EEA-45F9-BB2C-5BAB395D7678"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED69BEB9-8D83-415B-826D-9D17FB67976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9AE678D7-812D-4C55-91B0-F3AC6BE0CD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"098458D4-635B-4A4D-9472-39370094E1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BCDB64E5-AE26-43DF-8A66-654D5D22A635"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9D75F1-8333-43DE-A08B-142E4C5899D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6BF63077-4E98-497D-8CE6-B84B022DB21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*","matchCriteriaId":"0618BD26-0EF5-4774-9131-B5ABD4CD302A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*","matchCriteriaId":"0D604DAE-DF63-413C-9F49-FFC8E84699F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*","matchCriteriaId":"11DE6185-09F4-48E3-9742-F9D8030B5774"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*","matchCriteriaId":"B2E70864-E077-4CD6-A0E8-BC2C4C298A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*","matchCriteriaId":"61E565E5-286D-4A68-B085-5659DFE59A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*","matchCriteriaId":"8E2A68B4-9101-4AC5-9E82-EEB5A5405541"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=206859#c0","source":"cve@mitre.org"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:082","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=206859#c0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1450","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in LiveConnect in Mozilla 1.7 beta allows remote attackers to read arbitrary files in known locations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*","matchCriteriaId":"F610FFD5-DF37-4075-AE8B-8D89DF6205A8"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=239122","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=239122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1451","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote attackers to trick users into clicking on unknown or untrusted sites and facilitate phishing attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.8:*:*:*:*:*:*:*","matchCriteriaId":"BA58BA23-4CFE-40F8-A2F4-104007E12E05"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"22F00276-9071-4B96-B49C-2E0898476874"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"EB84CC9B-346B-4AF4-929E-D56D85960103"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9420CD82-0E5F-4486-9AF8-9DCD6ED7E037"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"0A9C79AB-4ABE-49E6-BAB2-94610AE0316F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"04DE7CCB-79B8-4F9B-AC14-E4A100F9E473"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"1444C77E-FF98-40E5-9CA9-B4C71B3C9304"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"3B40771F-30CB-45D0-9EDE-1F13852085B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"1E4F64F8-CCC2-47FF-9B9D-41B3BCDD513C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"47315EC4-1EED-4070-A087-8E37C8FE6703"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"9F1EB38F-CEB2-40BC-AA5D-CC539F597137"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.35:*:*:*:*:*:*:*","matchCriteriaId":"EE6B0681-B96F-405C-8042-1BF2DDB41648"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:0.9.48:*:*:*:*:*:*:*","matchCriteriaId":"5436BBD2-E3FF-4558-B8F5-FFF5CA9FC045"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A76ACC55-754D-4501-8312-5A4E10D053B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8987151-0901-4547-B750-5DC470BB9CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"53E60BCC-6D1C-489E-9F3B-9BE42B46704F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66A87ED8-9E1F-4C2C-B806-A41765081C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C795D86F-9B08-41FE-B82B-5BBB3DE6357D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"2637D552-4A3D-4867-B52A-ACCED8681AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CC237C8-CFE0-4128-B549-93CD16894E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*","matchCriteriaId":"6B8EA79A-8426-44CF-AF13-58F7EF8B6D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"367A5D46-0FF3-4140-9478-251363822E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CAA58EE9-05C7-4395-A8A4-5F54BE4C5DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C656A621-BE62-4BB8-9B25-A3916E60FA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F8DE4889-424F-4A44-8C14-9F18821CE961"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*","matchCriteriaId":"82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*","matchCriteriaId":"1003D688-3EEA-45F9-BB2C-5BAB395D7678"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED69BEB9-8D83-415B-826D-9D17FB67976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9AE678D7-812D-4C55-91B0-F3AC6BE0CD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"098458D4-635B-4A4D-9472-39370094E1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BCDB64E5-AE26-43DF-8A66-654D5D22A635"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9D75F1-8333-43DE-A08B-142E4C5899D4"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=228176","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/10419/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=228176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/10419/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.mozilla.org/projects/security/known-vulnerabilities.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1452","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:0.5:*:*:*:*:*:*:*","matchCriteriaId":"980553F2-8662-47CF-95F0-645141746AEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:0.7:*:*:*:*:*:*:*","matchCriteriaId":"40EBF1CD-B392-4262-8F06-2C784ADAF0F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.1a:*:*:*:*:*:*:*","matchCriteriaId":"9C00F84A-FCD4-4935-B7DE-ECBA6AE9B074"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.2:*:*:*:*:*:*:*","matchCriteriaId":"960DC6C2-B285-41D4-96F7-ED97F8BD5482"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D1FD0EB4-E744-4465-AFEE-A3C807C9C993"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*","matchCriteriaId":"1D866A7D-F0B9-4EA3-93C6-1E7C2C2A861F"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc3:*:*:*:*:*:*","matchCriteriaId":"57772E3B-893C-408A-AA3B-78C972ED4D5E"}]}]}],"references":[{"url":"http://secunia.com/advisories/12296/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-15.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10951","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16993","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12296/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1453","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E5C0577C-6BC7-418F-B2C5-B74800D43418"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FEA795F7-8AAC-42BA-971B-601346704BD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5CADA314-C0D0-40F8-9019-884F17D0B54A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"255E0C0D-0B70-4C10-BF7C-34193AA24C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F424F2F5-D7E4-4A13-A8CF-32D466610BDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6DC4E7AE-BDC4-48F1-9FDE-3F3FAA3F40F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"F1329215-C53A-40D5-8E9C-F457D092E483"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1:*:*:*:*:*:*:*","matchCriteriaId":"4E2A0F12-FD00-40B9-86AD-7D082385E5DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8ED8F0E8-A969-4F7F-A100-662F4A5426FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"9416576F-A605-45BE-AA01-FEF357A66979"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AE582B8F-4E31-4D0F-B2F9-AC83C855F751"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"DB56D9C9-13B3-418C-B06C-0997E165F1C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"8AFD93D5-70BB-475C-BDD3-DEDE9965C5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"19D5667D-5EA4-4B44-BF8A-9C10506BD4E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2:*:*:*:*:*:*:*","matchCriteriaId":"21F23D2F-A01F-4949-A917-D1164E14EAA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"64576C9A-FCD9-4410-B590-AB43F9F85D2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"229AC4E3-AFBA-4EF4-8534-8FBE1E630253"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5B91503A-E8DC-4DFF-98D4-687B5AE41438"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"241A4B59-7BBC-4656-93AC-7DD8BE29EB58"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"00D0DBDC-1559-406D-AADC-12B5ABDD2BE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.3:*:*:*:*:*:*:*","matchCriteriaId":"A5294FCC-3933-4CD5-8DFE-BCDC00F4BD18"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C5CA3E33-7CC6-4AC5-999A-3C46D7FD14A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"CAADC158-B7EF-4135-B383-0DA43065B43E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"261A4A17-3B9E-46E6-897B-DB0C8358A1D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:glibc:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"DAAC8483-5060-428B-8D8E-C30E5823BB3E"}]}]}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=59526","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12306","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-16.xml","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-256.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-261.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10963","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17006","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10762","source":"cve@mitre.org"},{"url":"http://bugs.gentoo.org/show_bug.cgi?id=59526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-16.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-256.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-261.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17006","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10762","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1454","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.0S, 12.2, and 12.3, with Open Shortest Path First (OSPF) enabled, allows remote attackers to cause a denial of service (device reload) via a malformed OSPF packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(22\\)s:*:*:*:*:*:*:*","matchCriteriaId":"6070D9A2-9A74-46B1-979D-F3F80D69513E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(22\\)s4:*:*:*:*:*:*:*","matchCriteriaId":"9DBB2CF9-2F36-4CA8-8814-C34AE5620942"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(22\\)s5:*:*:*:*:*:*:*","matchCriteriaId":"7498FF80-0A4D-4510-9C1A-DA24E1A4A4E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(22\\)sy:*:*:*:*:*:*:*","matchCriteriaId":"312DB4D6-81B5-44C5-B99F-D56603C00B98"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(23\\)sx:*:*:*:*:*:*:*","matchCriteriaId":"02F37758-9AC2-4CAA-8A09-5A59FC622267"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0\\(23\\)sz:*:*:*:*:*:*:*","matchCriteriaId":"53D11EA0-B7E1-46F5-9FCE-0812A7DD776D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(11\\)yu:*:*:*:*:*:*:*","matchCriteriaId":"4B52D7F7-AC13-42FF-BBDC-FFF4A25DFD54"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(11\\)yv:*:*:*:*:*:*:*","matchCriteriaId":"574C686D-F7B6-42F5-BBE6-AAA61425DF2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)zd:*:*:*:*:*:*:*","matchCriteriaId":"F6F77A78-FFCE-4BD5-A027-A3AE81AE4C69"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)ze:*:*:*:*:*:*:*","matchCriteriaId":"D71C31AB-60C5-41D3-9C28-E11D8C87BA15"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)zf:*:*:*:*:*:*:*","matchCriteriaId":"B4F26995-8997-4665-B277-42119A370FED"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)zg:*:*:*:*:*:*:*","matchCriteriaId":"F2F5E02F-2EDF-4C24-8279-5602638E0E26"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(13\\)zh:*:*:*:*:*:*:*","matchCriteriaId":"C9585CFD-C563-4D76-A606-6C629B0BA12C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sz:*:*:*:*:*:*:*","matchCriteriaId":"C6D9BA55-F193-4BCA-ACC2-BBC892E9D7E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sz1:*:*:*:*:*:*:*","matchCriteriaId":"46974023-379B-4475-A59F-BD340043CFAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(14\\)sz2:*:*:*:*:*:*:*","matchCriteriaId":"D71C21E1-BC04-4537-B64D-76492F282B76"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)b:*:*:*:*:*:*:*","matchCriteriaId":"7F3DF4A1-DF61-46CB-AFF5-9B7DD6F93317"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)bc:*:*:*:*:*:*:*","matchCriteriaId":"EA8421C4-3CB5-40B8-AB20-5E883FAC276C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)bc1:*:*:*:*:*:*:*","matchCriteriaId":"D9CDFBF7-D393-42F5-89A8-482459A426A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)bx:*:*:*:*:*:*:*","matchCriteriaId":"864B17DA-90A8-40F0-8885-3F9E47589131"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)bz:*:*:*:*:*:*:*","matchCriteriaId":"31E2E42C-DB5E-4534-9BE5-E2717E96C784"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)cx:*:*:*:*:*:*:*","matchCriteriaId":"32737FE9-2E17-4DA9-B3DD-6B5A4CBE2C40"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)mc1:*:*:*:*:*:*:*","matchCriteriaId":"5C02477E-BBB9-49A2-94CC-9457DC928EB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)t:*:*:*:*:*:*:*","matchCriteriaId":"284DFE38-63FE-45CC-8CF7-B84050674EBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)t5:*:*:*:*:*:*:*","matchCriteriaId":"9A424753-62C6-466F-BD19-047A1611A4FC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zj:*:*:*:*:*:*:*","matchCriteriaId":"FE530211-6ECF-4881-A069-826E0737CE5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zj1:*:*:*:*:*:*:*","matchCriteriaId":"2C5C18D0-B516-4F5A-AB43-B3D5FBB14202"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zj2:*:*:*:*:*:*:*","matchCriteriaId":"0CB1FC76-DFCC-4F06-A320-82C27A502B07"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zj3:*:*:*:*:*:*:*","matchCriteriaId":"C17E0E7D-E7C0-434D-9142-F8A93BF63FCF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zk:*:*:*:*:*:*:*","matchCriteriaId":"C81871C3-7AB6-41A1-BECF-2F34ED208E5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zl:*:*:*:*:*:*:*","matchCriteriaId":"9FFB25CF-C329-46A0-A404-36D951C7A0B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zl1:*:*:*:*:*:*:*","matchCriteriaId":"D6CD80CB-7E2D-4DC0-A84E-D9E1ADFA141F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zn:*:*:*:*:*:*:*","matchCriteriaId":"776DCDA0-839D-4EA2-8C0C-D28E897C1E71"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(15\\)zo:*:*:*:*:*:*:*","matchCriteriaId":"55827F80-F1A1-4538-85C0-069413E3DB80"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)ew:*:*:*:*:*:*:*","matchCriteriaId":"9E49B392-5366-422D-A10E-EE4F3A33C4B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)s:*:*:*:*:*:*:*","matchCriteriaId":"2D0E67EE-AF42-4B53-B70A-45562CE164D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)se:*:*:*:*:*:*:*","matchCriteriaId":"9E319ADC-C636-4933-BD50-B613677AD4C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)sv:*:*:*:*:*:*:*","matchCriteriaId":"1A15042D-EB07-4754-8144-947CDE669CAE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.2\\(18\\)sw:*:*:*:*:*:*:*","matchCriteriaId":"E58F4903-E834-4476-876F-8C144BD93D4A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*","matchCriteriaId":"0668C45B-9D25-424B-B876-C1721BFFE5DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(1a\\):*:*:*:*:*:*:*","matchCriteriaId":"6C2928F8-6C6B-4C3F-BBE7-EAE8A0C47E77"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)t3:*:*:*:*:*:*:*","matchCriteriaId":"19940BFF-0888-4717-AC5F-87A85BE165A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)xc1:*:*:*:*:*:*:*","matchCriteriaId":"9E5A2A58-D7B2-4018-BAAE-D6CB49A3A709"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)xc2:*:*:*:*:*:*:*","matchCriteriaId":"1C268494-F83A-488D-AEE6-AF7D319B6F64"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(2\\)xc3:*:*:*:*:*:*:*","matchCriteriaId":"484207D7-0AC2-48B6-B86F-182651B6BBB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(3e\\):*:*:*:*:*:*:*","matchCriteriaId":"40DD5508-B8BF-435C-B316-42FEDDDBA859"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)eo1:*:*:*:*:*:*:*","matchCriteriaId":"8FF2F9E9-AA00-4A78-A32C-14CAA1C171A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)t:*:*:*:*:*:*:*","matchCriteriaId":"68BCC003-3F88-4369-A387-6B8D0FDFBE32"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)t1:*:*:*:*:*:*:*","matchCriteriaId":"8DD45AA0-EEE1-43FF-B04D-4063769D71AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)t2:*:*:*:*:*:*:*","matchCriteriaId":"7873D1DB-80D0-4076-8716-7618D7161EE2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)t3:*:*:*:*:*:*:*","matchCriteriaId":"DF292613-B9BC-4CF1-A6FA-4AFC077D8632"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)t4:*:*:*:*:*:*:*","matchCriteriaId":"208EF5CB-8131-443A-928B-391104DC1C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xd:*:*:*:*:*:*:*","matchCriteriaId":"23B1AF9D-106A-43CB-972C-5E85ADFC355D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xd1:*:*:*:*:*:*:*","matchCriteriaId":"25C6BBA6-8D45-4BA7-B88E-44D9ECE88009"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xd2:*:*:*:*:*:*:*","matchCriteriaId":"C1D460AE-3B86-4178-A9D4-172AD4AF1DF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xg1:*:*:*:*:*:*:*","matchCriteriaId":"A6DFEF95-E48F-4586-9D70-89C192FD21E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xh:*:*:*:*:*:*:*","matchCriteriaId":"6BC5ED4F-1905-4EAA-8AFF-BC50B879725C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xk:*:*:*:*:*:*:*","matchCriteriaId":"F672CDF2-ACC2-485E-89C6-42E47974C8C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(4\\)xq:*:*:*:*:*:*:*","matchCriteriaId":"67151B56-DD5F-4384-9651-FA927CE73D08"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5\\):*:*:*:*:*:*:*","matchCriteriaId":"8CF0189B-964F-46EC-BE5F-8076CFE7AB8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5\\)b1:*:*:*:*:*:*:*","matchCriteriaId":"691E3441-AF70-4959-BBA0-60F5328F8FF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5a\\):*:*:*:*:*:*:*","matchCriteriaId":"53430E70-FBAD-42F7-8614-7AB04E566810"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5a\\)b:*:*:*:*:*:*:*","matchCriteriaId":"B670057C-7A86-4F61-8FF5-88E6BFE2B5F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5b\\):*:*:*:*:*:*:*","matchCriteriaId":"4403BFFB-8A89-4512-8030-5DEDC0C0FF93"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(5c\\):*:*:*:*:*:*:*","matchCriteriaId":"DE38549C-107E-4350-90F2-BA928E3872AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"2D9B4FE3-7A03-430F-AE68-743559D74DEC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(6a\\):*:*:*:*:*:*:*","matchCriteriaId":"6F5C4FD2-E4BC-447D-8B3B-0248BFBE9121"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7\\)t:*:*:*:*:*:*:*","matchCriteriaId":"1BEADF66-3434-41E0-9527-4D97F1836A76"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(7.7\\):*:*:*:*:*:*:*","matchCriteriaId":"5719F49C-0BCC-40F9-825A-4C3C9D4D2239"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3\\(9\\):*:*:*:*:*:*:*","matchCriteriaId":"21837255-F23B-488A-A9FB-ED984020147D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3b:*:*:*:*:*:*:*","matchCriteriaId":"292F6F99-19B3-4106-A432-5DE916CCDD56"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3bw:*:*:*:*:*:*:*","matchCriteriaId":"B8E40D5D-F46E-4098-A46A-1A52A343310D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*","matchCriteriaId":"C0C3B413-76F7-413B-A51F-29834F9DE722"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xa:*:*:*:*:*:*:*","matchCriteriaId":"84C89CFF-64BB-4058-9C49-C6BF3E5D8DB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xb:*:*:*:*:*:*:*","matchCriteriaId":"ACB3B5E3-BDEE-4F29-AB02-BBFC6088D77E"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xc:*:*:*:*:*:*:*","matchCriteriaId":"A9F12741-69FB-46DD-A670-8461492B338A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.3xe:*:*:*:*:*:*:*","matchCriteriaId":"A5688D88-A550-43EB-8854-2E132EC71156"}]}]}],"references":[{"url":"http://secunia.com/advisories/12322","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-199.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040818-ospf.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/989406","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10971","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17033","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12322","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-199.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040818-ospf.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/989406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1455","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"4C87793C-6577-4E67-BBFD-768FAF1BF88D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"DFE9819F-A620-41A6-A102-41746457753F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"A7D6474F-C678-498C-9A61-287E2FDD8B2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"06402BDD-77EA-447A-8C34-E1A0F41D0628"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"7387773A-81F1-464A-9489-E103C51BED46"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A03194CD-2CFA-4F11-90DE-3573BA06B6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"1C39D002-E323-423D-8895-9179DFDF6535"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"73E621C7-A5BA-4D71-9D57-4311360FF3A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"B08810F9-377D-49C4-A9A8-E2EE42EDF2F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"6AA12911-93D8-4DFE-A31C-FEB9E7F7ADD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"9C13E4FD-A874-4366-A426-19665B43F1DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"7C8F4701-C5CC-4FBA-AFF6-5AB890306AC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc3a:*:*:*:*:*:*:*","matchCriteriaId":"3295F345-26D0-4B23-848F-83CFE067EA01"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc3b:*:*:*:*:*:*:*","matchCriteriaId":"D2915303-7347-4811-B7D2-5AF367081797"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc3c:*:*:*:*:*:*:*","matchCriteriaId":"6976E802-011F-44A2-B668-F9D643FC7A86"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc4:*:*:*:*:*:*:*","matchCriteriaId":"08B7236E-DCFB-40DB-BFC8-88F8491BBD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc5:*:*:*:*:*:*:*","matchCriteriaId":"EDF4423C-790B-411A-9AEC-2B36DA0140AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc5_r2:*:*:*:*:*:*:*","matchCriteriaId":"B7CE4165-ED54-4AFC-A584-C145A96819D9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109284737628045&w=2","source":"cve@mitre.org"},{"url":"http://open-security.org/advisories/6","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12194/","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-18.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10890","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16930","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109284737628045&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://open-security.org/advisories/6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12194/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16930","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1456","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvstrac:cvstrac:1.1:*:*:*:*:*:*:*","matchCriteriaId":"BB739BB5-9DEE-43BF-8EC8-1567B3E28C46"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvstrac:cvstrac:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DFAB0125-7125-48D0-84A8-B4BAD15BEFA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvstrac:cvstrac:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"382BAF58-3E11-475A-9453-9FA0CC55BA8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvstrac:cvstrac:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"A82DCEFC-77F1-4FD3-9825-A779160BD3C0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109173359428253&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12090/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.cvstrac.org/cvstrac/chngview?cn=316","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.cvstrac.org/cvstrac/tktview?tn=339","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/770816","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/8373","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10878","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16929","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109173359428253&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12090/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.cvstrac.org/cvstrac/chngview?cn=316","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.cvstrac.org/cvstrac/tktview?tn=339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/770816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/8373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10878","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1457","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Virtual Private Network (VPN) capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service (ABEND in IKE.NLM) via a malformed IKE packet, as sent by the Striker ISAKMP Protocol Test Suite."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:bordermanager:3.8:*:*:*:*:*:*:*","matchCriteriaId":"5424CCB7-0DF1-42FA-9882-D3BE6E58E64A"}]}]}],"references":[{"url":"http://secunia.com/advisories/12067/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10093576.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/432097","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10727","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16697","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12067/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10093576.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/432097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1458","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote attackers to cause a denial of service (hang) via a flood of TCP connections to port 2002."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"44D05855-C8C1-4243-8438-5A36A01A8F48"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"FB11A75E-2E4B-4B83-B763-CBBC1D9DFB36"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2:*:*:*:*:*:*:*","matchCriteriaId":"109147BF-3225-48E4-8BE1-2E5B59921032"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2:*:windows_server:*:*:*:*:*","matchCriteriaId":"7CDA01B6-6887-40BB-B541-65F198D03219"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"86806D6E-1BDF-4253-AEB7-D9D88D224812"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"680E5A81-6409-4CE7-8496-D7845FD7E851"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"3868E060-0278-491A-9943-1A2E435C7606"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"D2793200-D95D-4BD3-8DF2-4A847230FBE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"0E587654-B5A0-47A4-BED6-D8DB69AEF566"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_acs_solution_engine:*:*:*:*:*:*:*:*","matchCriteriaId":"3B17AFE8-DEC5-49BD-98EE-051454A632E5"}]}]}],"references":[{"url":"http://osvdb.org/9182","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12386/","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-203.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11047","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17114","source":"cve@mitre.org"},{"url":"http://osvdb.org/9182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12386/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-203.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17114","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1459","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Secure Access Control Server (ACS) 3.2, when configured as a Light Extensible Authentication Protocol (LEAP) RADIUS proxy, allows remote attackers to cause a denial of service (device crash) via certain LEAP authentication requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"44D05855-C8C1-4243-8438-5A36A01A8F48"},{"vulnerable":false,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"FB11A75E-2E4B-4B83-B763-CBBC1D9DFB36"},{"vulnerable":false,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2:*:*:*:*:*:*:*","matchCriteriaId":"109147BF-3225-48E4-8BE1-2E5B59921032"},{"vulnerable":false,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2:*:windows_server:*:*:*:*:*","matchCriteriaId":"7CDA01B6-6887-40BB-B541-65F198D03219"},{"vulnerable":false,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"86806D6E-1BDF-4253-AEB7-D9D88D224812"},{"vulnerable":false,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"680E5A81-6409-4CE7-8496-D7845FD7E851"},{"vulnerable":false,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"3868E060-0278-491A-9943-1A2E435C7606"},{"vulnerable":false,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"D2793200-D95D-4BD3-8DF2-4A847230FBE5"},{"vulnerable":false,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"0E587654-B5A0-47A4-BED6-D8DB69AEF566"},{"vulnerable":false,"criteria":"cpe:2.3:a:cisco:secure_acs_solution_engine:*:*:*:*:*:*:*:*","matchCriteriaId":"3B17AFE8-DEC5-49BD-98EE-051454A632E5"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11047","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17116","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17116","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1460","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Secure Access Control Server (ACS) 3.2(3) and earlier, when configured with an anonymous bind in Novell Directory Services (NDS) and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"44D05855-C8C1-4243-8438-5A36A01A8F48"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"FB11A75E-2E4B-4B83-B763-CBBC1D9DFB36"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2:*:*:*:*:*:*:*","matchCriteriaId":"109147BF-3225-48E4-8BE1-2E5B59921032"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2:*:windows_server:*:*:*:*:*","matchCriteriaId":"7CDA01B6-6887-40BB-B541-65F198D03219"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"86806D6E-1BDF-4253-AEB7-D9D88D224812"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"680E5A81-6409-4CE7-8496-D7845FD7E851"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"3868E060-0278-491A-9943-1A2E435C7606"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"D2793200-D95D-4BD3-8DF2-4A847230FBE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"0E587654-B5A0-47A4-BED6-D8DB69AEF566"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_acs_solution_engine:*:*:*:*:*:*:*:*","matchCriteriaId":"3B17AFE8-DEC5-49BD-98EE-051454A632E5"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11047","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17117","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17117","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1461","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco Secure Access Control Server (ACS) 3.2(3) and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"44D05855-C8C1-4243-8438-5A36A01A8F48"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"FB11A75E-2E4B-4B83-B763-CBBC1D9DFB36"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2:*:*:*:*:*:*:*","matchCriteriaId":"109147BF-3225-48E4-8BE1-2E5B59921032"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2:*:windows_server:*:*:*:*:*","matchCriteriaId":"7CDA01B6-6887-40BB-B541-65F198D03219"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"86806D6E-1BDF-4253-AEB7-D9D88D224812"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"680E5A81-6409-4CE7-8496-D7845FD7E851"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.2\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"3868E060-0278-491A-9943-1A2E435C7606"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.3:*:*:*:*:*:*:*","matchCriteriaId":"D2793200-D95D-4BD3-8DF2-4A847230FBE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_access_control_server:3.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"0E587654-B5A0-47A4-BED6-D8DB69AEF566"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:secure_acs_solution_engine:*:*:*:*:*:*:*:*","matchCriteriaId":"3B17AFE8-DEC5-49BD-98EE-051454A632E5"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11047","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17118","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17118","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1462","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in MoinMoin 1.2.2 and earlier allows remote attackers to gain unauthorized access to administrator functions such as (1) revert and (2) delete."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.1:*:*:*:*:*:*:*","matchCriteriaId":"F2D2866E-A684-4EB7-A127-5FEC934945E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9D41FDF8-B8BD-43D9-8D53-ADCF15F7E16B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BDC4AB6-39BF-4444-9CFE-B654A19814C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0FD78CAE-9A9D-40AA-AD1F-C124A8315714"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.8:*:*:*:*:*:*:*","matchCriteriaId":"8673FFE8-349E-4412-9913-1145DFA1EC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.9:*:*:*:*:*:*:*","matchCriteriaId":"24271A6D-21D9-4E8D-997F-0EC132518FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.10:*:*:*:*:*:*:*","matchCriteriaId":"B3072B82-3D5C-46DF-8869-08FAAC5C70DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.11:*:*:*:*:*:*:*","matchCriteriaId":"93508FCF-7852-4CB9-AD91-AB0FCD61BE43"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9B83ACA6-5C3C-46E3-805C-EE1E759B7331"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7F7EF155-C5E0-4473-B635-C551BF3F8EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2:*:*:*:*:*:*:*","matchCriteriaId":"ABFA7F26-835B-4454-91A2-1DBB80C53492"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C92D8510-CA34-4E6D-B432-997860C63B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EB2354B8-9A1A-4E75-92AC-F16CFDF91761"}]}]}],"references":[{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-25.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=8194","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10805","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16833","source":"cve@mitre.org"},{"url":"https://sourceforge.net/project/shownotes.php?group_id=8482&release_id=254801","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=8194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10805","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sourceforge.net/project/shownotes.php?group_id=8482&release_id=254801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-1463","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.1:*:*:*:*:*:*:*","matchCriteriaId":"F2D2866E-A684-4EB7-A127-5FEC934945E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.2:*:*:*:*:*:*:*","matchCriteriaId":"9D41FDF8-B8BD-43D9-8D53-ADCF15F7E16B"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.3:*:*:*:*:*:*:*","matchCriteriaId":"0BDC4AB6-39BF-4444-9CFE-B654A19814C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0FD78CAE-9A9D-40AA-AD1F-C124A8315714"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.8:*:*:*:*:*:*:*","matchCriteriaId":"8673FFE8-349E-4412-9913-1145DFA1EC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.9:*:*:*:*:*:*:*","matchCriteriaId":"24271A6D-21D9-4E8D-997F-0EC132518FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.10:*:*:*:*:*:*:*","matchCriteriaId":"B3072B82-3D5C-46DF-8869-08FAAC5C70DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:0.11:*:*:*:*:*:*:*","matchCriteriaId":"93508FCF-7852-4CB9-AD91-AB0FCD61BE43"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9B83ACA6-5C3C-46E3-805C-EE1E759B7331"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7F7EF155-C5E0-4473-B635-C551BF3F8EFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2:*:*:*:*:*:*:*","matchCriteriaId":"ABFA7F26-835B-4454-91A2-1DBB80C53492"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C92D8510-CA34-4E6D-B432-997860C63B89"},{"vulnerable":true,"criteria":"cpe:2.3:a:moinmoin:moinmoin:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EB2354B8-9A1A-4E75-92AC-F16CFDF91761"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?group_id=8482&release_id=254801","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-25.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=8195","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10801","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16832","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=8482&release_id=254801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-25.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=8195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16832","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1464","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-10-22T01:15:31.843","vulnStatus":"Deferred","cisaExploitAdd":"2023-05-19","cisaActionDue":"2023-06-09","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Cisco IOS Denial-of-Service Vulnerability","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port."},{"lang":"es","value":"Cisco IOS 12.2(15) y versiones anteriores permiten a atacantes remotos provocar una denegación de servicio (conexiones VTY (terminal virtual) rechazadas) a través de una conexión TCP manipulada al puerto Telnet o Telnet inverso."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.9,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.2,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.9,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.2,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*","versionEndIncluding":"12.2\\(15\\)zj3","matchCriteriaId":"38FF1890-4ED2-4190-8D9F-0DF93AD1C894"}]}]}],"references":[{"url":"http://secunia.com/advisories/12395/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011079","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml","source":"cve@mitre.org","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/384230","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11060","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17131","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/12395/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/384230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-1464","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}]}},{"cve":{"id":"CVE-2004-1465","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2ACBE01-B77A-4D09-8FB3-D6365786C44F"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:8.0:*:*:*:*:*:*:*","matchCriteriaId":"FDE7DCD6-90B3-4259-9BE6-B9F7A30A64AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:8.1:*:*:*:*:*:*:*","matchCriteriaId":"4088C545-249E-47AD-8BF8-A6A2E5B2BF18"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:8.1:sr1:*:*:*:*:*:*","matchCriteriaId":"3533CE02-6CC0-4E64-B604-BAA131042C7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:winzip:winzip:9.0:*:*:*:*:*:*:*","matchCriteriaId":"523ADB29-C3D5-4C06-89B6-22B5FC68C240"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109416099301369&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011132","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/o-211.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11092","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.winzip.com/wz90sr1.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17192","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17197","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109416099301369&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/o-211.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.winzip.com/wz90sr1.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17192","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17197","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1466","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The set_time_limit function in Gallery before 1.4.4_p2 deletes non-image files in a temporary directory every 30 seconds after they have been uploaded using save_photos.php, which allows remote attackers to upload and execute execute arbitrary scripts before they are deleted, if the temporary directory is under the web root."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"92EB48F8-9018-4BD1-8B68-BC4012676260"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0757.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=134&mode=thread&order=0&thold=0","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-05.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10968","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17021","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0757.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=134&mode=thread&order=0&thold=0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10968","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17021","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1467","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) date or search text field in the calendar module, (2) Field parameter, Filter parameter, QField parameter, Start parameter or Search field in the address module, (3) Subject field in the message module or (4) Subject field in the Ticket module."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:egroupware:egroupware:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E440ECF0-C87D-432B-91D6-C1D61FF780C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:egroupware:egroupware:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"598C8726-BD8E-41F5-8A83-E06CF6F24C8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:egroupware:egroupware:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E91357C7-8028-4870-AEDB-DACEC0EE1E70"}]}]}],"references":[{"url":"http://sourceforge.net/forum/forum.php?forum_id=401807","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-06.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/372603","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11013","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17078","source":"cve@mitre.org"},{"url":"http://sourceforge.net/forum/forum.php?forum_id=401807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/372603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17078","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1468","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.000:*:*:*:*:*:*:*","matchCriteriaId":"C70274C3-7CA0-49A2-B63C-7DAF492CCD0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.010:*:*:*:*:*:*:*","matchCriteriaId":"A7C4A319-0EA6-47E0-831A-27530DCF714E"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.020:*:*:*:*:*:*:*","matchCriteriaId":"D1009D90-9851-441B-A2E2-FA5B676E8182"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.030:*:*:*:*:*:*:*","matchCriteriaId":"934A3D3F-CF10-478C-9206-DB468BCA4702"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.040:*:*:*:*:*:*:*","matchCriteriaId":"77B42570-F094-4C25-B246-6439D3FF4B30"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.051:*:*:*:*:*:*:*","matchCriteriaId":"69A30BB5-2C3F-4C39-8CDC-CC0CC280384C"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.060:*:*:*:*:*:*:*","matchCriteriaId":"753BF8DE-D225-4301-A6A6-50CD60B34234"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.070:*:*:*:*:*:*:*","matchCriteriaId":"FC37A972-11D7-4C85-A8DC-5EDE808629F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:usermin:usermin:1.080:*:*:*:*:*:*:*","matchCriteriaId":"EA7131C0-4FE1-4D69-9B21-8A9BFADE2A2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.0.00:*:*:*:*:*:*:*","matchCriteriaId":"2B4A574A-5B2A-4769-B932-E1736564160A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.0.20:*:*:*:*:*:*:*","matchCriteriaId":"D9425C1F-5E6A-489A-9A8B-9156E79FEAA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.0.50:*:*:*:*:*:*:*","matchCriteriaId":"C968FBE9-191A-40B1-9A69-BF24511E40B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.0.60:*:*:*:*:*:*:*","matchCriteriaId":"D89047FD-39F0-4614-B1EC-D13BAF57405E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.0.70:*:*:*:*:*:*:*","matchCriteriaId":"6CDF2120-F341-4C2E-88C1-A6C76626BFF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.0.80:*:*:*:*:*:*:*","matchCriteriaId":"01DFC15C-3513-4E94-B46D-94FEA0D627FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.0.90:*:*:*:*:*:*:*","matchCriteriaId":"F4E068D3-F6B5-4102-B9FA-949E2FAA33D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.1.00:*:*:*:*:*:*:*","matchCriteriaId":"7E6BD551-EC6A-4C77-B9E7-B9CF3DC21021"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.1.10:*:*:*:*:*:*:*","matchCriteriaId":"01B0FE2D-02BC-4081-B172-64A74389C5F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.1.21:*:*:*:*:*:*:*","matchCriteriaId":"1615ACA2-32CC-48B7-AB5A-0BB0FDA7F190"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.1.30:*:*:*:*:*:*:*","matchCriteriaId":"F5ABAE43-0EEF-44D5-AB36-44DA54290122"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.1.40:*:*:*:*:*:*:*","matchCriteriaId":"AD33CE40-DFC9-4BDC-BF4F-9E0B268B8503"},{"vulnerable":true,"criteria":"cpe:2.3:a:webmin:webmin:1.1.50:*:*:*:*:*:*:*","matchCriteriaId":"8608F5A2-B6FA-43C6-9862-43DBAF01EB1C"}]}]}],"references":[{"url":"http://secunia.com/advisories/12488/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-15.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/77_e.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11122","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17293","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12488/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-15.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/77_e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17293","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1469","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to execute arbitrary code via format string specifiers in a command line argument that is passed directly to syslog."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peter_d._gray:sus:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FFD73615-E95D-4929-8383-E22F61D5D164"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_d._gray:sus:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FDFBC73F-6884-480E-B981-25A5AA8FE7AF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109517782910407&w=2","source":"cve@mitre.org"},{"url":"http://pdg.uow.edu.au/sus/CHANGES","source":"cve@mitre.org"},{"url":"http://security.lss.hr/index.php?page=details&ID=LSS-2004-09-01","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-17.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11176","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17361","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109517782910407&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pdg.uow.edu.au/sus/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.lss.hr/index.php?page=details&ID=LSS-2004-09-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1470","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snipsnap:snipsnap:0.5.2a:*:*:*:*:*:*:*","matchCriteriaId":"8F8F25A9-E2D2-4781-89C3-AF61C22167DD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109518773223511&w=2","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-23.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11180","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.snipsnap.org/space/start","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17364","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109518773223511&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-23.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.snipsnap.org/space/start","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1471","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorImpact":"Failed exploit attempts will likely cause a denial of service condition.","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.7:*:*:*:*:*:*:*","matchCriteriaId":"C9F7CA6E-7D45-46C9-A437-0D0C4D3F25CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.10.8:*:*:*:*:*:*:*","matchCriteriaId":"62135DD0-140D-42C2-9302-31B5E2DE1A4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11:*:*:*:*:*:*:*","matchCriteriaId":"D92B456C-5F8E-4DC2-940C-AE06B42DD3A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.1:*:*:*:*:*:*:*","matchCriteriaId":"37B53C85-AA0E-40DD-B477-058586197714"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.1_p1:*:*:*:*:*:*:*","matchCriteriaId":"D1D1234F-1BB0-432B-B7B7-A97E3ADD5561"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.2:*:*:*:*:*:*:*","matchCriteriaId":"6D472B97-F7C2-4973-9D71-AB3CF1F8774D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.3:*:*:*:*:*:*:*","matchCriteriaId":"9D0DCF26-59A8-46AC-99D7-97C203A0D702"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.4:*:*:*:*:*:*:*","matchCriteriaId":"B31BAACA-7518-48D2-ADEE-F59F4569D3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.5:*:*:*:*:*:*:*","matchCriteriaId":"9D2748A8-5047-4338-A08E-986497AE4B1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.6:*:*:*:*:*:*:*","matchCriteriaId":"525C4E91-2186-4D3A-9DF0-1C6A75A3F919"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.10:*:*:*:*:*:*:*","matchCriteriaId":"EB231E7F-1A6F-4A79-8ED2-F6CAD311A5A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.11:*:*:*:*:*:*:*","matchCriteriaId":"FF7105E4-25F8-4AE3-9EDD-D44BF3E17145"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.14:*:*:*:*:*:*:*","matchCriteriaId":"7C22BAF3-7B9C-4B2E-B5C6-1F37B896C301"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.15:*:*:*:*:*:*:*","matchCriteriaId":"4AFFAE96-873A-4253-BCC7-1049DA81D9CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.11.16:*:*:*:*:*:*:*","matchCriteriaId":"D1163535-583A-4504-BE7B-8919143CDF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.1:*:*:*:*:*:*:*","matchCriteriaId":"766053F7-A174-4716-BF49-76B50FC79FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.2:*:*:*:*:*:*:*","matchCriteriaId":"C7D2623F-167A-4976-B757-DAC4CCFAFE64"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.5:*:*:*:*:*:*:*","matchCriteriaId":"FAEC4477-D040-450E-A850-8B03C937A600"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.7:*:*:*:*:*:*:*","matchCriteriaId":"2848AA51-9AF1-448D-955F-50B5203F7229"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvs:cvs:1.12.8:*:*:*:*:*:*:*","matchCriteriaId":"7B66BE64-E340-4777-B877-483FEAA66988"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:1.3:*:*:*:*:*:*:*","matchCriteriaId":"46B96764-9241-4586-9FA5-77D8D8EBE3BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:*","matchCriteriaId":"48A4B336-2D5B-4D9B-AA87-E5266FED05BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:current:*:*:*:*:*:*:*","matchCriteriaId":"D342447B-5233-45FD-B1CF-8D84921402AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*","matchCriteriaId":"0702A32E-E577-403C-B4D9-15037D7100A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:1.1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C496B665-70DA-4B98-A5D1-E2935C0CE840"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F1F098C1-D09E-49B4-9B51-E84B6C4EA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"34797660-41F5-4358-B70F-2A40DE48F182"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"27C9E23D-AB82-4AE1-873E-C5493BB96AA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4054D69F-596F-4EB4-BE9A-E2478343F55A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"CA26ABBE-9973-45FA-9E9B-82170B751219"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7891202C-62AF-4590-9E5F-3514FDA2B38E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BF8F9B2F-E898-4F87-A245-32A41748587B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2:*:*:*:*:*:*:*","matchCriteriaId":"183667CA-6DF1-4BFB-AE32-9ABF55B7283A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"EBDDEC3F-52EB-4E1E-84C4-B472600059EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"B58E02AE-38B4-466E-BF73-2F0B80AF7BA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3928D5CF-6FC0-434C-8A80-ABDBF346C2C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"314BA420-4C74-4060-8ACE-D7A7C041CF2B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"2EAD7613-A5B3-4621-B981-290C7C6B8BA0"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"D1CA3337-9BEE-49C5-9EDE-8CDBE5580537"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EE38C50A-81FE-412E-9717-3672FAE6A6F4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.0:releng:*:*:*:*:*:*","matchCriteriaId":"A0A3F7B6-2878-40C0-B59C-EBA8D171D2F7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"263F3734-7076-4EA8-B4C0-F37CFC4E979E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0419DD66-FF66-48BC-AD3B-F6AFD0551E36"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C3518628-08E5-4AD7-AAF6-A4E38F1CDE2C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"B982342C-1981-4C55-8044-AFE4D87623DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"47E02BE6-4800-4940-B269-385B66AC5077"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5:stable:*:*:*:*:*:*","matchCriteriaId":"0EB09993-B837-4352-B09D-3656F62638A8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"7C283AD7-1C58-4CE8-A6CD-502FFE0B18BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:release:*:*:*:*:*:*","matchCriteriaId":"0361EA35-FBD7-4E8F-8625-C8100ED7BB7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:3.5.1:stable:*:*:*:*:*:*","matchCriteriaId":"29EAA113-2404-4ABB-826B-3AA2AA858D02"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D0A585A1-FF82-418F-90F8-072458DB7816"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:alpha:*:*:*:*:*:*","matchCriteriaId":"E3F7EB61-55A5-4776-B0E7-3508920A6CEA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.0:releng:*:*:*:*:*:*","matchCriteriaId":"A442DE97-4485-4D95-B95D-58947585E455"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1:*:*:*:*:*:*:*","matchCriteriaId":"AE31DFF8-06AB-489D-A0C5-509C090283B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3BE1E3D8-2BB1-4FFA-9BC9-7AF347D26190"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:release:*:*:*:*:*:*","matchCriteriaId":"1E8A6564-129A-4555-A5ED-6F65C56AE7B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.1.1:stable:*:*:*:*:*:*","matchCriteriaId":"237174A4-E030-4A0B-AD0B-5C463603EAA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:*:*:*:*:*:*:*","matchCriteriaId":"DF49BF03-C25E-4737-84D5-892895C86C58"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.2:stable:*:*:*:*:*:*","matchCriteriaId":"5D7F8F11-1869-40E2-8478-28B4E946D3CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:*:*:*:*:*:*:*","matchCriteriaId":"D2019E0E-426B-43AF-8904-1B811AE171E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:release:*:*:*:*:*:*","matchCriteriaId":"9062BAB5-D437-49BE-A384-39F62434B70B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:release_p38:*:*:*:*:*:*","matchCriteriaId":"3BA1504C-14FE-4C21-A801-944041F2946F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:releng:*:*:*:*:*:*","matchCriteriaId":"21B69535-4FB6-4FAD-AAA6-C790FF82EFAF"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.3:stable:*:*:*:*:*:*","matchCriteriaId":"6E53C673-9D6D-42C8-A502-033E1FC28D97"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:*:*:*:*:*:*:*","matchCriteriaId":"55C5FC1A-1253-4390-A4FC-573BB14EA937"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:release_p42:*:*:*:*:*:*","matchCriteriaId":"6F4AC452-6042-409D-8673-ACAD108EE3B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:releng:*:*:*:*:*:*","matchCriteriaId":"2FE1009B-371A-48E2-A456-935A1F0B7D0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.4:stable:*:*:*:*:*:*","matchCriteriaId":"C844A170-B5A7-4703-AF3B-67366D44EA8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:*:*:*:*:*:*:*","matchCriteriaId":"44308D13-D935-4FF8-AB52-F0E115ED1AD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release:*:*:*:*:*:*","matchCriteriaId":"3D41CB12-7894-4D25-80EC-23C56171D973"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:release_p32:*:*:*:*:*:*","matchCriteriaId":"9BCD9C12-EDAB-473F-9CC5-04F06B413720"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:releng:*:*:*:*:*:*","matchCriteriaId":"58EBC5C8-5CA8-4881-A036-179FDEBA3CA4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.5:stable:*:*:*:*:*:*","matchCriteriaId":"09789843-6A1A-4CDB-97E8-89E82B79DDB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C001822-FDF8-497C-AC2C-B59A00E9ACD2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release:*:*:*:*:*:*","matchCriteriaId":"118211EF-CED7-4EB5-9669-F54C8169D4AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:release_p20:*:*:*:*:*:*","matchCriteriaId":"58288F0F-B4CE-445C-AD93-DA73E3AD6FC3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:releng:*:*:*:*:*:*","matchCriteriaId":"CC96FBA9-6A65-4CC7-BE68-ADAF450ABE21"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6:stable:*:*:*:*:*:*","matchCriteriaId":"9A405AE2-ECC4-4BB0-80DD-4736394FB217"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.6.2:*:*:*:*:*:*:*","matchCriteriaId":"4AB4AD26-6AF2-4F3A-B602-F231FAABA73E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B86C77AB-B8FF-4376-9B4E-C88417396F3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:release:*:*:*:*:*:*","matchCriteriaId":"E5612FB0-8403-4A7E-B89A-D7BDFAC00078"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:release_p17:*:*:*:*:*:*","matchCriteriaId":"FA699BB4-94AA-40E6-A6B6-33E3D416CDA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:releng:*:*:*:*:*:*","matchCriteriaId":"AFDA151E-E614-4A24-A34D-B6D5309110CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.7:stable:*:*:*:*:*:*","matchCriteriaId":"A7818E11-1BEB-4DAA-BA7A-A278454BA4B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:*:*:*:*:*:*:*","matchCriteriaId":"441BE3A0-20F4-4972-B279-19B3DB5FA14D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:pre-release:*:*:*:*:*:*","matchCriteriaId":"09BFA20B-2F31-4246-8F74-63DF1DB884EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:release_p6:*:*:*:*:*:*","matchCriteriaId":"5F3B4BA2-8A61-4F9A-8E46-7FA80E7F5514"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.8:releng:*:*:*:*:*:*","matchCriteriaId":"2D33C6EF-DBE1-4943-83E4-1F10670DAC6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:*:*:*:*:*:*:*","matchCriteriaId":"00EAEA17-033A-4A50-8E39-D61154876D2F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:pre-release:*:*:*:*:*:*","matchCriteriaId":"4AE93D3D-34B4-47B7-A784-61F4479FF5A2"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.9:releng:*:*:*:*:*:*","matchCriteriaId":"E6288144-0CD7-45B6-B5A7-09B1DF14FBE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:*:*:*:*:*:*:*","matchCriteriaId":"9FFD9D1C-A459-47AD-BC62-15631417A32F"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:release:*:*:*:*:*:*","matchCriteriaId":"4ECDEC87-0132-46B6-BD9B-A94F9B669EAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:4.10:releng:*:*:*:*:*:*","matchCriteriaId":"43E84296-9B5C-4623-A2C4-431D76FC2765"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:*:*:*:*:*:*:*","matchCriteriaId":"61EBA52A-2D8B-4FB5-866E-AE67CE1842E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:alpha:*:*:*:*:*:*","matchCriteriaId":"3B13D898-C1B6-44B9-8432-7DDB8A380E9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:release_p14:*:*:*:*:*:*","matchCriteriaId":"51A612F6-E4EB-4E34-8F55-79E16C74758E"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.0:releng:*:*:*:*:*:*","matchCriteriaId":"5C19B266-8FE7-49ED-8678-2D522257491D"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE93350-92E6-4F5C-A14C-9993CFFDBCD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:alpha:*:*:*:*:*:*","matchCriteriaId":"15C4D826-A419-45F5-B91C-1445DB480916"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release:*:*:*:*:*:*","matchCriteriaId":"0D9F2B04-A1F2-4788-A53D-C8274A758DDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:release_p5:*:*:*:*:*:*","matchCriteriaId":"FEC7B38F-C6FB-4213-AE18-2D039A4D8E7A"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.1:releng:*:*:*:*:*:*","matchCriteriaId":"9A5309ED-D84F-4F52-9864-5B0FEEEE5022"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2:*:*:*:*:*:*:*","matchCriteriaId":"DD7C441E-444B-4DF5-8491-86805C70FB99"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:release:*:*:*:*:*:*","matchCriteriaId":"C9CCE8F3-84EE-4571-8AAA-BF2D132E9BD4"},{"vulnerable":true,"criteria":"cpe:2.3:o:freebsd:freebsd:5.2.1:releng:*:*:*:*:*:*","matchCriteriaId":"8E4BC012-ADE4-468F-9A25-261CD8055694"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:current:*:*:*:*:*:*:*","matchCriteriaId":"0370727F-1E37-4B82-8969-A2AC644632E8"}]}]}],"references":[{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:14.cvs.asc","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://security.e-matters.de/advisories/092004.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10499","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16365","source":"cve@mitre.org"},{"url":"ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:14.cvs.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://security.e-matters.de/advisories/092004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16365","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1472","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service (device freeze) via a fast UDP port scan on the WAN interface."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:firewall_vpn_appliance_100:*:*:*:*:*:*:*:*","matchCriteriaId":"E5851263-81A6-40AE-8486-E919D5279CC7"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:firewall_vpn_appliance_200:*:*:*:*:*:*:*:*","matchCriteriaId":"0E0D3199-365E-4D26-8D23-6492832EF096"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:firewall_vpn_appliance_200r:*:*:*:*:*:*:*:*","matchCriteriaId":"5081F382-CC20-4C7B-A3F8-08FAF31012D9"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security:320:*:*:*:*:*:*:*","matchCriteriaId":"EFFC0BF4-56EE-414C-8D45-3D2ACCBDC03A"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security:360:*:*:*:*:*:*:*","matchCriteriaId":"6B786C20-6C40-4DBE-AC24-D8B8E98FD6F5"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security:360r:*:*:*:*:*:*:*","matchCriteriaId":"38F65C12-9866-423F-8E59-FE905FE79043"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_isb_soho_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"7EACDC99-3B80-47D8-8BC4-A21CA0BC234B"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_pro100_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"99238614-0234-4550-84FB-8B1C7B8CE1E6"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_pro400_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"380A5A63-588D-4427-A513-147841B3FB57"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_pro800_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"CF31AD20-099E-4323-AE18-40C52878454A"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_pro800turbo_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"E9707BBB-8095-451D-80C7-BAC923BCB786"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_wavebase_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"4D072C1C-FC87-4986-9320-EFD9F58F192C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109588376426070&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12635","source":"cve@mitre.org"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/441078","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/10204","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11237","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17469","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109588376426070&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/441078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/10204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17469","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1473","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:firewall_vpn_appliance_100:*:*:*:*:*:*:*:*","matchCriteriaId":"E5851263-81A6-40AE-8486-E919D5279CC7"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:firewall_vpn_appliance_200:*:*:*:*:*:*:*:*","matchCriteriaId":"0E0D3199-365E-4D26-8D23-6492832EF096"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:firewall_vpn_appliance_200r:*:*:*:*:*:*:*:*","matchCriteriaId":"5081F382-CC20-4C7B-A3F8-08FAF31012D9"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security_320:*:*:*:*:*:*:*:*","matchCriteriaId":"391E553B-0A8C-4934-8B7C-DD6C0F9FF1A7"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security_360:*:*:*:*:*:*:*:*","matchCriteriaId":"DEDE5E45-0984-4F8B-8FCE-52E0FBA3DEEC"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security_360r:*:*:*:*:*:*:*:*","matchCriteriaId":"0896A267-AE1E-47C1-9C75-67A238727F45"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_isb_soho_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"7EACDC99-3B80-47D8-8BC4-A21CA0BC234B"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_pro100_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"99238614-0234-4550-84FB-8B1C7B8CE1E6"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_pro400_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"380A5A63-588D-4427-A513-147841B3FB57"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_pro800_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"CF31AD20-099E-4323-AE18-40C52878454A"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_pro800turbo_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"E9707BBB-8095-451D-80C7-BAC923BCB786"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_wavebase_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"4D072C1C-FC87-4986-9320-EFD9F58F192C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109588376426070&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12635","source":"cve@mitre.org"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/329230","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/10205","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11237","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17470","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109588376426070&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/329230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/10205","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17470","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1474","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:firewall_vpn_appliance_100:*:*:*:*:*:*:*:*","matchCriteriaId":"E5851263-81A6-40AE-8486-E919D5279CC7"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:firewall_vpn_appliance_200:*:*:*:*:*:*:*:*","matchCriteriaId":"0E0D3199-365E-4D26-8D23-6492832EF096"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:firewall_vpn_appliance_200r:*:*:*:*:*:*:*:*","matchCriteriaId":"5081F382-CC20-4C7B-A3F8-08FAF31012D9"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security_320:*:*:*:*:*:*:*:*","matchCriteriaId":"391E553B-0A8C-4934-8B7C-DD6C0F9FF1A7"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security_360:*:*:*:*:*:*:*:*","matchCriteriaId":"DEDE5E45-0984-4F8B-8FCE-52E0FBA3DEEC"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security_360r:*:*:*:*:*:*:*:*","matchCriteriaId":"0896A267-AE1E-47C1-9C75-67A238727F45"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_isb_soho_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"7EACDC99-3B80-47D8-8BC4-A21CA0BC234B"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_pro100_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"99238614-0234-4550-84FB-8B1C7B8CE1E6"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_pro400_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"380A5A63-588D-4427-A513-147841B3FB57"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_pro800_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"CF31AD20-099E-4323-AE18-40C52878454A"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_pro800turbo_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"E9707BBB-8095-451D-80C7-BAC923BCB786"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:nexland_wavebase_firewall_appliance:*:*:*:*:*:*:*:*","matchCriteriaId":"4D072C1C-FC87-4986-9320-EFD9F58F192C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109588376426070&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12635","source":"cve@mitre.org"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/173910","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/10206","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11237","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17471","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109588376426070&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/173910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/10206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17471","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1475","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1) long VideoCD vcd:// MRLs or (2) long subtitle lines."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:0.9.18:*:*:*:*:*:*:*","matchCriteriaId":"61348912-55CB-4789-A1ED-9CA7BF77ACB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"3544B231-8C98-42D1-A2B2-E62109BDD796"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc3:*:*:*:*:*:*:*","matchCriteriaId":"3C69FEB8-DFE6-4241-9341-D8A4929F0FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc4:*:*:*:*:*:*:*","matchCriteriaId":"283D1C9D-00E5-456E-8E82-52963B9A07F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc5:*:*:*:*:*:*:*","matchCriteriaId":"56D5CAA8-B9CF-4036-9BB1-B6096A0B7A62"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.99:*:*:*:*:*:*:*","matchCriteriaId":"5FEDBE74-5040-4E61-A34A-2BC36A2A129F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"7C8F4701-C5CC-4FBA-AFF6-5AB890306AC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc3:*:*:*:*:*:*:*","matchCriteriaId":"A5AF6387-6E37-4310-8893-7228DC01607E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc4:*:*:*:*:*:*:*","matchCriteriaId":"08B7236E-DCFB-40DB-BFC8-88F8491BBD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc5:*:*:*:*:*:*:*","matchCriteriaId":"EDF4423C-790B-411A-9AEC-2B36DA0140AA"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200408-18.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/375485/2004-09-02/2004-09-08/0","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11206","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://xinehq.de/index.php/security/XSA-2004-4","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17430","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17432","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200408-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/375485/2004-09-02/2004-09-08/0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://xinehq.de/index.php/security/XSA-2004-4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17430","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17432","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1476","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:0.9.18:*:*:*:*:*:*:*","matchCriteriaId":"61348912-55CB-4789-A1ED-9CA7BF77ACB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"3544B231-8C98-42D1-A2B2-E62109BDD796"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc3:*:*:*:*:*:*:*","matchCriteriaId":"3C69FEB8-DFE6-4241-9341-D8A4929F0FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc4:*:*:*:*:*:*:*","matchCriteriaId":"283D1C9D-00E5-456E-8E82-52963B9A07F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc5:*:*:*:*:*:*:*","matchCriteriaId":"56D5CAA8-B9CF-4036-9BB1-B6096A0B7A62"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:0.99:*:*:*:*:*:*:*","matchCriteriaId":"5FEDBE74-5040-4E61-A34A-2BC36A2A129F"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"7C8F4701-C5CC-4FBA-AFF6-5AB890306AC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc3:*:*:*:*:*:*:*","matchCriteriaId":"A5AF6387-6E37-4310-8893-7228DC01607E"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc4:*:*:*:*:*:*:*","matchCriteriaId":"08B7236E-DCFB-40DB-BFC8-88F8491BBD69"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc5:*:*:*:*:*:*:*","matchCriteriaId":"EDF4423C-790B-411A-9AEC-2B36DA0140AA"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:personal:*:*:*:*:*","matchCriteriaId":"D4940BE0-08CA-4B6C-ACA2-EE6EECE3E4B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:personal:*:*:*:*:*","matchCriteriaId":"F239BA8A-6B41-4B08-8C7C-25D235812C50"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:personal:*:*:*:*:*","matchCriteriaId":"3EA56868-ACA1-4C65-9FFB-A68129D2428A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.2:*:personal:*:*:*:*:*","matchCriteriaId":"3BEE15E9-9194-4E37-AB3B-66ECD5AC9E11"}]}]}],"references":[{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/375485/2004-09-02/2004-09-08/0","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11206","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://xinehq.de/index.php/security/XSA-2004-4","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17431","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/375485/2004-09-02/2004-09-08/0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://xinehq.de/index.php/security/XSA-2004-4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1477","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Management Console in JRun 4.0 allows remote attackers to execute arbitrary web script or HTML and possibly hijack a user's session."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4361030D-230A-45CD-AC84-9603DADC75BC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109621995623823&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12638/","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/668206","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11245","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17483","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109621995623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12638/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/668206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17483","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1478","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:cosminexus_enterprise:01_01_1:*:enterprise:*:*:*:*:*","matchCriteriaId":"891FA9C7-424C-4362-AEF7-E7A56FA7BF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:cosminexus_enterprise:01_01_1:*:standard:*:*:*:*:*","matchCriteriaId":"9FB3092D-DC29-440E-8A62-B0352AECDC9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:cosminexus_enterprise:01_02_2:*:enterprise:*:*:*:*:*","matchCriteriaId":"1AA9C36C-CF0A-46D1-B74D-BF33BEFABADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:cosminexus_enterprise:01_02_2:*:standard:*:*:*:*:*","matchCriteriaId":"761C4CAD-4364-4BD9-BD4B-BC430D428D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:cosminexus_server:web_01-01_1:*:*:*:*:*:*:*","matchCriteriaId":"B580CCB0-BDBC-4048-AA4C-E2330801E6F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:cosminexus_server:web_01-01_2:*:*:*:*:*:*:*","matchCriteriaId":"C5E388BD-09D5-494B-98DD-DF30EA9F26A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B79C39FD-D9A0-4CA4-BF37-D94D9F20E4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:*:*:*:*:*:*","matchCriteriaId":"B2C65BE0-32FA-4D51-AA2B-E7D630470D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:j2ee_application_server:*:*:*:*:*","matchCriteriaId":"5E448558-A9F6-4506-AA6D-688C73CEC61E"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.0:*:*:*:*:*:*:*","matchCriteriaId":"96D6C1D6-F9AF-4CF0-9F80-AB2C20C7615C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:3.1:*:*:*:*:*:*:*","matchCriteriaId":"462BA0C4-D941-4C58-86DF-BF76663723F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4361030D-230A-45CD-AC84-9603DADC75BC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109621995623823&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12638/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/584958","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11245","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17481","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109621995623823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12638/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/584958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17481","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1479","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2023-11-07T01:56:55.597","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-0928.  Reason: This candidate is a duplicate of CVE-2004-0928.  Notes: All CVE users should reference CVE-2004-0928 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-1480","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the management station in HP StorageWorks Command View XP 1.8B and earlier allows remote attackers to bypass access restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.7a:*:xp:*:*:*:*:*","matchCriteriaId":"E091D1AB-327D-4047-A293-1575C989003D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.7b:*:xp:*:*:*:*:*","matchCriteriaId":"12197DA1-C6DC-4B37-A3F7-71391E6A3F1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.8:*:xp:*:*:*:*:*","matchCriteriaId":"9A970A8E-823C-4E5C-80DB-7A8E6AF811DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.8a:*:xp:*:*:*:*:*","matchCriteriaId":"AA21B56F-58FF-4C7C-BA92-C5D7E2D6533C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.8b:*:xp:*:*:*:*:*","matchCriteriaId":"7F750E73-C8F2-4333-A217-E27529F53EB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.11:*:xp:*:*:*:*:*","matchCriteriaId":"9FA9CB47-6C3C-4A39-A6C2-802BD21A83BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.11.1:*:xp:*:*:*:*:*","matchCriteriaId":"AADA99B3-E68D-4BF6-AE8C-C6CB6499325B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.11.2:*:xp:*:*:*:*:*","matchCriteriaId":"DC25E49E-B2FA-46AB-BAB5-7D51F2B95954"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.30.00:*:xp:*:*:*:*:*","matchCriteriaId":"50E6E41F-D4F2-474C-8BDE-13ECCC6E6C07"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.40.01:*:xp:*:*:*:*:*","matchCriteriaId":"8A4ADC52-6BE8-4E31-B1E6-DF563D2595BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.40.04:*:xp:*:*:*:*:*","matchCriteriaId":"7003DFEF-0624-4CF7-AE88-C2BAF09671AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.51.00:*:xp:*:*:*:*:*","matchCriteriaId":"BC5033BE-37C6-4F2E-8C8A-DEED32EF0E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.52.00:*:xp:*:*:*:*:*","matchCriteriaId":"F6EBB78D-7E91-427F-919C-56B87248A597"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.53.00:*:xp:*:*:*:*:*","matchCriteriaId":"D0686CFD-85FC-4F02-8C0B-AAE22BB400D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.53.01a:*:xp:*:*:*:*:*","matchCriteriaId":"652AC34E-4E62-4C70-B741-712A2A727649"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.53.05a:*:xp:*:*:*:*:*","matchCriteriaId":"04ABA722-95BD-49E0-95D9-C4C4131DBE27"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:storageworks_command_view:1.60.00:*:xp:*:*:*:*:*","matchCriteriaId":"4405CA78-DBF2-4F35-8BCD-BF042E2517FC"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBST01071","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011407","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11249","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17490","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBST01071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17490","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1481","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:helix_player:1.0:*:*:*:*:linux:*:*","matchCriteriaId":"F40AA63E-932B-45B4-BA21-F22AEF66D6DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CF6535A6-6647-4E60-B5AA-24DFC06360AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:9.0.0.288:*:*:*:*:macos:*:*","matchCriteriaId":"E6C291C3-9F2E-4197-91EB-C5D845E595D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:9.0.0.297:*:*:*:*:macos:*:*","matchCriteriaId":"D2866B30-6EF7-4941-8846-73F82A04D395"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:-:*:*:*:enterprise:*:*:*","matchCriteriaId":"16C148F6-427A-4D90-966E-9A6BECEAEF9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4E6051B4-1B15-44C0-B2CD-5504E68C60F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:mac_os_x:*:*","matchCriteriaId":"50511368-4765-489B-B2ED-8214887BCB37"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:unix:*:*","matchCriteriaId":"28E2C43D-3BF4-44FA-A6D2-275BF5FB33DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:*:*:*","matchCriteriaId":"CD49D16C-B0AC-4228-9984-010661596232"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:*:*:linux:*:*","matchCriteriaId":"ADD8B4E8-7315-4FC4-A339-6D65CC32A5DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:de:*:*:*:*","matchCriteriaId":"EF2A171E-6E39-4FCC-88CC-655D18232FCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:en:*:*:*:*","matchCriteriaId":"4EBB6E97-C8C0-49A7-BCDA-794C4986BAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:ja:*:*:*:*","matchCriteriaId":"0C9031C2-95D1-46D0-965A-F4BAA76FB29F"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:beta:*:*:*:*:*:*","matchCriteriaId":"B4B6C4B6-9031-451B-B58B-45DA88173E0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:beta:*:*:*:mac_os_x:*:*","matchCriteriaId":"28D7D8D5-42BD-42E3-B193-CF18CD40991A"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*","matchCriteriaId":"01513F87-049E-46A9-A573-A7AF27EB30C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*","matchCriteriaId":"348F3214-E5C2-4D39-916F-1B0263D13F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016:beta:*:*:*:*:*:*","matchCriteriaId":"A75F4FE1-F3DA-493F-87B5-E1D2410949A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*","matchCriteriaId":"91278EFD-0285-4389-9C53-50FE225C3C19"}]}]}],"references":[{"url":"http://marc.info/?l=ntbugtraq&m=109708374115061&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/12672","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/11309","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.service.real.com/help/faq/security/040928_player/EN/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17549","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=ntbugtraq&m=109708374115061&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/12672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/11309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.service.real.com/help/faq/security/040928_player/EN/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1482","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The sbuf_getmsg function in BNC incorrectly handles backspace characters, which could allow remote attackers to bypass authentication and gain access to arbitrary scripts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bnc:bnc:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E6B6FD0A-1812-4E42-A7C1-C0ABA923B71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bnc:bnc:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"75F5F595-CB3D-4B7A-9A73-5D32E0670864"},{"vulnerable":true,"criteria":"cpe:2.3:a:bnc:bnc:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"336D2561-13B5-4E0C-9159-30AFD9D3D22B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bnc:bnc:2.6:*:*:*:*:*:*:*","matchCriteriaId":"C6B4983A-9ADA-414F-B965-F0E44D731AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:bnc:bnc:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"87258990-17F6-4515-8EC8-05C9D9BEC75C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bnc:bnc:2.8.8:*:*:*:*:*:*:*","matchCriteriaId":"CB3C3052-8585-4E21-B982-733637A7147F"}]}]}],"references":[{"url":"http://secunia.com/advisories/12770/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-13.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gotbnc.com/changes.html#2.8.9","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10596","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11355","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17672","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12770/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-13.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gotbnc.com/changes.html#2.8.9","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17672","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1483","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.0 have unknown attack vectors and unknown impact."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:clientless_vpn_gateway_4400:5.0:*:*:*:*:*:*:*","matchCriteriaId":"11465DCA-72E5-40E9-9D8E-B3CD470C47E9"}]}]}],"references":[{"url":"ftp://ftp.symantec.com/public/english_us_canada/products/sym_clientless_vpn/sym_clientless_vpn_5/updates/hf3-readme.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12254/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/760256","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/8508","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10903","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16933","source":"cve@mitre.org"},{"url":"ftp://ftp.symantec.com/public/english_us_canada/products/sym_clientless_vpn/sym_clientless_vpn_5/updates/hf3-readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12254/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/760256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/8508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10903","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16933","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1484","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:socat:socat:1.0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"8285A2C9-7D6D-4021-8933-B7B6D475C82D"},{"vulnerable":true,"criteria":"cpe:2.3:a:socat:socat:1.0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"298F44AA-8FE6-4691-BA54-EA2B8DF324BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:socat:socat:1.0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"B24C6460-03B3-4F9E-851A-17BCC3C89C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:socat:socat:1.0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"D67A37A3-80B0-4303-B989-55CE94055E23"},{"vulnerable":true,"criteria":"cpe:2.3:a:socat:socat:1.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"B1F84E40-E5F6-4D3C-ABDA-AC08E280D94A"},{"vulnerable":true,"criteria":"cpe:2.3:a:socat:socat:1.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"ACCD96D5-3C45-4A2D-AD04-B8025D46E0D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:socat:socat:1.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"C7EB6710-19BA-439E-A2B2-F942B0D7A16D"},{"vulnerable":true,"criteria":"cpe:2.3:a:socat:socat:1.3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"1C79DBCF-C2F9-4ADC-8FF8-E05281380BA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:socat:socat:1.3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CE937BED-F23A-44E8-AF12-1C1F2F650036"},{"vulnerable":true,"criteria":"cpe:2.3:a:socat:socat:1.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A0CE81D4-AAA5-4003-9150-27B688141247"},{"vulnerable":true,"criteria":"cpe:2.3:a:socat:socat:1.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A698DB94-1464-4918-AFC3-B60ACD58E007"},{"vulnerable":true,"criteria":"cpe:2.3:a:socat:socat:1.3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"1F7C6A33-4CFD-460C-BBD5-3C9319617A9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:socat:socat:1.3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"44E060A9-3CDF-46E7-85F4-F39CF2BC5FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:socat:socat:1.4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8094E017-A24C-44B6-A3BE-FF81659D290B"},{"vulnerable":true,"criteria":"cpe:2.3:a:socat:socat:1.4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BE5B9D8-DBCD-457A-A0D9-A1A7DD960116"},{"vulnerable":true,"criteria":"cpe:2.3:a:socat:socat:1.4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"795CDC03-4C48-42A6-A69C-DCFB4C2122B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/12936/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dest-unreach.org/socat/advisory/socat-adv-1.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-26.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.nosystem.com.ar/advisories/advisory-07.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11505","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17822","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12936/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.dest-unreach.org/socat/advisory/socat-adv-1.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-26.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.nosystem.com.ar/advisories/advisory-07.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17822","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1485","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:gnu:inetutils:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9CE143BD-7C89-45A4-B7AE-D2426EE4DF07"},{"vulnerable":false,"criteria":"cpe:2.3:a:tftp:tftp:0.29:*:*:*:*:*:*:*","matchCriteriaId":"C6BD5BFB-84AA-4F7C-B026-DB28CDDD6111"},{"vulnerable":false,"criteria":"cpe:2.3:a:tftp:tftp:0.32:*:*:*:*:*:*:*","matchCriteriaId":"96A26311-B437-470B-91DB-1F2DFAD2712E"},{"vulnerable":false,"criteria":"cpe:2.3:a:tftp:tftp:0.34:*:*:*:*:*:*:*","matchCriteriaId":"D661C2C8-6796-4204-9565-A803D11A945E"},{"vulnerable":false,"criteria":"cpe:2.3:a:tftp:tftp:0.36:*:*:*:*:*:*:*","matchCriteriaId":"D04A7504-5503-446B-9C17-F08469DBA765"},{"vulnerable":false,"criteria":"cpe:2.3:a:tftp:tftp:0.38:*:*:*:*:*:*:*","matchCriteriaId":"7C6C354A-D057-4DB1-AE43-8BB2A2FE1464"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109882085912915&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11527","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17878","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109882085912915&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11527","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1486","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Serviceguard A.11.13 through A.11.16.00 and Cluster Object Manager A.01.03 and B.01.04 through B.03.00.01 on HP-UX, Serviceguard A.11.14.04 and A.11.15.04 and Cluster Object Manager B.02.01.02 and B.02.02.02 on HP Linux, allow remote attackers to gain privileges via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:hp:cluster_object_manager:a.01.03:*:*:*:*:*:*:*","matchCriteriaId":"DFCE7D28-9464-4CED-B636-C6D37FA61B62"},{"vulnerable":false,"criteria":"cpe:2.3:a:hp:cluster_object_manager:b.01.04:*:*:*:*:*:*:*","matchCriteriaId":"D41AF057-15C0-428E-A5AB-9D8B35E05DBA"},{"vulnerable":false,"criteria":"cpe:2.3:a:hp:cluster_object_manager:b.02.01.02:*:*:*:*:*:*:*","matchCriteriaId":"BBD730CE-9140-46A2-8043-0F94B1812451"},{"vulnerable":false,"criteria":"cpe:2.3:a:hp:cluster_object_manager:b.02.02.00:*:*:*:*:*:*:*","matchCriteriaId":"17B2350B-3CAC-471C-8EB8-BB63748C13D0"},{"vulnerable":false,"criteria":"cpe:2.3:a:hp:cluster_object_manager:b.02.02.02:*:*:*:*:*:*:*","matchCriteriaId":"3B0E460D-DAC2-4A90-A5CF-A36E9D7DCD79"},{"vulnerable":false,"criteria":"cpe:2.3:a:hp:cluster_object_manager:b.03.00.00:*:*:*:*:*:*:*","matchCriteriaId":"4B1009BA-DB94-411E-94F6-409AF3A0FBCC"},{"vulnerable":false,"criteria":"cpe:2.3:a:hp:cluster_object_manager:b.03.00.01:*:*:*:*:*:*:*","matchCriteriaId":"DEA8D1B0-FBD6-4532-BC20-C33C16655B35"},{"vulnerable":false,"criteria":"cpe:2.3:a:hp:serviceguard:a.11.13:*:*:*:*:*:*:*","matchCriteriaId":"81D00B28-2D88-47B8-9B52-9DD300377513"},{"vulnerable":false,"criteria":"cpe:2.3:a:hp:serviceguard:a.11.14:*:*:*:*:*:*:*","matchCriteriaId":"6BFA7DF6-8D07-4553-ABE5-ADD292D5DE75"},{"vulnerable":false,"criteria":"cpe:2.3:a:hp:serviceguard:a.11.14.04:*:linux:*:*:*:*:*","matchCriteriaId":"84A567B3-35AB-47B8-9454-A1D430FA660C"},{"vulnerable":false,"criteria":"cpe:2.3:a:hp:serviceguard:a.11.15.00:*:*:*:*:*:*:*","matchCriteriaId":"E5A4F59F-2B12-412C-BA17-8FFE706A76CF"},{"vulnerable":false,"criteria":"cpe:2.3:a:hp:serviceguard:a.11.15.04:*:linux:*:*:*:*:*","matchCriteriaId":"A09308FA-A4D5-4990-823D-94C666C6B7F5"},{"vulnerable":false,"criteria":"cpe:2.3:a:hp:serviceguard:a.11.16.00:*:*:*:*:*:*:*","matchCriteriaId":"FC2E0DDD-7FC7-4C08-BC8F-DF6C67D90F00"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109893515704267&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12946","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11507","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17867","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109893515704267&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17867","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1489","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remote attackers to gain sensitive information, such as user names and the installation directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-668"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"7.54","matchCriteriaId":"BFE75E76-E20D-47A4-9603-0AF46F733AEF"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029044.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.opera.com/linux/changelogs/754u1/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029044.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.opera.com/linux/changelogs/754u1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-1490","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spaces (ASCII character code 160) in the (1) Content-Disposition or (2) Content-Type headers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"7.54","matchCriteriaId":"BFE75E76-E20D-47A4-9603-0AF46F733AEF"}]}]}],"references":[{"url":"http://secunia.com/advisories/12981","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://secunia.com/secunia_research/2004-19/advisory/","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.opera.com/linux/changelogs/754u1/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/11883","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18423","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/12981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://secunia.com/secunia_research/2004-19/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.opera.com/linux/changelogs/754u1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/11883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18423","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1491","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a shortcut or launcher that contains an Exec entry."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"7.54","matchCriteriaId":"BFE75E76-E20D-47A4-9603-0AF46F733AEF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*","matchCriteriaId":"647BA336-5538-4972-9271-383A0EC9378E"},{"vulnerable":true,"criteria":"cpe:2.3:o:kde:kde:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"D17407A2-089E-43A5-9BD5-EFF966F5CC16"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:*","matchCriteriaId":"02EE2D72-B1E6-4380-80B0-E40A23DDD115"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"111575DE-98A2-4C54-BDE1-CACC74D22B35"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1976D15D-9EE6-4A49-B59F-34F0505FD5BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:4.0:*:*:*:*:*:*:*","matchCriteriaId":"962FC8D7-BE5D-4E7D-9ADC-511681C593BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:4.2:*:*:*:*:*:*:*","matchCriteriaId":"451453AC-65FF-4E3B-9AC1-2DDB2E2182E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7716120D-5110-42B0-A574-9AA2AC8D3C32"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:4.4:*:*:*:*:*:*:*","matchCriteriaId":"CB4C8426-CAF2-4366-94C0-1BA1C544FB6F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"5CC7D746-B98B-4FAF-B816-57222759A344"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.0:*:*:*:*:*:*:*","matchCriteriaId":"830D48B8-D21D-4D31-99A1-20C231804DBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.1:*:*:*:*:*:*:*","matchCriteriaId":"5C0BBDD2-9FF9-4CB7-BCAF-D4AF15DC2C7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.2:*:*:*:*:*:*:*","matchCriteriaId":"D1C826AA-6E2F-4DAC-A7A2-9F47729B5DA5"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:5.3:*:*:*:*:*:*:*","matchCriteriaId":"BCC94EF9-5872-402F-B2FC-06331A924BB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.0:*:*:*:*:*:*:*","matchCriteriaId":"F163E145-09F7-4BE2-9B46-5B6713070BAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:*:*:*:*:*:*:*","matchCriteriaId":"124E1802-7984-45ED-8A92-393FC20662FD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C7F08806-9458-439A-8EAE-2553122262ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.2:*:*:*:*:*:*:*","matchCriteriaId":"1B67020A-6942-4478-B501-764147C4970D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:*:*:*:*:*:*:*","matchCriteriaId":"0AD0FF64-05DF-48C2-9BB5-FD993121FB2E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.3:alpha:*:*:*:*:*:*","matchCriteriaId":"76159C25-0760-47CB-AFCE-28306CDEA830"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:*:*:*:*:*:*:*","matchCriteriaId":"7786607A-362E-4817-A17E-C76D6A1F737D"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:6.4:alpha:*:*:*:*:*:*","matchCriteriaId":"49BC7C7E-046C-4186-822E-9F3A2AD3577B"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"C9E7D75A-333E-4C63-9593-F64ABA5D1CE3"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.0:alpha:*:*:*:*:*:*","matchCriteriaId":"62CAE5B0-4D46-4A93-A343-C8E9CB574C62"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:*:*:*:*:*:*:*","matchCriteriaId":"819868A7-EB1E-4CA9-8D71-72F194E5EFEB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.1:alpha:*:*:*:*:*:*","matchCriteriaId":"B5E71DA3-F4A0-46AF-92A2-E691C7A65528"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.2:*:*:*:*:*:*:*","matchCriteriaId":"0519FF7D-363E-4530-9E63-6EA3E88432DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"FAE3FF4F-646F-4E05-A08A-C9399DEF60F1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"}]}]}],"references":[{"url":"http://lists.suse.com/archive/suse-security-announce/2005-Mar/0007.html","source":"cve@mitre.org","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13447/","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","Vendor Advisory"]},{"url":"http://www.opera.com/linux/changelogs/754u2/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/11901","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.zone-h.org/advisories/read/id=6503","source":"cve@mitre.org","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18457","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2005-Mar/0007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13447/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","Vendor Advisory"]},{"url":"http://www.opera.com/linux/changelogs/754u2/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/11901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.zone-h.org/advisories/read/id=6503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18457","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1492","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (game exit) via a data packet that contains a large size specifier, which causes a large memory allocation to fail."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quicksilver:master_of_orion_iii:*:*:*:*:*:*:*:*","versionEndIncluding":"1.2.5","matchCriteriaId":"32E57A7F-55F6-4937-90D4-4EF693352E6A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109889705116038&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11550","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17908","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109889705116038&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1493","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (server crash) via multiple connections with long nicknames, possibly triggering a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:quicksilver:master_of_orion_iii:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"EEC618E3-EB8C-4DF4-A213-33EF09AED0B1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109889705116038&w=2","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.nl/0410-advisories/masterOrionIII.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/13008","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11550","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17884","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109889705116038&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.nl/0410-advisories/masterOrionIII.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/13008","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1494","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the Screen Fetch option in XDICT 2002 through 2005 allows remote attackers to cause a denial of service ( CPU consumption or application exit) and possibly execute arbitrary code via a long string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kingsoft:xdict:2002:*:*:*:*:*:*:*","matchCriteriaId":"9B5114AE-2944-49EC-8F1A-325581619672"},{"vulnerable":true,"criteria":"cpe:2.3:a:kingsoft:xdict:2003:*:*:*:*:*:*:*","matchCriteriaId":"0328C112-B67E-408D-A59E-526344E33AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:kingsoft:xdict:2004:*:*:*:*:*:*:*","matchCriteriaId":"14590818-B5FF-4EA5-B773-A0D846C384E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:kingsoft:xdict:2005:*:*:*:*:*:*:*","matchCriteriaId":"915A46ED-23BD-415D-810F-D1956922464A"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028241.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109933696831725&w=2","source":"cve@mitre.org"},{"url":"http://secway.org/Advisory/Ad20041026EN.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17929","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028241.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109933696831725&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secway.org/Advisory/Ad20041026EN.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1495","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service (application crash) via a corrupt ZIP archive."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:2.90:*:*:*:*:*:*:*","matchCriteriaId":"0FFE81D1-EE81-415D-ACE0-F97AF38BE007"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"53BDA79B-B1CC-479C-A1DA-41DDDE098EDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.10:*:*:*:*:*:*:*","matchCriteriaId":"16A1E0B7-020F-4110-9603-58CA8CEB7581"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.10_beta3:*:*:*:*:*:*:*","matchCriteriaId":"AE627C32-9F4B-4D36-AC4B-5D01A47BFD88"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.10_beta5:*:*:*:*:*:*:*","matchCriteriaId":"3366C2D1-F30A-413B-94A2-7DBDACC083EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.11:*:*:*:*:*:*:*","matchCriteriaId":"8585089C-A6B5-4BFE-BEA3-133B94F24F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.20:*:*:*:*:*:*:*","matchCriteriaId":"C1011521-AEF2-40EB-B671-66B20FF01CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:rarlab:winrar:3.40:*:*:*:*:*:*:*","matchCriteriaId":"9843D850-DC4C-49D5-AAEB-EF75FB54F08C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109941351432699&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13070","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.rarlabs.com/rarnew.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11581","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17937","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109941351432699&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13070","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.rarlabs.com/rarnew.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1496","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary files via a URL containing (1) \"..\\\" (dot dot backslash), (2) \"../\" (dot dot slash), (3) \"/%2E%2E%5C\" (encoded dot dot backslash), or (4) \"%2E%2E%2F\" (encoded dot dot slash)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minihttpserver.net:web_forums_server:1.6:*:*:*:*:*:*:*","matchCriteriaId":"C0D90953-C180-449F-A913-98B43225DB4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:minihttpserver.net:web_forums_server:2.0_power_pack:*:*:*:*:*:*:*","matchCriteriaId":"1AB534E2-F4EC-45EA-BECA-96CB2A38F912"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109943267328552&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109943267328552&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1497","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:minihttpserver.net:web_forums_server:1.6:*:*:*:*:*:*:*","matchCriteriaId":"C0D90953-C180-449F-A913-98B43225DB4D"},{"vulnerable":false,"criteria":"cpe:2.3:a:minihttpserver.net:web_forums_server:2.0_power_pack:*:*:*:*:*:*:*","matchCriteriaId":"1AB534E2-F4EC-45EA-BECA-96CB2A38F912"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109943267328552&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109943267328552&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1498","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL commands via the messageToUserAccNum parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.10:*:*:*:*:*:*:*","matchCriteriaId":"A1AAC076-4BB2-41BE-B654-E98C65E7F7FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.11:*:*:*:*:*:*:*","matchCriteriaId":"7AE2D214-3338-4DD7-BE02-97DE6A98184D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E8BBF970-7974-4117-86C1-2202E0776342"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.13:*:*:*:*:*:*:*","matchCriteriaId":"B3B57477-3D9D-4EFF-BA2B-D799F62860EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.14:*:*:*:*:*:*:*","matchCriteriaId":"0BA40BE4-F268-4F5B-BAC7-6D0A09910D8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0A19AA0F-AEB5-43D8-9707-390B46FDC3F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.16:*:*:*:*:*:*:*","matchCriteriaId":"40952A2C-0F6D-4567-8A96-846A61F06764"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AB1AEF02-06CF-4664-8775-2BCC49E64081"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.18:*:*:*:*:*:*:*","matchCriteriaId":"37C03BB7-A6CE-42D8-868F-200B379F5017"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.19:*:*:*:*:*:*:*","matchCriteriaId":"9991CD95-615D-4B7F-A703-FDADEBE8B201"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109943858026542&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13079","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.hat-squad.com/en/000077.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11586","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109943858026542&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.hat-squad.com/en/000077.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11586","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1499","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary web script or HTML via the Subject field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.10:*:*:*:*:*:*:*","matchCriteriaId":"A1AAC076-4BB2-41BE-B654-E98C65E7F7FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.11:*:*:*:*:*:*:*","matchCriteriaId":"7AE2D214-3338-4DD7-BE02-97DE6A98184D"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.12:*:*:*:*:*:*:*","matchCriteriaId":"E8BBF970-7974-4117-86C1-2202E0776342"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.13:*:*:*:*:*:*:*","matchCriteriaId":"B3B57477-3D9D-4EFF-BA2B-D799F62860EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.14:*:*:*:*:*:*:*","matchCriteriaId":"0BA40BE4-F268-4F5B-BAC7-6D0A09910D8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.15:*:*:*:*:*:*:*","matchCriteriaId":"0A19AA0F-AEB5-43D8-9707-390B46FDC3F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.16:*:*:*:*:*:*:*","matchCriteriaId":"40952A2C-0F6D-4567-8A96-846A61F06764"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.17:*:*:*:*:*:*:*","matchCriteriaId":"AB1AEF02-06CF-4664-8775-2BCC49E64081"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.18:*:*:*:*:*:*:*","matchCriteriaId":"37C03BB7-A6CE-42D8-868F-200B379F5017"},{"vulnerable":true,"criteria":"cpe:2.3:a:webhost_automation:helm_control_panel:3.1.19:*:*:*:*:*:*:*","matchCriteriaId":"9991CD95-615D-4B7F-A703-FDADEBE8B201"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109943858026542&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13079","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.hat-squad.com/en/000077.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11586","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17943","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109943858026542&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13079","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.hat-squad.com/en/000077.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17943","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1500","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freeform_interactive:purge_jihad:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D4ACD5B3-DE97-4B33-B037-32BD88E8F7CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:alien_versus_predator:2.1.0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"84823569-66F9-4DA3-9057-EA533296339C"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:blood:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"13837EC6-4004-4296-945A-6BCA602813D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:contract_jack:1.1:*:*:*:*:*:*:*","matchCriteriaId":"2A21049A-D71F-4FD6-879A-A00A5AC206B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:global_operations:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2195B51E-88F0-4620-BD20-3732EEC510DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:global_operations:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CFE32538-BC3B-41DE-B17B-1AA486A6177F"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:kiss_psycho_circus:1.13:*:*:*:*:*:*:*","matchCriteriaId":"4D0F26D9-0D61-456D-8EB6-60E1F2D96BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:legends_of_might_and_magic:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0C77EF66-2F82-47D3-8CA2-5EA4B2D24C91"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:no_one_lives_forever:1.0.004:*:*:*:*:*:*:*","matchCriteriaId":"1971BF28-58C0-4093-AB32-760F7F6A5763"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:no_one_lives_forever:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"76B29B56-4B79-42A8-BDCA-6E547B664661"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:sanity:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4700380E-A423-4B2D-9286-9AD8FBE1C612"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:shogo:2.2:*:*:*:*:*:*:*","matchCriteriaId":"90F3AC85-0999-4421-95A6-E0A74C367C22"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:tron:2.0.1.42:*:*:*:*:*:*:*","matchCriteriaId":"B8CC61B7-7187-4D76-8F56-FFC693BF765C"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/lithfs-adv.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109969394601331&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13116/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/17317","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11610","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17972","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/lithfs-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109969394601331&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13116/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/17317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11610","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17972","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1501","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) by sending a POST request with a large Content-Length value, then disconnecting without sending that amount of data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:software602:602lan_suite:*:*:*:*:*:*:*:*","versionEndIncluding":"2004.0.04.0909","matchCriteriaId":"9700C20F-E11D-447C-936A-46DB998C4CBB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109976745017459&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17977","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109976745017459&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17977","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1502","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (socket exhaustion) via a Telnet request to an IP address of the proxy's network interface, which causes a loop."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:software602:602lan_suite:*:*:*:*:*:*:*:*","versionEndIncluding":"2004.0.04.0909","matchCriteriaId":"9700C20F-E11D-447C-936A-46DB998C4CBB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109976745017459&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17979","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109976745017459&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1503","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service (Java exception and failed DNS requests) via a large number of DNS requests, which causes the xid variable to wrap around and become negative."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"63978872-E797-4F13-B0F9-98CB67D0962A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"133A7B66-E0B3-4867-A5A4-3C54D6C0C8ED"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109994063331773&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13142","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11619","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17990","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109994063331773&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17990","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1504","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain sensitive information via a blank show parameter, which reveals the installation path in an error message, as demonstrated using index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:salims_softhouse:jaf_cms:3.0:rc:*:*:*:*:*:*","matchCriteriaId":"0FDEF8C5-7AD0-460B-9DE0-86776EA856F4"}]}]}],"references":[{"url":"http://echo.or.id/adv/adv08-y3dips-2004.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110004150430309&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18006","source":"cve@mitre.org"},{"url":"http://echo.or.id/adv/adv08-y3dips-2004.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110004150430309&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1505","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute PHP code via a .. (dot dot) in the show parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:salims_softhouse:jaf_cms:3.0:rc:*:*:*:*:*:*","matchCriteriaId":"0FDEF8C5-7AD0-460B-9DE0-86776EA856F4"}]}]}],"references":[{"url":"http://echo.or.id/adv/adv08-y3dips-2004.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110004150430309&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13104","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11627","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17983","source":"cve@mitre.org"},{"url":"http://echo.or.id/adv/adv08-y3dips-2004.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110004150430309&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17983","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1506","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar allow remote attackers to inject arbitrary web script via (1) view_entry.php, (2) view_d.php, (3) usersel.php, (4) datesel.php, (5) trailer.php, or (6) styles.php, as demonstrated using img srg tags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"AE2EABBA-AE17-44B6-9789-6E24D794A3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"25AD3E54-46F8-4DE0-86CE-D5D3FF079787"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"3857C666-0421-4EC8-80F4-2A62D44A1DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"6E9BB322-7C8F-4ACB-8809-2A96C0F9D65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.19:*:*:*:*:*:*:*","matchCriteriaId":"9C4AA766-E1FC-4AEA-A2C6-9998A395F978"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.20:*:*:*:*:*:*:*","matchCriteriaId":"83918F72-9289-4C14-AC44-46A848DD0487"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.21:*:*:*:*:*:*:*","matchCriteriaId":"8B1BCC1F-3031-49CB-95EF-C733D0A24EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.22:*:*:*:*:*:*:*","matchCriteriaId":"EAC57185-15AA-414B-9779-AF89170B9E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.23:*:*:*:*:*:*:*","matchCriteriaId":"2BCFF5B6-324C-43EC-AAF3-EBBA23C2C583"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.24:*:*:*:*:*:*:*","matchCriteriaId":"C7E93824-0B9A-4B6C-A60B-78942160DF92"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.25:*:*:*:*:*:*:*","matchCriteriaId":"C7D31CCF-3D1C-472F-B940-758A607111BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.26:*:*:*:*:*:*:*","matchCriteriaId":"3E2B148A-C41F-44C7-A044-002F25FA06C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.27:*:*:*:*:*:*:*","matchCriteriaId":"B69D3BF4-E0CD-4844-BF5B-BBE5B9D989DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.28:*:*:*:*:*:*:*","matchCriteriaId":"6B73A4C5-4D6A-4CB8-9CB9-DFD038B869FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.29:*:*:*:*:*:*:*","matchCriteriaId":"96780B29-70A4-41B9-BFAE-F6AE56526A17"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.30:*:*:*:*:*:*:*","matchCriteriaId":"206445B6-2D25-46B6-8ED2-32CEF068CD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.31:*:*:*:*:*:*:*","matchCriteriaId":"576E931E-A40F-4087-B810-9BAA11464452"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.32:*:*:*:*:*:*:*","matchCriteriaId":"D1BFF736-D44F-4A13-A67E-1D3103F6DBF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.33:*:*:*:*:*:*:*","matchCriteriaId":"5F26E6E8-9EAB-4293-B12F-D81973C01447"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.34:*:*:*:*:*:*:*","matchCriteriaId":"AD49942E-171A-44E4-AE84-301F3E39B117"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.35:*:*:*:*:*:*:*","matchCriteriaId":"0925C97E-E404-46A6-952A-BDF64D7EAF1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.36:*:*:*:*:*:*:*","matchCriteriaId":"D5611335-10FE-4040-AF02-A2C871DAF3A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.37:*:*:*:*:*:*:*","matchCriteriaId":"6CCFB394-8FA7-4076-8098-37D569829B31"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.38:*:*:*:*:*:*:*","matchCriteriaId":"9CB49B00-95CE-43A0-B64F-D2014692C7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.39:*:*:*:*:*:*:*","matchCriteriaId":"F2809B65-50FC-4536-8A61-D8164EE99320"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.40:*:*:*:*:*:*:*","matchCriteriaId":"0FC47C91-B1FF-404B-8F73-37E325FCC566"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.41:*:*:*:*:*:*:*","matchCriteriaId":"69A232F7-49E3-49B6-951A-1048D71BCF03"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.42:*:*:*:*:*:*:*","matchCriteriaId":"3BE65D8C-C531-4212-AEF6-003A869030FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.43:*:*:*:*:*:*:*","matchCriteriaId":"7F803CC2-7E5E-460B-95CA-33BD80DC1CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.44:*:*:*:*:*:*:*","matchCriteriaId":"A2BE8F76-8C07-49BD-9E66-9790C0E8EDF7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110011618724455&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13164","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11651","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18026","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110011618724455&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18026","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1507","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the return_path parameter and perform HTTP Response Splitting attacks to modify expected HTML content from the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"AE2EABBA-AE17-44B6-9789-6E24D794A3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"25AD3E54-46F8-4DE0-86CE-D5D3FF079787"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"3857C666-0421-4EC8-80F4-2A62D44A1DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"6E9BB322-7C8F-4ACB-8809-2A96C0F9D65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.19:*:*:*:*:*:*:*","matchCriteriaId":"9C4AA766-E1FC-4AEA-A2C6-9998A395F978"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.20:*:*:*:*:*:*:*","matchCriteriaId":"83918F72-9289-4C14-AC44-46A848DD0487"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.21:*:*:*:*:*:*:*","matchCriteriaId":"8B1BCC1F-3031-49CB-95EF-C733D0A24EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.22:*:*:*:*:*:*:*","matchCriteriaId":"EAC57185-15AA-414B-9779-AF89170B9E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.23:*:*:*:*:*:*:*","matchCriteriaId":"2BCFF5B6-324C-43EC-AAF3-EBBA23C2C583"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.24:*:*:*:*:*:*:*","matchCriteriaId":"C7E93824-0B9A-4B6C-A60B-78942160DF92"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.25:*:*:*:*:*:*:*","matchCriteriaId":"C7D31CCF-3D1C-472F-B940-758A607111BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.26:*:*:*:*:*:*:*","matchCriteriaId":"3E2B148A-C41F-44C7-A044-002F25FA06C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.27:*:*:*:*:*:*:*","matchCriteriaId":"B69D3BF4-E0CD-4844-BF5B-BBE5B9D989DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.28:*:*:*:*:*:*:*","matchCriteriaId":"6B73A4C5-4D6A-4CB8-9CB9-DFD038B869FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.29:*:*:*:*:*:*:*","matchCriteriaId":"96780B29-70A4-41B9-BFAE-F6AE56526A17"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.30:*:*:*:*:*:*:*","matchCriteriaId":"206445B6-2D25-46B6-8ED2-32CEF068CD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.31:*:*:*:*:*:*:*","matchCriteriaId":"576E931E-A40F-4087-B810-9BAA11464452"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.32:*:*:*:*:*:*:*","matchCriteriaId":"D1BFF736-D44F-4A13-A67E-1D3103F6DBF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.33:*:*:*:*:*:*:*","matchCriteriaId":"5F26E6E8-9EAB-4293-B12F-D81973C01447"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.34:*:*:*:*:*:*:*","matchCriteriaId":"AD49942E-171A-44E4-AE84-301F3E39B117"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.35:*:*:*:*:*:*:*","matchCriteriaId":"0925C97E-E404-46A6-952A-BDF64D7EAF1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.36:*:*:*:*:*:*:*","matchCriteriaId":"D5611335-10FE-4040-AF02-A2C871DAF3A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.37:*:*:*:*:*:*:*","matchCriteriaId":"6CCFB394-8FA7-4076-8098-37D569829B31"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.38:*:*:*:*:*:*:*","matchCriteriaId":"9CB49B00-95CE-43A0-B64F-D2014692C7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.39:*:*:*:*:*:*:*","matchCriteriaId":"F2809B65-50FC-4536-8A61-D8164EE99320"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.40:*:*:*:*:*:*:*","matchCriteriaId":"0FC47C91-B1FF-404B-8F73-37E325FCC566"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.41:*:*:*:*:*:*:*","matchCriteriaId":"69A232F7-49E3-49B6-951A-1048D71BCF03"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.42:*:*:*:*:*:*:*","matchCriteriaId":"3BE65D8C-C531-4212-AEF6-003A869030FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.43:*:*:*:*:*:*:*","matchCriteriaId":"7F803CC2-7E5E-460B-95CA-33BD80DC1CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.44:*:*:*:*:*:*:*","matchCriteriaId":"A2BE8F76-8C07-49BD-9E66-9790C0E8EDF7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110011618724455&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13164","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11651","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18027","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110011618724455&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1508","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"init.php in WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the user_inc parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"AE2EABBA-AE17-44B6-9789-6E24D794A3A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"25AD3E54-46F8-4DE0-86CE-D5D3FF079787"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"3857C666-0421-4EC8-80F4-2A62D44A1DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"6E9BB322-7C8F-4ACB-8809-2A96C0F9D65E"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.19:*:*:*:*:*:*:*","matchCriteriaId":"9C4AA766-E1FC-4AEA-A2C6-9998A395F978"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.20:*:*:*:*:*:*:*","matchCriteriaId":"83918F72-9289-4C14-AC44-46A848DD0487"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.21:*:*:*:*:*:*:*","matchCriteriaId":"8B1BCC1F-3031-49CB-95EF-C733D0A24EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.22:*:*:*:*:*:*:*","matchCriteriaId":"EAC57185-15AA-414B-9779-AF89170B9E85"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.23:*:*:*:*:*:*:*","matchCriteriaId":"2BCFF5B6-324C-43EC-AAF3-EBBA23C2C583"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.24:*:*:*:*:*:*:*","matchCriteriaId":"C7E93824-0B9A-4B6C-A60B-78942160DF92"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.25:*:*:*:*:*:*:*","matchCriteriaId":"C7D31CCF-3D1C-472F-B940-758A607111BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.26:*:*:*:*:*:*:*","matchCriteriaId":"3E2B148A-C41F-44C7-A044-002F25FA06C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.27:*:*:*:*:*:*:*","matchCriteriaId":"B69D3BF4-E0CD-4844-BF5B-BBE5B9D989DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.28:*:*:*:*:*:*:*","matchCriteriaId":"6B73A4C5-4D6A-4CB8-9CB9-DFD038B869FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.29:*:*:*:*:*:*:*","matchCriteriaId":"96780B29-70A4-41B9-BFAE-F6AE56526A17"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.30:*:*:*:*:*:*:*","matchCriteriaId":"206445B6-2D25-46B6-8ED2-32CEF068CD2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.31:*:*:*:*:*:*:*","matchCriteriaId":"576E931E-A40F-4087-B810-9BAA11464452"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.32:*:*:*:*:*:*:*","matchCriteriaId":"D1BFF736-D44F-4A13-A67E-1D3103F6DBF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.33:*:*:*:*:*:*:*","matchCriteriaId":"5F26E6E8-9EAB-4293-B12F-D81973C01447"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.34:*:*:*:*:*:*:*","matchCriteriaId":"AD49942E-171A-44E4-AE84-301F3E39B117"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.35:*:*:*:*:*:*:*","matchCriteriaId":"0925C97E-E404-46A6-952A-BDF64D7EAF1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.36:*:*:*:*:*:*:*","matchCriteriaId":"D5611335-10FE-4040-AF02-A2C871DAF3A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.37:*:*:*:*:*:*:*","matchCriteriaId":"6CCFB394-8FA7-4076-8098-37D569829B31"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.38:*:*:*:*:*:*:*","matchCriteriaId":"9CB49B00-95CE-43A0-B64F-D2014692C7D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.39:*:*:*:*:*:*:*","matchCriteriaId":"F2809B65-50FC-4536-8A61-D8164EE99320"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.40:*:*:*:*:*:*:*","matchCriteriaId":"0FC47C91-B1FF-404B-8F73-37E325FCC566"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.41:*:*:*:*:*:*:*","matchCriteriaId":"69A232F7-49E3-49B6-951A-1048D71BCF03"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.42:*:*:*:*:*:*:*","matchCriteriaId":"3BE65D8C-C531-4212-AEF6-003A869030FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.43:*:*:*:*:*:*:*","matchCriteriaId":"7F803CC2-7E5E-460B-95CA-33BD80DC1CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.44:*:*:*:*:*:*:*","matchCriteriaId":"A2BE8F76-8C07-49BD-9E66-9790C0E8EDF7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110011618724455&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13164","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11651","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18028","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110011618724455&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11651","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1509","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"validate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid encoded_login parameter, which reveals the full path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"AE2EABBA-AE17-44B6-9789-6E24D794A3A5"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"25AD3E54-46F8-4DE0-86CE-D5D3FF079787"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"3857C666-0421-4EC8-80F4-2A62D44A1DDB"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"6E9BB322-7C8F-4ACB-8809-2A96C0F9D65E"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.19:*:*:*:*:*:*:*","matchCriteriaId":"9C4AA766-E1FC-4AEA-A2C6-9998A395F978"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.20:*:*:*:*:*:*:*","matchCriteriaId":"83918F72-9289-4C14-AC44-46A848DD0487"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.21:*:*:*:*:*:*:*","matchCriteriaId":"8B1BCC1F-3031-49CB-95EF-C733D0A24EEF"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.22:*:*:*:*:*:*:*","matchCriteriaId":"EAC57185-15AA-414B-9779-AF89170B9E85"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.23:*:*:*:*:*:*:*","matchCriteriaId":"2BCFF5B6-324C-43EC-AAF3-EBBA23C2C583"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.24:*:*:*:*:*:*:*","matchCriteriaId":"C7E93824-0B9A-4B6C-A60B-78942160DF92"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.25:*:*:*:*:*:*:*","matchCriteriaId":"C7D31CCF-3D1C-472F-B940-758A607111BC"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.26:*:*:*:*:*:*:*","matchCriteriaId":"3E2B148A-C41F-44C7-A044-002F25FA06C8"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.27:*:*:*:*:*:*:*","matchCriteriaId":"B69D3BF4-E0CD-4844-BF5B-BBE5B9D989DD"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.28:*:*:*:*:*:*:*","matchCriteriaId":"6B73A4C5-4D6A-4CB8-9CB9-DFD038B869FE"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.29:*:*:*:*:*:*:*","matchCriteriaId":"96780B29-70A4-41B9-BFAE-F6AE56526A17"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.30:*:*:*:*:*:*:*","matchCriteriaId":"206445B6-2D25-46B6-8ED2-32CEF068CD2A"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.31:*:*:*:*:*:*:*","matchCriteriaId":"576E931E-A40F-4087-B810-9BAA11464452"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.32:*:*:*:*:*:*:*","matchCriteriaId":"D1BFF736-D44F-4A13-A67E-1D3103F6DBF0"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.33:*:*:*:*:*:*:*","matchCriteriaId":"5F26E6E8-9EAB-4293-B12F-D81973C01447"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.34:*:*:*:*:*:*:*","matchCriteriaId":"AD49942E-171A-44E4-AE84-301F3E39B117"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.35:*:*:*:*:*:*:*","matchCriteriaId":"0925C97E-E404-46A6-952A-BDF64D7EAF1A"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.36:*:*:*:*:*:*:*","matchCriteriaId":"D5611335-10FE-4040-AF02-A2C871DAF3A1"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.37:*:*:*:*:*:*:*","matchCriteriaId":"6CCFB394-8FA7-4076-8098-37D569829B31"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.38:*:*:*:*:*:*:*","matchCriteriaId":"9CB49B00-95CE-43A0-B64F-D2014692C7D4"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.39:*:*:*:*:*:*:*","matchCriteriaId":"F2809B65-50FC-4536-8A61-D8164EE99320"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.40:*:*:*:*:*:*:*","matchCriteriaId":"0FC47C91-B1FF-404B-8F73-37E325FCC566"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.41:*:*:*:*:*:*:*","matchCriteriaId":"69A232F7-49E3-49B6-951A-1048D71BCF03"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.42:*:*:*:*:*:*:*","matchCriteriaId":"3BE65D8C-C531-4212-AEF6-003A869030FE"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.43:*:*:*:*:*:*:*","matchCriteriaId":"7F803CC2-7E5E-460B-95CA-33BD80DC1CF7"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.44:*:*:*:*:*:*:*","matchCriteriaId":"A2BE8F76-8C07-49BD-9E66-9790C0E8EDF7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110011618724455&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13164","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11651","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18029","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110011618724455&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1510","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WebCalendar allows remote attackers to gain privileges by modifying critical parameters to (1) view_entry.php or (2) upcoming.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"AE2EABBA-AE17-44B6-9789-6E24D794A3A5"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"25AD3E54-46F8-4DE0-86CE-D5D3FF079787"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"3857C666-0421-4EC8-80F4-2A62D44A1DDB"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"6E9BB322-7C8F-4ACB-8809-2A96C0F9D65E"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.19:*:*:*:*:*:*:*","matchCriteriaId":"9C4AA766-E1FC-4AEA-A2C6-9998A395F978"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.20:*:*:*:*:*:*:*","matchCriteriaId":"83918F72-9289-4C14-AC44-46A848DD0487"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.21:*:*:*:*:*:*:*","matchCriteriaId":"8B1BCC1F-3031-49CB-95EF-C733D0A24EEF"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.22:*:*:*:*:*:*:*","matchCriteriaId":"EAC57185-15AA-414B-9779-AF89170B9E85"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.23:*:*:*:*:*:*:*","matchCriteriaId":"2BCFF5B6-324C-43EC-AAF3-EBBA23C2C583"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.24:*:*:*:*:*:*:*","matchCriteriaId":"C7E93824-0B9A-4B6C-A60B-78942160DF92"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.25:*:*:*:*:*:*:*","matchCriteriaId":"C7D31CCF-3D1C-472F-B940-758A607111BC"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.26:*:*:*:*:*:*:*","matchCriteriaId":"3E2B148A-C41F-44C7-A044-002F25FA06C8"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.27:*:*:*:*:*:*:*","matchCriteriaId":"B69D3BF4-E0CD-4844-BF5B-BBE5B9D989DD"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.28:*:*:*:*:*:*:*","matchCriteriaId":"6B73A4C5-4D6A-4CB8-9CB9-DFD038B869FE"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.29:*:*:*:*:*:*:*","matchCriteriaId":"96780B29-70A4-41B9-BFAE-F6AE56526A17"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.30:*:*:*:*:*:*:*","matchCriteriaId":"206445B6-2D25-46B6-8ED2-32CEF068CD2A"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.31:*:*:*:*:*:*:*","matchCriteriaId":"576E931E-A40F-4087-B810-9BAA11464452"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.32:*:*:*:*:*:*:*","matchCriteriaId":"D1BFF736-D44F-4A13-A67E-1D3103F6DBF0"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.33:*:*:*:*:*:*:*","matchCriteriaId":"5F26E6E8-9EAB-4293-B12F-D81973C01447"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.34:*:*:*:*:*:*:*","matchCriteriaId":"AD49942E-171A-44E4-AE84-301F3E39B117"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.35:*:*:*:*:*:*:*","matchCriteriaId":"0925C97E-E404-46A6-952A-BDF64D7EAF1A"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.36:*:*:*:*:*:*:*","matchCriteriaId":"D5611335-10FE-4040-AF02-A2C871DAF3A1"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.37:*:*:*:*:*:*:*","matchCriteriaId":"6CCFB394-8FA7-4076-8098-37D569829B31"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.38:*:*:*:*:*:*:*","matchCriteriaId":"9CB49B00-95CE-43A0-B64F-D2014692C7D4"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.39:*:*:*:*:*:*:*","matchCriteriaId":"F2809B65-50FC-4536-8A61-D8164EE99320"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.40:*:*:*:*:*:*:*","matchCriteriaId":"0FC47C91-B1FF-404B-8F73-37E325FCC566"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.41:*:*:*:*:*:*:*","matchCriteriaId":"69A232F7-49E3-49B6-951A-1048D71BCF03"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.42:*:*:*:*:*:*:*","matchCriteriaId":"3BE65D8C-C531-4212-AEF6-003A869030FE"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.43:*:*:*:*:*:*:*","matchCriteriaId":"7F803CC2-7E5E-460B-95CA-33BD80DC1CF7"},{"vulnerable":false,"criteria":"cpe:2.3:a:webcalendar:webcalendar:0.9.44:*:*:*:*:*:*:*","matchCriteriaId":"A2BE8F76-8C07-49BD-9E66-9790C0E8EDF7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110011618724455&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13164","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11651","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18030","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110011618724455&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1511","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hotfoon 4.0 does not notify users before opening links in web browsers, which could allow remote attackers to execute arbitrary code via a certain link sent in a chat window."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:hotfoon_corporation:hotfoon:4.0:*:*:*:*:*:*:*","matchCriteriaId":"DA50175D-B9BD-4F16-BC15-DD50FA7ED62D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110014517703092&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13173","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18038","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110014517703092&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1512","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:soft3304:04webserver:1.42:*:*:*:*:*:*:*","matchCriteriaId":"B6068B76-8085-4942-9872-D69E82AF9D19"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110012542615484&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110054395311823&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13159/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.security.org.sg/vuln/04webserver142.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11652","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.soft3304.net/04WebServer/Security.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18033","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110012542615484&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110054395311823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13159/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.security.org.sg/vuln/04webserver142.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.soft3304.net/04WebServer/Security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1513","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:soft3304:04webserver:1.42:*:*:*:*:*:*:*","matchCriteriaId":"B6068B76-8085-4942-9872-D69E82AF9D19"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110012542615484&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110054395311823&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13159/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.security.org.sg/vuln/04webserver142.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11652","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.soft3304.net/04WebServer/Security.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18034","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110012542615484&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110054395311823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13159/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.security.org.sg/vuln/04webserver142.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.soft3304.net/04WebServer/Security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18034","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1514","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request for an MS-DOS device name such as COM2."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:soft3304:04webserver:1.42:*:*:*:*:*:*:*","matchCriteriaId":"B6068B76-8085-4942-9872-D69E82AF9D19"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110012542615484&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110054395311823&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13159/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.security.org.sg/vuln/04webserver142.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11652","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.soft3304.net/04WebServer/Security.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18036","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110012542615484&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110054395311823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13159/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.security.org.sg/vuln/04webserver142.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.soft3304.net/04WebServer/Security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1515","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D66CAB0A-2A0A-47EF-A328-C341CCC1BA76"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.0_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"3AFED411-1291-4E03-A160-CC9F1AD03D7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.0_can4:*:*:*:*:*:*:*","matchCriteriaId":"0E9FE483-4367-47E7-9D09-043955998C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"0BC85ED9-7491-43D3-B34D-1CB07836888F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"90BE006A-0F2D-4F3A-A335-176C5A5978E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"151876D4-B72E-4D5F-A151-5A3DCAE51299"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"984E8E57-57E5-4FEC-9210-4083AD400F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"1760CC7E-5297-4F8A-8A28-3689F6075CAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"74013F50-0677-454E-8E6C-101CF210E989"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"29DC951B-860E-4AF1-8908-71C7099FB19A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"0A4E9C82-64CF-4487-8947-ED745C41945A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110019198507100&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110019198507100&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1516","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the block_username parameter in the user module."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"47B0B838-401F-447D-A270-6B3C7416A2ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"90DF86C4-176B-4E4E-AF89-15F090E9C0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"9F3EAD02-CF8D-4154-9A67-9774BA4029AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"B72337C8-2B5C-4824-A3C0-D41A857DC9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.1:*:*:*:*:*:*:*","matchCriteriaId":"454BEBD6-3EC7-4FFB-A51A-0199B5CCF097"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.2:*:*:*:*:*:*:*","matchCriteriaId":"6A381433-9331-4424-B349-52D7F4BFEABA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.3:*:*:*:*:*:*:*","matchCriteriaId":"4DC225BD-FA8E-482B-9537-77797B7A88BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.4:*:*:*:*:*:*:*","matchCriteriaId":"682290A8-AEB7-4652-A44C-A969AB937BAF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110022027420583&w=2","source":"cve@mitre.org"},{"url":"http://phpwebsite.appstate.edu/index.php?module=announce&ANN_id=863&ANN_user_op=view","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/13172/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200411-35.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11673","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18046","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110022027420583&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://phpwebsite.appstate.edu/index.php?module=announce&ANN_id=863&ANN_user_op=view","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/13172/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200411-35.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1517","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant message containing a URL with hex encoded file extensions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:imsecure:1.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"48D8AF77-6409-4262-93E9-82557C15C72E"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:imsecure:1.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A664AC8F-2B0C-4ACF-9F14-7F037AD9C8A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:imsecure:1.0.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B8422906-522C-4E5D-A401-61B74DBD6E7D"}]}]}],"references":[{"url":"http://download.zonelabs.com/bin/free/securityAlert/16.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110020607924001&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13169","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11662","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18042","source":"cve@mitre.org"},{"url":"http://download.zonelabs.com/bin/free/securityAlert/16.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110020607924001&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1518","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forum_id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phorum:phorum:5.0.3_beta:*:*:*:*:*:*:*","matchCriteriaId":"9A31EA2D-2B01-4928-9B3E-9D666FD2758B"},{"vulnerable":false,"criteria":"cpe:2.3:a:phorum:phorum:5.0.7_beta:*:*:*:*:*:*:*","matchCriteriaId":"01CFDB0B-6FBD-49F3-8238-81E92661297E"},{"vulnerable":false,"criteria":"cpe:2.3:a:phorum:phorum:5.0.9:*:*:*:*:*:*:*","matchCriteriaId":"1655572D-7D56-4D9D-9E0F-A67DF23FC934"},{"vulnerable":false,"criteria":"cpe:2.3:a:phorum:phorum:5.0.10:*:*:*:*:*:*:*","matchCriteriaId":"387E0B83-B240-4922-8C57-CE0CDB000888"},{"vulnerable":false,"criteria":"cpe:2.3:a:phorum:phorum:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"CF5B09FF-92DF-4F8D-9A7B-E5086E2B954D"},{"vulnerable":false,"criteria":"cpe:2.3:a:phorum:phorum:5.0.12:*:*:*:*:*:*:*","matchCriteriaId":"D02321D7-2F3E-40F9-9A76-CFF339C93199"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028609.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110021385926870&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13174","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11660","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18045","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028609.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110021385926870&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18045","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1519","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands via (1) the bug_id parameter in a viewvotes operation or (2) the project parameter in an add operation."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:benjamin_curtis:phpbugtracker:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"2B5DB887-5E14-4331-88B0-414501D5EA11"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110029315521568&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110037345428403&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110037408101974&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=11718","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18053","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18079","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110029315521568&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110037345428403&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110037408101974&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=11718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1520","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:8.13:*:*:*:*:*:*:*","matchCriteriaId":"443C3EE1-1C98-40F6-93DD-F60BD0C46C2F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110037283803560&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13200","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11675","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18058","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110037283803560&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1521","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed \"Converted\" headers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:6.2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"4B5FF797-B1E7-49AA-84AA-CB8A2EEE1A06"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110037078519691&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=110053102601655&w=2","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.nl/0411-exploits/eudora62014.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18064","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110037078519691&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=110053102601655&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.nl/0411-exploits/eudora62014.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18064","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1522","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Army Men RTS 1.0 allows remote attackers to cause a denial of service (application crash) via a nickname that contains format strings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:3do:army_men_real_time_strategy_game:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B7E960C9-428D-409D-9C16-A702B5FD11B0"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028757.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110053709800174&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13186","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11679","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18065","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028757.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110053709800174&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18065","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1523","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the game console in Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (application crash) via format string specifiers in a message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:new_media_generation:hired_team_trial:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F6D308E5-1D1D-4987-8D9C-08ABD3A2808E"},{"vulnerable":true,"criteria":"cpe:2.3:a:new_media_generation:hired_team_trial:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5D37172F-05E8-4774-97C9-18E91FB7CF26"},{"vulnerable":true,"criteria":"cpe:2.3:a:new_media_generation:hired_team_trial:2.2:*:*:*:*:*:*:*","matchCriteriaId":"52B5C100-59F3-466A-B20E-134E2F059E36"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110054260919742&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13207","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11683","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18083","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110054260919742&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18083","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1524","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (game interruption) via a malformed UDP packet sent to a game port, such as port 29200."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:new_media_generation:hired_team_trial:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"933164E1-6747-4417-8308-18125CA3970F"},{"vulnerable":true,"criteria":"cpe:2.3:a:new_media_generation:hired_team_trial:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5D37172F-05E8-4774-97C9-18E91FB7CF26"},{"vulnerable":true,"criteria":"cpe:2.3:a:new_media_generation:hired_team_trial:2.2:*:*:*:*:*:*:*","matchCriteriaId":"52B5C100-59F3-466A-B20E-134E2F059E36"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110054260919742&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13207","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11683","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18085","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110054260919742&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1525","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (application crash) via the status command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:new_media_generation:hired_team_trial:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"933164E1-6747-4417-8308-18125CA3970F"},{"vulnerable":false,"criteria":"cpe:2.3:a:new_media_generation:hired_team_trial:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5D37172F-05E8-4774-97C9-18E91FB7CF26"},{"vulnerable":false,"criteria":"cpe:2.3:a:new_media_generation:hired_team_trial:2.2:*:*:*:*:*:*:*","matchCriteriaId":"52B5C100-59F3-466A-B20E-134E2F059E36"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110054260919742&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13207","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11683","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18086","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110054260919742&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13207","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1526","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hired Team: Trial 2.0 and earlier and 2.200 does not limit how game players can kick other players off the server, including the administrator."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:new_media_generation:hired_team_trial:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"933164E1-6747-4417-8308-18125CA3970F"},{"vulnerable":true,"criteria":"cpe:2.3:a:new_media_generation:hired_team_trial:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5D37172F-05E8-4774-97C9-18E91FB7CF26"},{"vulnerable":true,"criteria":"cpe:2.3:a:new_media_generation:hired_team_trial:2.2:*:*:*:*:*:*:*","matchCriteriaId":"52B5C100-59F3-466A-B20E-134E2F059E36"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110054260919742&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13207","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110054260919742&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13207","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1527","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the Path attribute, which can cause it to modify cookies in other domains when the attacker's domain name is within the target's domain name or when wildcard DNS is being used, which allows remote attackers to hijack web sessions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":false,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110053968530613&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13208","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/79_e.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11680","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18073","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110053968530613&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/79_e.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1528","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Event Calendar module 2.13 for PHP-Nuke allows remote attackers to gain sensitive information via an HTTP request to (1) config.php, (2) index.php, or (3) submit.php, which reveal the full path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rob_sutton:php-nuke_event_calendar:2.13:*:*:*:*:*:*:*","matchCriteriaId":"B6E890CD-F9AB-4AA8-A799-5226B9955483"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110064626111756&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13213","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11693","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=38","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18105","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110064626111756&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=38","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1529","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary web script via the (1) type, (2) day, (3) month, or (4) year parameters in a Preview operation, or (5) event comments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rob_sutton:php-nuke_event_calendar:2.13:*:*:*:*:*:*:*","matchCriteriaId":"B6E890CD-F9AB-4AA8-A799-5226B9955483"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110064626111756&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13213","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11693","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=38","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18106","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18107","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110064626111756&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=38","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18106","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1530","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the (1) eid or (2) cid parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:rob_sutton:php-nuke_event_calendar:2.13:*:*:*:*:*:*:*","matchCriteriaId":"B6E890CD-F9AB-4AA8-A799-5226B9955483"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110064626111756&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13213","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11693","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=38","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18104","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110064626111756&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=38","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1531","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to execute arbitrary SQL commands via the qpid parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:2.0:*:*:*:*:*:*:*","matchCriteriaId":"FABB6806-5DC0-4146-89FC-05D079F0CFEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C77C15A2-9A9D-4C3F-8A62-18C54941B79C"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A2C79F9F-FE3C-4CC6-88A9-6EFB27724CA9"}]}]}],"references":[{"url":"http://forums.invisionpower.com/index.php?showtopic=154916","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=110079592702417&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=111454805209191&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=111462421824202&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13245","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11703","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18164","source":"cve@mitre.org"},{"url":"http://forums.invisionpower.com/index.php?showtopic=154916","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=110079592702417&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=111454805209191&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=111462421824202&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1532","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.4:*:*:*:*:*:*:*","matchCriteriaId":"6E57680A-6CEB-4E72-97F0-A80A6551CF85"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"816B562D-31CB-40DE-B221-EC391E39DDAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"770FE42B-6F4D-4633-8306-14FFD590FD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.5:*:*:*:*:*:*:*","matchCriteriaId":"BA7AE5BB-05DA-4E2D-AD41-749990292F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3A7907A6-B27B-4E0E-BA3F-9EC28B00BEF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:appserv_open_project:appserv:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"E5252E8E-DACA-4A87-B374-461035E0B6CC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110079586328430&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11704","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18163","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110079586328430&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1533","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service (service crash) via a long (1) username or (2) password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digital_mappings_systems:pop3_server:1.5.3_build37:*:*:*:*:*:*:*","matchCriteriaId":"DFE5210B-EF6B-415F-9E63-062860548531"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110081437508585&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13248","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.digitalmapping.sk.ca/pop3srv/Update.asp","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11705","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18161","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110081437508585&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.digitalmapping.sk.ca/pop3srv/Update.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18161","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1534","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of service (application instability or system hang) via certain JavaScript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:4.0:*:pro:*:*:*:*:*","matchCriteriaId":"721EFD0A-145F-440C-A9FC-D72AE6FA126A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:4.5:*:pro:*:*:*:*:*","matchCriteriaId":"C5DE7D02-A778-47EF-9D3E-871C3EB09370"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:4.5.538.001:*:pro:*:*:*:*:*","matchCriteriaId":"F234D3E4-FD8B-4203-A8E4-17B15ECB0AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:5.0.590.015:*:pro:*:*:*:*:*","matchCriteriaId":"50E6E82F-5197-46D1-A0DE-F105177288C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:5.5:*:*:*:*:*:*:*","matchCriteriaId":"EA43E5A8-0E59-4A6E-9DE6-D2378C066FA4"}]}]}],"references":[{"url":"http://download.zonelabs.com/bin/free/securityAlert/18.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110088808402495&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13244/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11706","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18159","source":"cve@mitre.org"},{"url":"http://download.zonelabs.com/bin/free/securityAlert/18.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110088808402495&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13244/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18159","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1535","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP code by modifying the phpbb_root_path parameter to reference a URL on a remote web server that contains the code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C74C78D-EEE0-48DF-9721-2A43B996EBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"054EFBD3-2252-4173-B37A-B8CA0218CE0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"00EB368F-5471-42E3-BBBE-EF9E623A7259"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F65406CF-59F1-48DC-8ABC-501F210A8B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03AC5144-140D-48E9-87FD-96F2E248D4E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A8F12660-10A7-4B66-94B0-954C9CD7D36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"3BF566D7-4537-49F6-91BF-F56D64DAE6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E3F1F44C-B65B-49C4-B6E8-30560D5B7663"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"6DDE0690-6FB1-4E68-9250-7F45E9044B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:rc1:*:*:*:*:*:*:*","matchCriteriaId":"3EB93717-8B41-4BE0-8DA9-B533F8E4EE6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:rc1_pre:*:*:*:*:*:*:*","matchCriteriaId":"D341179B-3521-477C-8997-25575BB850D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:rc2:*:*:*:*:*:*:*","matchCriteriaId":"696B979C-A50F-4602-97AA-413CFD1A2637"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:rc3:*:*:*:*:*:*:*","matchCriteriaId":"E1811B1F-60D5-4562-B69E-ADB4F60FB993"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:rc4:*:*:*:*:*:*:*","matchCriteriaId":"69A93C92-1705-4915-920E-3F816600E568"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110075903308817&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110082153702843&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18151","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110075903308817&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110082153702843&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18151","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1536","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in the ibProArcade module for Invision Power Board (IPB) 1.x and 2.x allows remote attackers to execute arbitrary SQL commands via the cat parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipbproarcade:ipbproarcade:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5","matchCriteriaId":"DE039065-BA8D-40DD-A376-DBD132C28C81"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110098512318132&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13260","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012292","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11719","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18180","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110098512318132&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1537","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary web script via the img parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpkit:phpkit:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C962F520-4E73-459D-8C5C-9E85426D9B57"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpkit:phpkit:1.6.02:*:*:*:*:*:*:*","matchCriteriaId":"33C5DDE2-0978-41D2-BCCF-A70BC6CE841A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpkit:phpkit:1.6.03:*:*:*:*:*:*:*","matchCriteriaId":"DD305C66-3B8B-468E-945A-DFEE09E6FB8F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110117116115493&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13262","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11725","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18204","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110117116115493&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1538","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in include.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary SQL commands via the id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpkit:phpkit:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C962F520-4E73-459D-8C5C-9E85426D9B57"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpkit:phpkit:1.6.02:*:*:*:*:*:*:*","matchCriteriaId":"33C5DDE2-0978-41D2-BCCF-A70BC6CE841A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpkit:phpkit:1.6.03:*:*:*:*:*:*:*","matchCriteriaId":"DD305C66-3B8B-468E-945A-DFEE09E6FB8F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110117116115493&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13262","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11725","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18205","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110117116115493&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18205","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1539","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long value in a game server reply, which triggers a NULL dereference."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gearbox_software:halo_combat_evolved:1.2:*:*:*:*:*:*:*","matchCriteriaId":"BCE58614-742A-474F-A9F4-1BFFDCF95AC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gearbox_software:halo_combat_evolved:1.4:*:*:*:*:*:*:*","matchCriteriaId":"882444F5-32A0-405A-A3D3-EC68E25A3FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gearbox_software:halo_combat_evolved:1.5:*:*:*:*:*:*:*","matchCriteriaId":"F47FDCD4-F1FC-4FF6-B3B0-DE1E99086248"},{"vulnerable":true,"criteria":"cpe:2.3:a:gearbox_software:halo_combat_evolved:1.31:*:*:*:*:*:*:*","matchCriteriaId":"0F3B68BB-CF9B-4D49-A584-53E7EC47B3C0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110114770406920&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13273","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11724","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18196","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110114770406920&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18196","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1540","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a password to access rpFWUpload.html, which allows remote attackers to reset the router configuration file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige:645r_a1:*:*:*:*:*:*:*","matchCriteriaId":"94155FF1-C619-44EC-BB8B-996ED208F232"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige:650h:*:*:*:*:*:*:*","matchCriteriaId":"0076DE97-2852-447F-93C0-A77A85CDF818"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige:650hw:*:*:*:*:*:*:*","matchCriteriaId":"9ED567D3-972F-4F4A-A058-E9653064AEFD"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige:650hw_31:*:*:*:*:*:*:*","matchCriteriaId":"10E80C0C-2418-4A74-8A63-03156E12F44E"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige:650r:*:*:*:*:*:*:*","matchCriteriaId":"54DADC5A-75B4-4277-9AD3-0A24C8DE4A35"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:3.40:*:*:*:*:*:*:*","matchCriteriaId":"988E40DE-A52E-418C-B4E5-F3C5012FFB62"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:is.3:*:*:*:*:*:*:*","matchCriteriaId":"FCB28E97-F600-4CC7-8924-92605341DE96"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:is.5:*:*:*:*:*:*:*","matchCriteriaId":"05E404A5-B514-4614-BA01-9CE9136CB13D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110116413414615&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110135136811344&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13278","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012298","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/12108","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11723","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18202","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110116413414615&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110135136811344&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/12108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18202","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1541","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"92422FCC-E670-47ED-B93B-309BBFA1D20F"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FC7CC992-1650-40C4-9465-A4B3DB6689C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"FFEE5BE3-63DD-499E-A8D0-5808F5A8F3F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"BCC51644-6117-41D4-AB0E-5A73CD9ED4C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3E1C242B-4D21-423B-B80C-2DBA97832840"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:4.1:*:*:*:*:*:*:*","matchCriteriaId":"3DFD9742-8AD0-4616-9503-5E4F2EFE4F1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"C1F743DE-182F-42AF-A78A-D9AAA3127324"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B420CB7E-061F-41B5-A643-63BF2B8F6D60"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"61A9957A-C408-4926-A9B1-4CA6E11B92EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"09078DE6-B12C-4255-9B59-C532F2CA3FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"BE0DCE51-2BF7-4816-A75F-349A7F69FB41"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"EDC9C3B3-664D-47B0-83DD-B7F5E6E040F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:4.1.7:*:*:*:*:*:*:*","matchCriteriaId":"6B56D339-4DB1-4090-990A-8ACADF6CFC12"},{"vulnerable":true,"criteria":"cpe:2.3:a:van_dyke_technologies:securecrt:4.1.8:*:*:*:*:*:*:*","matchCriteriaId":"8E5D9B72-5221-4396-90B1-FE8B9C496412"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110129164332226&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13275/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11731","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18201","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110129164332226&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13275/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18201","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1542","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service (server or client crash) via a long (1) query or (2) reply."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:raven_software:soldier_of_fortune:2.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"304E2421-4972-449B-8CFD-59B208C0E17D"},{"vulnerable":true,"criteria":"cpe:2.3:a:raven_software:soldier_of_fortune:2.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DCC84747-FA7C-451F-B5B8-918A4B6F7C11"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110124208811327&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13289","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11735","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18211","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110124208811327&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18211","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1543","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in viewimg.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the path parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:korweblog:korweblog:1.6.2cvs:*:*:*:*:*:*:*","matchCriteriaId":"F945FA83-8F25-4F96-A7DE-EB27B35CB69D"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029342.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110132543805873&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13286","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11744","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18234","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029342.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110132543805873&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11744","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1544","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Search.jsp in JSPWiki 2.1.120-cvs and earlier allows remote attackers to execute arbitrary web script as other users via the query parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jspwiki:jspwiki:2.1.120:*:*:*:*:*:*:*","matchCriteriaId":"7F68FDE8-409F-4669-95A6-D9DDA0CA24F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jspwiki:jspwiki:2.1.121:*:*:*:*:*:*:*","matchCriteriaId":"68DFD3F7-0D11-49A9-BC7A-9DC57D8600A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jspwiki:jspwiki:2.1.122:*:*:*:*:*:*:*","matchCriteriaId":"E9CFBF44-5BBE-4BDB-9E03-EE83EE3B4E98"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110135663220831&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13285/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11746","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18236","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110135663220831&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13285/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18236","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1545","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UploadFile.php in MoniWiki 1.0.9.2 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.hwp, which allows remote attackers to upload and execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moniwiki:moniwiki:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FD9C20DE-AD45-427D-867D-E52A36E96457"},{"vulnerable":true,"criteria":"cpe:2.3:a:moniwiki:moniwiki:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"7C0EAFEE-0C66-48F6-BDC2-4267A0BD029F"},{"vulnerable":true,"criteria":"cpe:2.3:a:moniwiki:moniwiki:1.0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"7536B60C-285A-4810-8C70-FDB86A9F52C7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0448.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://kldp.net/scm/cvsweb.php/moniwiki/plugin/UploadFile.php.diff?cvsroot=moniwiki&only_with_tag=HEAD&r1=text&tr1=1.17&r2=text&tr2=1.16&f=h","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110314544711884&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13478","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11951","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18493","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0448.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://kldp.net/scm/cvsweb.php/moniwiki/plugin/UploadFile.php.diff?cvsroot=moniwiki&only_with_tag=HEAD&r1=text&tr1=1.17&r2=text&tr2=1.16&f=h","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110314544711884&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18493","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1546","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via a long (1) SAML, SOML, SEND, or MAIL command to the SMTP server or (2) LIST command to the IMAP server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"4DAC727D-046D-4021-BAE8-6CAD7890FEDE"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026770.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109591179510781&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10223","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10224","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11238","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitylab.ru/48146.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17476","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17477","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026770.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109591179510781&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitylab.ru/48146.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17477","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1547","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to cause a denial of service (application crash) via a long filename, possibly triggering a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:onnuri_infotek:activepost_standard:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EB8141A2-2C10-4D23-A18C-7B074F417966"},{"vulnerable":true,"criteria":"cpe:2.3:a:onnuri_infotek:activepost_standard:3.1:*:*:*:*:*:*:*","matchCriteriaId":"81F648A0-2A0D-446D-9DFC-6517DAE93037"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/actp-adv.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109597139011373&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12642","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011406","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11244","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17482","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/actp-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109597139011373&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12642","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1548","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote authenticated users to upload arbitrary files via a .. (dot dot) in the filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:onnuri_infotek:activepost_standard:3.1:*:*:*:*:*:*:*","matchCriteriaId":"81F648A0-2A0D-446D-9DFC-6517DAE93037"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/actp-adv.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109597139011373&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12642/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011406","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11244","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17488","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/actp-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109597139011373&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12642/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17488","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1549","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could allow remote attackers to gain sensitive information by sniffing the network connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:onnuri_infotek:activepost_standard:3.1:*:*:*:*:*:*:*","matchCriteriaId":"81F648A0-2A0D-446D-9DFC-6517DAE93037"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/actp-adv.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109597139011373&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12642/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011406","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11244","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17486","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/actp-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109597139011373&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12642/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1550","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an administrator, and obtain sensitive information by repeatedly making an HTTP request for ver.asp until an administrator logs on."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:motorola:wr850g:4.0.3_firmware:*:*:*:*:*:*:*","matchCriteriaId":"2559E09A-9024-4EA9-AA7E-4497E9C77D15"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026791.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109613135105800&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11241","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17474","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026791.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109613135105800&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17474","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1551","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows remote attackers to execute arbitrary web script or HTML via the id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*","matchCriteriaId":"E6EB588E-FC2B-4E10-86F5-33C2758BEED5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109613031414184&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17504","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109613031414184&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17504","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1552","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the eventid parameter to calendar.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:full_revolution:aspwebcalendar:4.5:*:*:*:*:*:*:*","matchCriteriaId":"36ED3996-2169-4B68-90DD-C29CF6D81A86"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109604910025090&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12651","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/24622","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11246","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/23098","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/1093","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17506","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33157","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/3546","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109604910025090&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/24622","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/23098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/1093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17506","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/33157","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/3546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1553","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the cat parameter to album.asp.  NOTE: it was later reported that vector 1 affects aspWebAlbum 3.2, and the vector involves the txtUserName parameter in a processlogin action to album.asp, as reachable from the login action."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fullrevolution:aspwebalbum:3.2:*:*:*:*:*:*:*","matchCriteriaId":"D6E16888-0DBA-4891-9AEB-6C8D2A76537C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109604910025090&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/47913","source":"cve@mitre.org"},{"url":"http://osvdb.org/47914","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31649","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11246","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30996","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17507","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44876","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44877","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6357","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6420","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109604910025090&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/47913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/47914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11246","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/30996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1554","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbitrary PHP code by modifying the chem_absolu parameter to reference a URL on a remote web server that contains the code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alexphpteam:alex_guestbook:3.12:*:*:*:*:*:*:*","matchCriteriaId":"E6462A62-5312-470C-97A6-DBE468695D0D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109635806703748&w=2","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.nl/0410-exploits/alexPHP.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011432","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11260","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17516","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109635806703748&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.nl/0410-exploits/alexPHP.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17516","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1555","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to run arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp or (4) txtUserEmail parameter to forgot.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadboard_instant:asp_message_board:*:*:*:*:*:*:*:*","matchCriteriaId":"A4CE4847-113C-4577-AD94-54D7E441154A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109630777608244&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12658","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011419","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11250","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17498","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17500","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17501","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17502","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109630777608244&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011419","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17501","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1556","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MyWebServer 1.0.3 allows remote attackers to cause a denial of service (application crash) via a large number of connections within a short time."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebserver:mywebserver:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"422EE56D-BE2C-4744-BF4C-9227BB96D215"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109630333230707&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12689","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011461","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11254","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17519","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109630333230707&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17519","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1557","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and read arbitrary files via a direct HTTP request to (1) /admin or (2) ServerProperties.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mywebserver:mywebserver:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"422EE56D-BE2C-4744-BF4C-9227BB96D215"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109630333230707&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011461","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11254","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17520","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109630333230707&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17520","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1558","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) POP3 USER command or (2) SMTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ypops:ypops:0.4:*:*:*:*:*:*:*","matchCriteriaId":"5656A2B4-1761-40E0-A39A-F7D263ABB687"},{"vulnerable":true,"criteria":"cpe:2.3:a:ypops:ypops:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFA3C153-6C5F-46EB-B69F-F8ABDA4236DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ypops:ypops:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C4EA6810-99F1-400F-861C-C9D8A625BBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ypops:ypops:0.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F84B520D-D961-40B4-B588-F786C64B61A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ypops:ypops:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"692BA1BE-9F31-437C-BB57-C3ABAA316D9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ypops:ypops:0.4.5:*:*:*:*:*:*:*","matchCriteriaId":"E8E1E3E4-F4EB-4623-8317-F5829F740C55"},{"vulnerable":true,"criteria":"cpe:2.3:a:ypops:ypops:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"331F024D-BB0E-43CD-A092-45043BDD9B59"},{"vulnerable":true,"criteria":"cpe:2.3:a:ypops:ypops:0.5:*:*:*:*:*:*:*","matchCriteriaId":"0B7A18AF-FE96-43A3-9693-1F15298AEB20"},{"vulnerable":true,"criteria":"cpe:2.3:a:ypops:ypops:0.6:*:*:*:*:*:*:*","matchCriteriaId":"A556D4DC-3F74-4FF8-9EB8-6D21E9B60DF9"}]}]}],"references":[{"url":"http://dbeusee.home.comcast.net/history.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109630699829536&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12660","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Sep/1011426.html","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2006-October/001089.html","source":"cve@mitre.org"},{"url":"http://www.hat-squad.com/en/000075.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/10366","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10367","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11256","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17515","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17518","source":"cve@mitre.org"},{"url":"http://dbeusee.home.comcast.net/history.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109630699829536&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2004/Sep/1011426.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2006-October/001089.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hat-squad.com/en/000075.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/10366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10367","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17518","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1559","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) redirect_to, text, popupurl, or popuptitle parameters to wp-login.php, (2) redirect_url parameter to admin-header.php, (3) popuptitle, popupurl, content, or post_title parameters to bookmarklet.php, (4) cat_ID parameter to categories.php, (5) s parameter to edit.php, or (6) s or mode parameter to edit-comments.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109641484723194&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12683","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011440","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11268","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17532","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109641484723194&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17532","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1560","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433, possibly triggering a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"A2AB95D7-394E-423B-884C-87A9960682EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"4355BA3D-B985-4DC7-AD9D-21B64652CC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"D590A237-1587-4FF2-BEEA-F96B1C08F84C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"B004F338-1C8E-4283-8823-1A16A291FCBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sql_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"54EB3111-B93A-4577-9592-0D13FE7FD2C4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109650760210411&w=2","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.nl/0410-exploits/mssql.7.0.dos.c","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12680","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011434","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11265","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17542","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109650760210411&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.nl/0410-exploits/mssql.7.0.dos.c","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1561","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9FAD7F5E-7321-4E18-ACEF-CF1CB5B6E98C"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F750F60-6FBA-4729-B81D-2367183E206E"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/iceexec-adv.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109640005127644&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109674593230539&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12666/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011439","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10446","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/exploits/6X00315BFM.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11271","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17538","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/iceexec-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109640005127644&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109674593230539&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12666/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10446","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/exploits/6X00315BFM.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17538","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1562","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL commands via the key parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w-agora:w-agora:4.1.6a:*:*:*:*:*:*:*","matchCriteriaId":"6277A506-01D0-4BA8-9191-0D530F41AF02"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109655691512298&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12695","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011463","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11283","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17557","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109655691512298&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17557","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1563","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web script or HTML via the (1) thread parameter to download_thread.php, (2) loginuser parameter to login.php, or (3) userid parameter to forgot_password.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w-agora:w-agora:4.1.6a:*:*:*:*:*:*:*","matchCriteriaId":"6277A506-01D0-4BA8-9191-0D530F41AF02"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109655691512298&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12695","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011463","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11283","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17553","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109655691512298&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17553","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1564","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the thread parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w-agora:w-agora:4.1.6a:*:*:*:*:*:*:*","matchCriteriaId":"6277A506-01D0-4BA8-9191-0D530F41AF02"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109655691512298&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12695","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011463","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11283","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17558","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109655691512298&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1565","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"list.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP request, possibly involving a malformed id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w-agora:w-agora:4.1.6a:*:*:*:*:*:*:*","matchCriteriaId":"6277A506-01D0-4BA8-9191-0D530F41AF02"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109655691512298&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12695","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011463","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11283","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109655691512298&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011463","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11283","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1566","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:silent-storm:silent-storm_portal:2.1:*:*:*:*:*:*:*","matchCriteriaId":"477F907E-86A8-4CAF-8015-F6267BDAB26A"},{"vulnerable":true,"criteria":"cpe:2.3:a:silent-storm:silent-storm_portal:2.2:*:*:*:*:*:*:*","matchCriteriaId":"4F4D94A6-AD36-42ED-8E79-3C08F347DDB4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109655763808924&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12704","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011470","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11284","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17554","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109655763808924&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17554","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1567","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:silent-storm:silent-storm_portal:2.1:*:*:*:*:*:*:*","matchCriteriaId":"477F907E-86A8-4CAF-8015-F6267BDAB26A"},{"vulnerable":false,"criteria":"cpe:2.3:a:silent-storm:silent-storm_portal:2.2:*:*:*:*:*:*:*","matchCriteriaId":"4F4D94A6-AD36-42ED-8E79-3C08F347DDB4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109655763808924&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12704","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1011470","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11284","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17555","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109655763808924&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1011470","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1568","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ParaChat Server 5.5 allows remote attackers to read arbitrary files via a ..%5C (hex-encoded dot dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:parachat:parachat_server:5.5:*:*:*:*:*:*:*","matchCriteriaId":"2226EC2E-66F6-4B08-B281-04F2EED6AC30"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/1047.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/1063.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109647769526696&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109656982803391&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12678/","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011438","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10436","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11272","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17541","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/1047.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/1063.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109647769526696&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109656982803391&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12678/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1569","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe in dBpowerAMP Audio Player 2.0 and dbPowerAmp Music Converter 10.0 allows remote attackers to cause a denial of service or execute arbitrary code via a .pls or .m3u playlist that contains long File1 (filename) fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:illustrate:dbpoweramp_audio_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"6B332E49-CF82-44E1-8086-42CEA6CE5EA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:illustrate:dbpoweramp_music_converter:10.0:*:*:*:*:*:*:*","matchCriteriaId":"8A6D6DF2-30A0-4DFA-B201-0F4FBD2BF06A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109668542406346&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12684/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00052-09272004","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11266","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17535","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17539","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109668542406346&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12684/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00052-09272004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17535","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17539","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1570","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary SQL commands via the p parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eaden_mckee:bblog:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"64FAB027-92E5-46AD-B614-C3BEB5E9EF6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:eaden_mckee:bblog:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"3322F9E9-E9EC-47ED-BB6A-2FE653C0B581"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109665351632048&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12691","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11303","source":"cve@mitre.org"},{"url":"http://www.servers.co.nz/security/SCN200409-1.php","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17552","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109665351632048&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11303","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.servers.co.nz/security/SCN200409-1.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17552","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1571","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to (1) auto-acronyms.php, (2) auto-archive.php, (3) ount-article-views.php, (4) kses.php, (5) custom-quick-tags.php, (6) disable-all-comments.php, (7) easy-date-format.php, (8) enable-disable-comments.php, (9) filter-by-author.php, (10) format-switcher.php, (11) long-to-short.php, (12) prospective-posting.php, or (13) sort-by-xfield.php, which displays the full path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aj-fork:aj-fork:167:*:*:*:*:*:*:*","matchCriteriaId":"FAB42474-4D4C-448B-9462-03ED772240EC"}]}]}],"references":[{"url":"http://echo.or.id/adv/adv07-y3dips-2004.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109664986210763&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17568","source":"cve@mitre.org"},{"url":"http://echo.or.id/adv/adv07-y3dips-2004.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109664986210763&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1572","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AJ-Fork 167 does not restrict access to directories such as (1) data, (2) inc, (3) plugins, (4) skins, or (5) tools, which allows remote attackers to list files in those directories via a direct HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aj-fork:aj-fork:167:*:*:*:*:*:*:*","matchCriteriaId":"FAB42474-4D4C-448B-9462-03ED772240EC"}]}]}],"references":[{"url":"http://echo.or.id/adv/adv07-y3dips-2004.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109664986210763&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011484","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11301","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17569","source":"cve@mitre.org"},{"url":"http://echo.or.id/adv/adv07-y3dips-2004.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109664986210763&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17569","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1573","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aj-fork:aj-fork:167:*:*:*:*:*:*:*","matchCriteriaId":"FAB42474-4D4C-448B-9462-03ED772240EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:0.88:*:*:*:*:*:*:*","matchCriteriaId":"35BB2223-5238-4E3D-895A-BE6793AE3A9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4254A63A-3202-4D06-90B3-12D10511BC2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9A2D600-BEA7-4936-B210-91629B2EFCDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"674CC558-E3B7-4120-879A-0408A595C5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"EF7BF20D-34F9-453A-A54A-3A0B39EAAD58"}]}]}],"references":[{"url":"http://echo.or.id/adv/adv07-y3dips-2004.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109664986210763&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011484","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11301","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17571","source":"cve@mitre.org"},{"url":"http://echo.or.id/adv/adv07-y3dips-2004.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109664986210763&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011484","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1574","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Vypress Messenger 3.5.1 and earlier allows remote attackers to execute arbitrary code via a message with a long first field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:vypress:vypres_messenger:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5C31B43A-AC59-49D7-98EA-918FDBD857FA"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/vymesbof-adv.txt","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=109665993315769&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12605","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1011489","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10451","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11310","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17572","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/vymesbof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=109665993315769&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1011489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17572","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1575","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attributes in a crafted XML document."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:xerces-c\\+\\+:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"AB6DCE7B-2112-46A3-8E6C-013099FFB722"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109674050017645&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12715","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11312","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17575","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109674050017645&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17575","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1576","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Judge Dredd: Dredd vs. Death 1.01 and earlier allows remote attackers to cause a denial of service (application crash) via format string specifiers in a chat message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:megalo:judge_dredd_dredd_vs._death:1.01:*:*:*:*:*:*:*","matchCriteriaId":"CC063D11-C279-481D-AB27-5AAA80CF4B69"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109674541519610&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12710","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17579","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109674541519610&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17579","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1577","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in PHP Links allows remote attackers to gain sensitive information via an invalid show parameter, which reveals the full path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:greg_donald:phplinks:*:*:*:*:*:*:*:*","matchCriteriaId":"0C4E8733-FDDB-4D30-A73E-2F8D9961F539"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109693280416747&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17588","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109693280416747&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17588","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1578","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the HTTP header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"615FFE8F-1EDA-4CE2-BC6F-E7348DAE37E1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109701091207517&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12740","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11332","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17604","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109701091207517&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17604","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1579","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid cat_id parameter, which reveals the full path in a PHP error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:devellion:cubecart:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3CE60304-C846-4670-AC65-FB86EF7A0AB4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109713382400457&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17630","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109713382400457&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17630","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1580","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:devellion:cubecart:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3CE60304-C846-4670-AC65-FB86EF7A0AB4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109713382400457&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12764","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/15278","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11337","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17632","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109713382400457&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12764","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/15278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17632","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1581","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3) cp.inc.php, which reveals the path in a PHP error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackboard:blackboard:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"1BA33F1A-F99F-4C6B-B4C7-91A73A832DCE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109707701719659&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17636","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109707701719659&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1582","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in BlackBoard 1.5.1 allows remote attackers to execute arbitrary PHP code by modifying the libpath parameter (incorrectly called \"libpach\") to reference a URL on a remote web server that contains _more.php, as demonstrated using checkdb.inc.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blackboard_internet_newsboard_system:blackboard_internet_newsboard_system:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F2643E45-8B41-4253-8EF5-13B720FE5CC7"}]}]}],"references":[{"url":"http://blackboard.unclassified.de/70%2C1#1031","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109707701719659&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12757","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11336","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17637","source":"cve@mitre.org"},{"url":"http://blackboard.unclassified.de/70%2C1#1031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109707701719659&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17637","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1583","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the FTP server in TriDComm 1.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in FTP commands such as (1) DIR, (2) GET, or (3) PUT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tridcomm:tridcomm:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E449E1C6-E0D8-4E08-BE41-82EB4D8A7497"},{"vulnerable":true,"criteria":"cpe:2.3:a:tridcomm:tridcomm:1.3:*:*:*:*:*:*:*","matchCriteriaId":"12EEEDB5-0F8C-4C80-A230-77DF3794D322"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027195.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109709637732276&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12755","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11343","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17631","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027195.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109709637732276&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17631","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1584","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the text parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:1.2:*:*:*:*:*:*:*","matchCriteriaId":"FF1FE320-DF71-42EC-A0F0-300F7D6D4AB4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109716327724041&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12773","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://wordpress.org/development/2004/10/wp-121/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-12.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11348","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17649","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109716327724041&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://wordpress.org/development/2004/10/wp-121/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-12.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17649","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1585","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Flash Messaging 5.2.0g (rev 1.1.2) and earlier allows remote attackers to cause a denial of service (application crash) via certain wide characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jera_technology:flash_messaging:5.2:*:*:*:*:*:*:*","matchCriteriaId":"3B6F53D1-BF02-4BE6-97AE-39131462BDDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jera_technology:flash_messaging:5.2g:*:*:*:*:*:*:*","matchCriteriaId":"E320BA4D-FFB8-496A-B5EB-F34F277C1048"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109716787607302&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12759/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011569","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11351","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17647","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109716787607302&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12759/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17647","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1586","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Flash Messaging clients can ignore disconnecting commands such as \"shutdown\" from the Flash Messaging Server 5.2.0g (rev 1.1.2), which could allow remote attackers to stay connected."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jera_technology:flash_messaging_server:5.2.0g:*:*:*:*:*:*:*","matchCriteriaId":"10F71B5E-C298-4A7D-A0DA-8C861658C6CE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109716787607302&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12759/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011569","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109716787607302&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12759/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-1587","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Monolith games including (1) Alien versus Predator 2 1.0.9.6 and earlier, (2) Blood 2 2.1 and earlier, (3) No one lives forever 1.004 and earlier and (4) Shogo 2.2 and earlier allows remote attackers to cause a denial of service (application crash) via a long secure Gamespy query."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:alien_versus_predator:2.1.0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"84823569-66F9-4DA3-9057-EA533296339C"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:blood:2_2.1:*:*:*:*:*:*:*","matchCriteriaId":"797A59B9-B09C-42F6-A627-BCD0A4297668"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:no_one_lives_forever:1.0.004:*:*:*:*:*:*:*","matchCriteriaId":"1971BF28-58C0-4093-AB32-760F7F6A5763"},{"vulnerable":true,"criteria":"cpe:2.3:a:monolith_productions:shogo:2.2:*:*:*:*:*:*:*","matchCriteriaId":"90F3AC85-0999-4421-95A6-E0A74C367C22"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109728194025487&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=109727077824860&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12776/","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Oct/1011603.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=10635","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11354","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17665","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17668","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17669","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17670","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109728194025487&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=109727077824860&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12776/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2004/Oct/1011603.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=10635","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17670","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1588","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary SQL code via the (1) QuestionNumber and Category parameters to Forum.asp or (2) Username and Password parameter to Login_Exec.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gosmart:gosmart_message_board:*:*:*:*:*:*:*:*","matchCriteriaId":"957F8472-0B3A-4D20-8520-6370E1895F8F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109751522823011&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12790/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11361","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17678","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109751522823011&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12790/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17678","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1589","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in GoSmart Message Board allows remote attackers to execute inject web script or HTML via the (1) Category parameter to Forum.asp or (2) MainMessageID parameter to ReplyToQuestion.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gosmart:gosmart_message_board:*:*:*:*:*:*:*:*","matchCriteriaId":"957F8472-0B3A-4D20-8520-6370E1895F8F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109751522823011&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12790/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11361","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17679","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109751522823011&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12790/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17679","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1590","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Clientexec allows remote attackers to gain sensitive information via an HTTP request to phpinfo.php, which calls the phpinfo function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clientexec:clientexec:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"26C970D1-62F9-45D6-AF55-8E3182B68A86"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109787365801512&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12862","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17741","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109787365801512&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17741","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1591","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface for Micronet Wireless Broadband Router SP916BM running firmware before 1.9 08/04/2004 resets the password to the default password when the router is shut off, which could allow remote attackers to gain access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:micronet:sp916bm:1.9:*:*:*:*:*:*:*","matchCriteriaId":"DF913EF1-2FF3-48CE-B520-3DBE2E32E3D4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109759963126161&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17697","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109759963126161&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1592","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in ocPortal 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the req_path parameter to reference a URL on a remote web server that contains a malicious funcs.php script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ocportal:ocportal:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C2C4F588-827B-4B79-886C-60D8D55D3997"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109763314312828&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12811/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.hackgen.org/advisories/hackgen-2004-002.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11368","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17699","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109763314312828&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12811/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.hackgen.org/advisories/hackgen-2004-002.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17699","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1593","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in render.UserLayoutRootNode.uP in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via the utf parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sct_corporation:campus_pipeline:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AA8F11F3-4A14-4E3B-B857-17E04E7CDDE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sct_corporation:campus_pipeline:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D8829E6F-4EAB-4744-84A2-965FE8BEB099"},{"vulnerable":true,"criteria":"cpe:2.3:a:sct_corporation:campus_pipeline:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E8C36A25-BD0F-4A8C-A8C7-CC867E0E6D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:sct_corporation:campus_pipeline:2.2:*:*:*:*:*:*:*","matchCriteriaId":"CA3D5F68-33F8-4AE5-951C-894106F60406"},{"vulnerable":true,"criteria":"cpe:2.3:a:sct_corporation:campus_pipeline:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6B27B752-77C2-404F-8D13-1E3B7054F065"},{"vulnerable":true,"criteria":"cpe:2.3:a:sct_corporation:campus_pipeline:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D602C264-D403-4159-947E-B4914CAC560C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sct_corporation:campus_pipeline:3.2:*:*:*:*:*:*:*","matchCriteriaId":"451B7649-C483-4531-B580-F2DE916BFF64"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109768337007983&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12826","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11392","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17704","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109768337007983&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1594","sourceIdentifier":"cve@mitre.org","published":"2004-10-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in FuseTalk 4.0 allows remote attackers to execute arbitrary web script via an img src tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-zone_media_inc.:fusetalk:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F907A7C8-40F9-40C9-A01D-1B0127A64A44"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109768460312168&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12823","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11393","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17701","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109768460312168&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17701","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1595","sourceIdentifier":"cve@mitre.org","published":"2004-10-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field."}],"vendorComments":[{"organization":"ShixxNOTE","comment":"Upgrade to the latest version of ShixxNOTE 6.net (released December 2006), available from the ShixxNOTE 6.net Web site. http://www.shixxnote.com","lastModified":"2007-11-16T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shixxnote:shixxnote:6.net:*:*:*:*:*:*:*","matchCriteriaId":"05DED77F-3BA7-4DC2-BA22-BABA8484C936"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109778648232233&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12822/","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11409","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17705","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109778648232233&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12822/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17705","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1596","sourceIdentifier":"cve@mitre.org","published":"2004-10-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as passwords and router settings via a direct HTTP request to app_sta.stm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3cradsl72:*:*:*:*:*:*:*:*","matchCriteriaId":"F3B7509E-5486-47D2-90A8-984CBD420133"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109778914829901&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109810854031673&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/378551","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11408","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17723","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109778914829901&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109810854031673&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/378551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1597","sourceIdentifier":"cve@mitre.org","published":"2004-10-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RIM Blackberry 7230 running RIM Blackberry OS 3.7 SP1 allows remote attackers to cause a denial of service (device reboot and possibly data corruption) via a calendar message with a long Location field, which triggers a watchdog while the message is being stored."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rim:blackberry:7230_3.7.1_.41:*:*:*:*:*:*:*","matchCriteriaId":"3AC44A87-CE11-48F8-BBF1-7971784D4A43"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027487.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109769022430842&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109778267829493&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12814","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/7925/8142/Known_%20Issues_-_HexView_advisory_on_BlackBerry_buffer_overflow%2C_DoS%2C_and_data_loss.html?nodeid=737173&vernum=0","source":"cve@mitre.org"},{"url":"http://www.hexview.com/docs/20041012-1.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11389","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17700","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027487.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109769022430842&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109778267829493&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.blackberry.com/knowledgecenterpublic/livelink.exe/fetch/2000/8021/7925/8142/Known_%20Issues_-_HexView_advisory_on_BlackBerry_buffer_overflow%2C_DoS%2C_and_data_loss.html?nodeid=737173&vernum=0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hexview.com/docs/20041012-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1598","sourceIdentifier":"cve@mitre.org","published":"2004-10-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Adobe Acrobat and Acrobat Reader 6.0 allow remote attackers to read arbitrary files via a PDF file that contains an embedded Shockwave (swf) file that references files outside of the temporary directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0:*:*:*:*:*:*:*","matchCriteriaId":"183B5940-2310-4D2E-99F0-9792A801A442"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4F8BB13E-2732-4F9E-A588-EA1C00893C8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E5FCDCBF-597B-439C-8D8B-2819FC70C567"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0:*:*:*:*:*:*:*","matchCriteriaId":"C0BB7C0C-B1D6-4733-BA91-022A1A7FB2E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0B131DB8-4B6A-4AF2-8D5E-B5EA1AEBFB3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:adobe:acrobat_reader:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5B9351C2-16ED-4766-B417-8DB3A8766C2F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109771686326956&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109779541602447&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109812210520520&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11386","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17694","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109771686326956&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109779541602447&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109812210520520&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17694","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1599","sourceIdentifier":"cve@mitre.org","published":"2004-10-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to execute arbitrary web script or HTML via the (1) query or (2) nick parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coolphp:coolphpweb_portal:1.0_stable:*:*:*:*:*:*:*","matchCriteriaId":"6AEB4CD4-0C53-4515-83C4-EB56D2317343"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109810941419669&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12850","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011748","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11437","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17742","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109810941419669&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1600","sourceIdentifier":"cve@mitre.org","published":"2004-10-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"index.php in CoolPHP 1.0-stable allows remote attackers to gain sensitive information via an invalid op parameter, which reveals the path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coolphp:coolphp:1.0_stable:*:*:*:*:*:*:*","matchCriteriaId":"D11A5222-3A25-4DC8-9A54-58F78175E252"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109810941419669&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12850","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011748","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17744","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109810941419669&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17744","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1601","sourceIdentifier":"cve@mitre.org","published":"2004-10-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files and execute local PHP scripts via a .. (dot dot) in the op parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coolphp:coolphp_web_portal:1.0_stable:*:*:*:*:*:*:*","matchCriteriaId":"F07E641D-7204-4D45-BF0B-6730683C5E24"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109810941419669&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12850","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011748","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11437","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17745","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109810941419669&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12850","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17745","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1602","sourceIdentifier":"cve@mitre.org","published":"2004-10-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing the server response."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2.0","versionEndIncluding":"1.2.10","matchCriteriaId":"34CC32FB-7962-44AE-A5B9-46156381B3BC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109786760926133&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011687","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11430","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17724","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=109786760926133&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011687","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1603","sourceIdentifier":"cve@mitre.org","published":"2004-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:9.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFF1B164-A4F9-4291-B25E-1FDFCE0A4E78"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109811572123753&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=109811654104208&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/12865","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11449","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11455","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17779","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17780","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=109811572123753&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=109811654104208&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/12865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1604","sourceIdentifier":"cve@mitre.org","published":"2004-09-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink attack on the _private directory, which is created when Front Page extensions are enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:9.9.1_r3:*:*:*:*:*:*:*","matchCriteriaId":"414CFCA8-87FC-436E-9C41-ACB316578E3C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109811762230326&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109811762230326&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1605","sourceIdentifier":"cve@mitre.org","published":"2004-10-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype=Administrator."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:best_software:saleslogix:*:*:*:*:*:*:*:*","matchCriteriaId":"9B38276F-E752-409D-A8D7-0A0CCC339FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:saleslogix_corporation:saleslogix:2000.0:*:*:*:*:*:*:*","matchCriteriaId":"F519469F-BB85-4212-BD09-FED497F790D5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109811852218478&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12883","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011769","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10942","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11450","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17749","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109811852218478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17749","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1606","sourceIdentifier":"cve@mitre.org","published":"2004-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP request, which might also leak sensitive information in the ErrorLogMsg cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:best_software:saleslogix:*:*:*:*:*:*:*:*","matchCriteriaId":"9B38276F-E752-409D-A8D7-0A0CCC339FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:saleslogix_corporation:saleslogix:2000.0:*:*:*:*:*:*:*","matchCriteriaId":"F519469F-BB85-4212-BD09-FED497F790D5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109811852218478&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12883","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011769","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10943","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11450","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17750","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109811852218478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10943","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17750","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1607","sourceIdentifier":"cve@mitre.org","published":"2004-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2) Attachment request with an invalid file parameter, which reveals the path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:best_software:saleslogix:*:*:*:*:*:*:*:*","matchCriteriaId":"9B38276F-E752-409D-A8D7-0A0CCC339FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:saleslogix_corporation:saleslogix:2000.0:*:*:*:*:*:*:*","matchCriteriaId":"F519469F-BB85-4212-BD09-FED497F790D5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109811852218478&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12883","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011769","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10944","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11450","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17751","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109811852218478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17751","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1608","sourceIdentifier":"cve@mitre.org","published":"2004-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the id parameter in a view operation."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:best_software:saleslogix:*:*:*:*:*:*:*:*","matchCriteriaId":"9B38276F-E752-409D-A8D7-0A0CCC339FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:saleslogix_corporation:saleslogix:2000.0:*:*:*:*:*:*:*","matchCriteriaId":"F519469F-BB85-4212-BD09-FED497F790D5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109811852218478&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12883","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011769","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10945","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11450","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17752","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109811852218478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17752","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1609","sourceIdentifier":"cve@mitre.org","published":"2004-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which could allow remote attackers to gain access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:best_software:saleslogix:*:*:*:*:*:*:*:*","matchCriteriaId":"9B38276F-E752-409D-A8D7-0A0CCC339FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:saleslogix_corporation:saleslogix:2000.0:*:*:*:*:*:*:*","matchCriteriaId":"F519469F-BB85-4212-BD09-FED497F790D5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109811852218478&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12883","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011769","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10946","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11450","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17753","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109811852218478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10946","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17753","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1610","sourceIdentifier":"cve@mitre.org","published":"2004-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow remote authenticated users to create arbitrary files and execute code via the (1) vMME.AttachmentPath or (2) vMME.LibraryPath variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:best_software:saleslogix:*:*:*:*:*:*:*:*","matchCriteriaId":"9B38276F-E752-409D-A8D7-0A0CCC339FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:saleslogix_corporation:saleslogix:2000.0:*:*:*:*:*:*:*","matchCriteriaId":"F519469F-BB85-4212-BD09-FED497F790D5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109811852218478&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109811852218478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1611","sourceIdentifier":"cve@mitre.org","published":"2004-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary SLX commands on the server or spoof the server via a man-in-the-middle (MITM) attack, or (2) obtain the database password via a GetConnection request to TCP port 1707."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:best_software:saleslogix:*:*:*:*:*:*:*:*","matchCriteriaId":"9B38276F-E752-409D-A8D7-0A0CCC339FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:saleslogix_corporation:saleslogix:2000.0:*:*:*:*:*:*:*","matchCriteriaId":"F519469F-BB85-4212-BD09-FED497F790D5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109811852218478&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12883","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011769","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10947","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10948","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11450","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17754","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109811852218478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10947","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10948","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17754","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1612","sourceIdentifier":"cve@mitre.org","published":"2004-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in SalesLogix 6.1 allows remote attackers to upload arbitrary files via a .. (dot dot) in a ProcessQueueFile request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:saleslogix_corporation:saleslogix:2000.0:*:*:*:*:*:*:*","matchCriteriaId":"F519469F-BB85-4212-BD09-FED497F790D5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109811852218478&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12883","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011769","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10949","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11450","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17765","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109811852218478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17765","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1613","sourceIdentifier":"cve@mitre.org","published":"2004-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a null character and some trailing characters, as demonstrated by mangleme."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A76ACC55-754D-4501-8312-5A4E10D053B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8987151-0901-4547-B750-5DC470BB9CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"53E60BCC-6D1C-489E-9F3B-9BE42B46704F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66A87ED8-9E1F-4C2C-B806-A41765081C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C795D86F-9B08-41FE-B82B-5BBB3DE6357D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"2637D552-4A3D-4867-B52A-ACCED8681AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CC237C8-CFE0-4128-B549-93CD16894E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*","matchCriteriaId":"6B8EA79A-8426-44CF-AF13-58F7EF8B6D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"367A5D46-0FF3-4140-9478-251363822E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CAA58EE9-05C7-4395-A8A4-5F54BE4C5DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C656A621-BE62-4BB8-9B25-A3916E60FA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F8DE4889-424F-4A44-8C14-9F18821CE961"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*","matchCriteriaId":"82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*","matchCriteriaId":"1003D688-3EEA-45F9-BB2C-5BAB395D7678"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED69BEB9-8D83-415B-826D-9D17FB67976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9AE678D7-812D-4C55-91B0-F3AC6BE0CD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"098458D4-635B-4A4D-9472-39370094E1ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BCDB64E5-AE26-43DF-8A66-654D5D22A635"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6BF63077-4E98-497D-8CE6-B84B022DB21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*","matchCriteriaId":"FCEAEDEB-0EE7-4221-B9B8-65438580D331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*","matchCriteriaId":"150F1B28-0FAB-4880-B1D5-7F244A1C4D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2FE7EA3B-3BF8-4696-9488-78506074D62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"C883B45F-D28D-428E-AAF7-F93522A229DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.8:alpha2:*:*:*:*:*:*","matchCriteriaId":"10349BA5-70D3-4D11-94F6-A77D8570CB06"},{"vulnerable":true,"criteria":"cpe:2.3:a:sgi:propack:3.0:*:*:*:*:*:*:*","matchCriteriaId":"29DC217F-C257-4A3C-9CBD-08010C30BEC3"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*","matchCriteriaId":"2641EE56-6F9D-400B-B456-877F4DA79B10"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"E0B458EA-495E-40FA-9379-C03757F7B1EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*","matchCriteriaId":"1728AB5D-55A9-46B0-A412-6F7263CAEB5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_servers:*:*:*:*:*","matchCriteriaId":"81B543F9-C209-46C2-B0AE-E14818A6992E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"EC79FF22-2664-4C40-B0B3-6D23B5F45162"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation:*:*:*:*:*","matchCriteriaId":"DB89C970-DE94-4E09-A90A-077DB83AD156"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF3BBBC3-3EF9-4E24-9DE2-627E172A5473"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6996B14-925B-46B8-982F-3545328B506B"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:*:*:*:*:*:*","matchCriteriaId":"138985E6-5107-4E8B-A801-C3D5FE075227"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*","matchCriteriaId":"9B502A61-44FB-4CD4-85BE-88D4ACCCA441"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:7.3:*:i686:*:*:*:*:*","matchCriteriaId":"05853955-CA81-40D3-9A70-1227F3270D3C"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*","matchCriteriaId":"F3FDE8C4-5FFD-4CC2-9F35-7C32043966D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*","matchCriteriaId":"8DBD9D3C-40AB-449D-A9A8-A09DF2DEDB96"}]}]}],"references":[{"url":"http://lcamtuf.coredump.cx/mangleme/gallery/","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109811406620511&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011810","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-323.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11439","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17805","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10227","source":"cve@mitre.org"},{"url":"http://lcamtuf.coredump.cx/mangleme/gallery/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109811406620511&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-323.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10227","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1614","sourceIdentifier":"cve@mitre.org","published":"2004-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla allows remote attackers to cause a denial of service (application crash from invalid memory access) via an \"unusual combination of visual elements,\" including several large MARQUEE tags with large height parameters, as demonstrated by mangleme."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CCDAEAE6-BA9F-4D40-B264-4A72930239E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*","matchCriteriaId":"C9296197-0EE0-4CC0-A11F-E44E3443E990"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*","matchCriteriaId":"A76ACC55-754D-4501-8312-5A4E10D053B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A8987151-0901-4547-B750-5DC470BB9CF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"53E60BCC-6D1C-489E-9F3B-9BE42B46704F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*","matchCriteriaId":"66A87ED8-9E1F-4C2C-B806-A41765081C9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*","matchCriteriaId":"C795D86F-9B08-41FE-B82B-5BBB3DE6357D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*","matchCriteriaId":"2637D552-4A3D-4867-B52A-ACCED8681AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CC237C8-CFE0-4128-B549-93CD16894E71"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*","matchCriteriaId":"6B8EA79A-8426-44CF-AF13-58F7EF8B6D88"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2:beta:*:*:*:*:*:*","matchCriteriaId":"367A5D46-0FF3-4140-9478-251363822E9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CAA58EE9-05C7-4395-A8A4-5F54BE4C5DAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3:*:*:*:*:*:*:*","matchCriteriaId":"C656A621-BE62-4BB8-9B25-A3916E60FA12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F8DE4889-424F-4A44-8C14-9F18821CE961"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:*:*:*:*:*:*:*","matchCriteriaId":"4D3F91A1-7DD9-4146-8BA4-BE594C66DD30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:alpha:*:*:*:*:*:*","matchCriteriaId":"82A6419D-0E94-4D80-8B07-E5AB4DBA2F28"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4:beta:*:*:*:*:*:*","matchCriteriaId":"1003D688-3EEA-45F9-BB2C-5BAB395D7678"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"ED69BEB9-8D83-415B-826D-9D17FB67976B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9AE678D7-812D-4C55-91B0-F3AC6BE0CD58"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.5:*:*:*:*:*:*:*","matchCriteriaId":"BCDB64E5-AE26-43DF-8A66-654D5D22A635"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.6:*:*:*:*:*:*:*","matchCriteriaId":"6BF63077-4E98-497D-8CE6-B84B022DB21D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*","matchCriteriaId":"FCEAEDEB-0EE7-4221-B9B8-65438580D331"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*","matchCriteriaId":"150F1B28-0FAB-4880-B1D5-7F244A1C4D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"2FE7EA3B-3BF8-4696-9488-78506074D62D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"C883B45F-D28D-428E-AAF7-F93522A229DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.8:alpha2:*:*:*:*:*:*","matchCriteriaId":"10349BA5-70D3-4D11-94F6-A77D8570CB06"}]}]}],"references":[{"url":"http://lcamtuf.coredump.cx/mangleme/gallery/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109811406620511&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011810","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11440","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://lcamtuf.coredump.cx/mangleme/gallery/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109811406620511&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011810","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11440","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-1615","sourceIdentifier":"cve@mitre.org","published":"2004-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This was fixed in version 7.60.","cveTags":[],"descriptions":[{"lang":"en","value":"Opera allows remote attackers to cause a denial of service (invalid memory reference and application crash) via a web page or HTML email that contains a TBODY tag with a large COL SPAN value, as demonstrated by mangleme."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"7.54","matchCriteriaId":"BFE75E76-E20D-47A4-9603-0AF46F733AEF"}]}]}],"references":[{"url":"http://lcamtuf.coredump.cx/mangleme/gallery/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109811406620511&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/11441","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17806","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lcamtuf.coredump.cx/mangleme/gallery/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109811406620511&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/11441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1616","sourceIdentifier":"cve@mitre.org","published":"2004-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Links allows remote attackers to cause a denial of service (memory consumption) via a web page or HTML email that contains a table with a td element and a large rowspan value,as demonstrated by mangleme."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:links:links:0.91:*:*:*:*:*:*:*","matchCriteriaId":"BD3083F8-C52D-4040-9C1E-4D9A25D401EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:links:links:0.92:*:*:*:*:*:*:*","matchCriteriaId":"9D5A50EF-D041-4962-9F94-944A9CC5C87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:links:links:0.93:*:*:*:*:*:*:*","matchCriteriaId":"524064EF-9CBA-4234-896E-FA4AB4F86AA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:links:links:0.94:*:*:*:*:*:*:*","matchCriteriaId":"E01D8156-8286-4C1A-B31E-0810A18AAE9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:links:links:0.95:*:*:*:*:*:*:*","matchCriteriaId":"D4FB56E3-2F15-4C73-A06E-4DD8DB8A0913"},{"vulnerable":true,"criteria":"cpe:2.3:a:links:links:0.96:*:*:*:*:*:*:*","matchCriteriaId":"9711D879-CD97-487D-9DC1-5B26145874C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:links:links:0.97:*:*:*:*:*:*:*","matchCriteriaId":"54BF9FD7-5CCA-499E-8DA7-60A467CEDB1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:links:links:0.98:*:*:*:*:*:*:*","matchCriteriaId":"8C2F8232-08F5-4901-AD98-F204309BCA56"},{"vulnerable":true,"criteria":"cpe:2.3:a:links:links:0.99:*:*:*:*:*:*:*","matchCriteriaId":"9F807EF1-AA6F-4924-850B-B385493495DB"}]}]}],"references":[{"url":"http://lcamtuf.coredump.cx/mangleme/gallery/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109811406620511&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011808","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11442","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17803","source":"cve@mitre.org"},{"url":"http://lcamtuf.coredump.cx/mangleme/gallery/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109811406620511&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17803","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1617","sourceIdentifier":"cve@mitre.org","published":"2004-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service (infinite loop) via a web page or HTML email that contains invalid HTML including (1) a TEXTAREA tag with a large COLS value and (2) a large tag name in an element that is not terminated, as demonstrated by mangleme.  NOTE: a followup suggests that the relevant trigger for this issue is the large COLS value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.7:*:*:*:*:*:*:*","matchCriteriaId":"E01953FC-9DA9-4C14-9989-6A81AA2B42E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8:*:*:*:*:*:*:*","matchCriteriaId":"08198583-325B-42B7-8856-14C864838AE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8.1:*:*:*:*:*:*:*","matchCriteriaId":"634EEA7F-6A30-4044-80EC-68119306B350"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8.2_rel1:*:*:*:*:*:*:*","matchCriteriaId":"A0387441-C971-487A-8379-1F2B91CD6EC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8.3:*:*:*:*:*:*:*","matchCriteriaId":"2DA626DE-D9B2-4764-80AA-7D4F499184F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8.3_dev22:*:*:*:*:*:*:*","matchCriteriaId":"FD071013-25ED-4898-B603-2D3C97059357"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8.3_pre5:*:*:*:*:*:*:*","matchCriteriaId":"8DB0DABE-3798-466D-9C2E-AC9CB38AA75F"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8.3_rel1:*:*:*:*:*:*:*","matchCriteriaId":"D7680912-C6C7-44BD-AD1B-0828E4F03482"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8.4:*:*:*:*:*:*:*","matchCriteriaId":"6033263D-6B30-4002-B9F5-4062FD09B815"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8.4_rel1:*:*:*:*:*:*:*","matchCriteriaId":"DCD15F97-2B1A-4C28-B5BC-6B6A6E389831"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8.5:*:*:*:*:*:*:*","matchCriteriaId":"CBA62F01-C6E9-4A3D-806A-AED37BF452C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8.5_dev2:*:*:*:*:*:*:*","matchCriteriaId":"83165BE0-829E-4CAC-A68B-6578F925EB3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8.5_dev3:*:*:*:*:*:*:*","matchCriteriaId":"69027905-81EC-4778-A1C9-3F848618EDD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8.5_dev4:*:*:*:*:*:*:*","matchCriteriaId":"0801AD2E-7EE0-45F2-9BC1-028E38EA93F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8.5_dev5:*:*:*:*:*:*:*","matchCriteriaId":"2E19D9AA-BE49-497E-807E-B020463BF8FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:university_of_kansas:lynx:2.8.5_dev8:*:*:*:*:*:*:*","matchCriteriaId":"79AB7C16-A5E4-4D7F-B879-5E13917449C3"}]}]}],"references":[{"url":"http://lcamtuf.coredump.cx/mangleme/gallery/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109811406620511&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20383","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011809","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1076","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1077","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1085","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/435689/30/4740/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11443","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17804","source":"cve@mitre.org"},{"url":"http://lcamtuf.coredump.cx/mangleme/gallery/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109811406620511&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011809","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1076","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1077","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1085","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/435689/30/4740/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17804","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1618","sourceIdentifier":"cve@mitre.org","published":"2004-10-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed mp2 stream."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vypress:tonecast:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3","matchCriteriaId":"D6E51945-B028-423B-A910-E68F54A2810A"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/toneboom-adv.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109820344806472&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12890","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11462","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17775","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/toneboom-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109820344806472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17775","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1619","sourceIdentifier":"cve@mitre.org","published":"2004-10-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Privateer's Bounty: Age of Sail II allows remote attackers to execute arbitrary code via a long nickname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:akella:privateers_bounty_age_of_sail_ii:1.4.51:*:*:*:*:*:*:*","matchCriteriaId":"05D016CB-6F26-4ADB-99F1-7A38872BFB08"},{"vulnerable":true,"criteria":"cpe:2.3:a:akella:privateers_bounty_age_of_sail_ii:1.55:*:*:*:*:*:*:*","matchCriteriaId":"CB4180F4-4802-4343-BCD1-1B9EC7709F4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:akella:privateers_bounty_age_of_sail_ii:1.56:*:*:*:*:*:*:*","matchCriteriaId":"F8707BF6-4031-482A-AB14-250D885DCC89"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109829017407842&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12905","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11479","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17791","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109829017407842&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12905","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17791","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1620","sourceIdentifier":"cve@mitre.org","published":"2004-10-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.3:*:*:*:*:*:*:*","matchCriteriaId":"62233D77-9838-48AB-9A2D-F4EAA9E237EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.4:*:*:*:*:*:*:*","matchCriteriaId":"5A6F23BF-1C25-4A5E-9EC4-35A1A821A235"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.5:*:*:*:*:*:*:*","matchCriteriaId":"D2DCAE37-B4E9-490E-B441-CA6DD4DBBE28"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.5_pl1:*:*:*:*:*:*:*","matchCriteriaId":"F47E7512-FDB5-45F2-80B2-9BDAB856E856"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E7930F0-59AD-45D6-B79D-92DB88EFF4D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6_pl1:*:*:*:*:*:*:*","matchCriteriaId":"75786060-F4F7-4491-8239-2081EBD3AE34"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6_pl2:*:*:*:*:*:*:*","matchCriteriaId":"742C3558-301D-4930-859F-7A8AAC231689"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6_pl3:*:*:*:*:*:*:*","matchCriteriaId":"5BAFBFFE-DCBB-460A-9E43-9CC5A1046755"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6_rc1:*:*:*:*:*:*:*","matchCriteriaId":"41A56925-4CE9-4843-94BE-E35DBF6CFA64"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6_rc2:*:*:*:*:*:*:*","matchCriteriaId":"785115A5-380A-462E-88F6-718320DD7E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7_beta1:*:*:*:*:*:*:*","matchCriteriaId":"62C28957-2724-406D-BAD4-DDCDE8CFA843"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7_beta2:*:*:*:*:*:*:*","matchCriteriaId":"5FE669F3-75FA-4237-8424-109FE52F59ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7_beta3:*:*:*:*:*:*:*","matchCriteriaId":"18814B9C-FE3E-4BB4-99E5-E3A88666B0F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7_beta4:*:*:*:*:*:*:*","matchCriteriaId":"E80A9CDA-C3E2-474F-8E43-440C72B0E8E7"}]}]}],"references":[{"url":"http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/comment.php?rev=1.49&view=markup","source":"cve@mitre.org"},{"url":"http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/exit.php?rev=1.10&view=markup","source":"cve@mitre.org"},{"url":"http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/index.php?rev=1.52&view=markup","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109841283115808&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12909/","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011864","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=276694","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11013","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11038","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11039","source":"cve@mitre.org"},{"url":"http://www.s9y.org/5.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11497","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17798","source":"cve@mitre.org"},{"url":"http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/comment.php?rev=1.49&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/exit.php?rev=1.10&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/index.php?rev=1.52&view=markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109841283115808&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12909/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011864","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=276694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11039","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s9y.org/5.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17798","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1621","sourceIdentifier":"cve@mitre.org","published":"2004-10-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"NOTE: this issue has been disputed by the vendor.  Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of (1) computed for display, (2) computed when composed, or (3) computed text element fields.  NOTE: the vendor has disputed this issue, saying that it is not a problem with Notes/Domino itself, but with the applications that do not properly handle this feature"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A9989FEB-3B5E-40FF-BDBF-CFC835BCF93B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B4B2AFF7-3921-402A-AE7A-BB9E2E8AA0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C1320064-F0E9-42C8-8E1C-9037684FA693"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.0.2_cf2:*:*:*:*:*:*:*","matchCriteriaId":"64AB8494-6BC9-43CB-A645-43944B03D10A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"06DBE88F-F765-448E-88AF-3ED9FB98181A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"0766C3F9-D2A2-4A58-9FF7-11B57232DEA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C00B8057-26DF-4064-A934-0AA88A0C1A6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"8EFA5487-2D61-4E61-98A3-51882A8CE0C4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109812960023736&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109841682529328&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12891","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011779","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21187833","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/404382","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11458","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17758","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109812960023736&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109841682529328&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011779","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21187833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/404382","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1622","sourceIdentifier":"cve@mitre.org","published":"2004-10-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in dosearch.php in UBB.threads 3.4.x allows remote attackers to execute arbitrary SQL statements via the Name parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:3.4:*:*:*:*:*:*:*","matchCriteriaId":"AA38F711-1FB7-4E7A-8D42-8B5A713B2FD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:3.5:*:*:*:*:*:*:*","matchCriteriaId":"7CF67B8C-C987-41DB-A4B2-A82D5624507C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109839925207038&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11502","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17821","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109839925207038&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1623","sourceIdentifier":"cve@mitre.org","published":"2004-10-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service (infinite loop in Explorer) via a WAV file with an invalid file header whose fmt chunk length is set to 0xFFFFFFFF."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*","matchCriteriaId":"B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*","matchCriteriaId":"403945FA-8676-4D98-B903-48452B46F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*","matchCriteriaId":"ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*","matchCriteriaId":"6A05337E-18A5-4939-85A0-69583D9B5AD9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109846319313443&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011880","source":"cve@mitre.org"},{"url":"http://www.hexview.com/docs/20041021-1.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/11053","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11503","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17864","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109846319313443&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hexview.com/docs/20041021-1.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/11053","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17864","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1624","sourceIdentifier":"cve@mitre.org","published":"2004-10-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, which allows local users to gain privileges via (1) the help topic interface in CCW32.exe, which launches Notepad, or (2) the help button in the Carbon Copy Scheduler (CCSched.exe)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:altiris:carbon_copy:5.0:*:*:*:*:*:*:*","matchCriteriaId":"374C9F53-18BA-4E0A-BF89-B8145E9B2457"},{"vulnerable":true,"criteria":"cpe:2.3:a:altiris:carbon_copy:6.0:*:*:*:*:*:*:*","matchCriteriaId":"FFD35FA6-CB7F-401F-B6BE-AEC9B3710C1A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109846296406459&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12962","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11500","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17838","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109846296406459&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1625","sourceIdentifier":"cve@mitre.org","published":"2004-10-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pGina 1.7.6 and possibly older versions, when the Restart or Shutdown options are enabled on the login screen, allows remote attackers to cause a denial of service by connecting via Remote Desktop and clicking restart or shutdown."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pgina:pgina:1.7.6:*:*:*:*:*:*:*","matchCriteriaId":"00A97867-BB17-4B4A-A027-18DE1385AD4D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109849689808245&w=2","source":"cve@mitre.org"},{"url":"http://www.lovebug.org/pgina_dos.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17836","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109849689808245&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.lovebug.org/pgina_dos.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17836","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1626","sourceIdentifier":"cve@mitre.org","published":"2004-10-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_server:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"A7AE6471-E7A0-4ACA-AD25-3E609ECA7B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_server:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8098E561-A312-4654-B0AA-5D4E03EE1644"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_server:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3289775C-AB9F-47E2-8E4A-B8D4929C0382"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109850947508816&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12941","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/857846","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/11030","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11508","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17823","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109850947508816&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/857846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/11030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1627","sourceIdentifier":"cve@mitre.org","published":"2004-10-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Ability Server 2.25, 2.32, 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long APPE command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_server:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"A7AE6471-E7A0-4ACA-AD25-3E609ECA7B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_server:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"8098E561-A312-4654-B0AA-5D4E03EE1644"},{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_server:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3289775C-AB9F-47E2-8E4A-B8D4929C0382"}]}]}],"references":[{"url":"http://lists.virus.org/dw-0day-0412/msg00004.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12941","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012464","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/12347","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11508","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18405","source":"cve@mitre.org"},{"url":"http://lists.virus.org/dw-0day-0412/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/12347","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18405","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1628","sourceIdentifier":"cve@mitre.org","published":"2004-10-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in log.c in rssh before 2.2.2 allows remote authenticated users to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pizzashack:rssh:*:*:*:*:*:*:*:*","versionEndExcluding":"2.2.2","matchCriteriaId":"2465D7FF-2ED4-425D-AE28-3D1D213AACC0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109855982425122&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/12954","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-28.xml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.pizzashack.org/rssh/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17831","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=109855982425122&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/12954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-28.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.pizzashack.org/rssh/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17831","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1629","sourceIdentifier":"cve@mitre.org","published":"2004-10-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Dwc_articles 1.6 and earlier allow remote attackers to execute arbitrary SQL statements."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:distinct_web_creations:dwc_articles:1.6:*:*:*:*:*:*:*","matchCriteriaId":"321CFBFD-38B1-464A-86B3-FEB0EACA0D6A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109855895702903&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11509","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17830","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109855895702903&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1630","sourceIdentifier":"cve@mitre.org","published":"2004-10-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the login form in Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to execute arbitrary web script or HTML via the url parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openwfe:work_flow_engine:1.4:*:*:*:*:*:*:*","matchCriteriaId":"9CDBAFA3-B893-4450-9B5A-AB94126F0C11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwfe:work_flow_engine:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"85EF32B5-A22D-43A8-B691-FB8D8FD3CEF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwfe:work_flow_engine:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F23F86C5-8892-4FDF-B50D-C21B82D6FB71"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwfe:work_flow_engine:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F9986087-2321-430C-A30F-4DF250CFC271"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwfe:work_flow_engine:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"67F4FE0C-AEDF-4B05-A89C-C09407A17CDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwfe:work_flow_engine:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0EF6571D-C333-4C1F-BC0C-F9D1254BE43C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109876304705234&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12970","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11514","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17853","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109876304705234&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17853","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1631","sourceIdentifier":"cve@mitre.org","published":"2004-10-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to conduct port scans of remote hosts by specifying the target in an rmi:// Worklist URL, then using the response times to infer the results."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openwfe:work_flow_engine:1.4:*:*:*:*:*:*:*","matchCriteriaId":"9CDBAFA3-B893-4450-9B5A-AB94126F0C11"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwfe:work_flow_engine:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"85EF32B5-A22D-43A8-B691-FB8D8FD3CEF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwfe:work_flow_engine:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"F23F86C5-8892-4FDF-B50D-C21B82D6FB71"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwfe:work_flow_engine:1.4.3:*:*:*:*:*:*:*","matchCriteriaId":"F9986087-2321-430C-A30F-4DF250CFC271"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwfe:work_flow_engine:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"67F4FE0C-AEDF-4B05-A89C-C09407A17CDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:openwfe:work_flow_engine:1.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0EF6571D-C333-4C1F-BC0C-F9D1254BE43C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109876304705234&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12970","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11514","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17852","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109876304705234&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1632","sourceIdentifier":"cve@mitre.org","published":"2004-10-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the arguments to wiki.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moniwiki:moniwiki:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"FD9C20DE-AD45-427D-867D-E52A36E96457"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109873622006103&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12975","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11516","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17835","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109873622006103&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17835","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1633","sourceIdentifier":"cve@mitre.org","published":"2004-10-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"process_bug.cgi in Bugzilla 2.9 through 2.18rc2 and 2.19 from CVS does not check edit permissions on the keywords field, which allows remote authenticated users to modify the keywords in a bug via the keywordaction parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.9:*:*:*:*:*:*:*","matchCriteriaId":"A3B3EF74-4784-47A7-8994-21EF489F4008"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*","matchCriteriaId":"F86EE5DB-442B-4C78-8152-AF1048C6A974"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*","matchCriteriaId":"19B82A1A-56EB-41D5-8619-2A717E3A6ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*","matchCriteriaId":"9B2FC5C7-B218-4B87-9805-F90AC0E7A281"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*","matchCriteriaId":"3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*","matchCriteriaId":"4869A709-AF79-49BD-A7D2-D48A8D79A085"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.19:*:*:*:*:*:*:*","matchCriteriaId":"725BD7BE-1769-4032-ADA8-9ED15528C770"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109872095201238&w=2","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=252638","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17840","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109872095201238&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=252638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1634","sourceIdentifier":"cve@mitre.org","published":"2004-10-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*","matchCriteriaId":"F86EE5DB-442B-4C78-8152-AF1048C6A974"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*","matchCriteriaId":"19B82A1A-56EB-41D5-8619-2A717E3A6ECF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*","matchCriteriaId":"9B2FC5C7-B218-4B87-9805-F90AC0E7A281"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*","matchCriteriaId":"3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*","matchCriteriaId":"4869A709-AF79-49BD-A7D2-D48A8D79A085"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109872095201238&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11511","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=263780","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17841","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109872095201238&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=263780","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1635","sourceIdentifier":"cve@mitre.org","published":"2004-10-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bugzilla 2.17.1 through 2.18rc2 and 2.19 from cvs, when using the insidergroup feature, does not sufficiently protect private attachments when there are changes to the metadata, such as filename, description, MIME type, or review flags, which allows remote authenticated users to obtain sensitive information when (1) viewing the bug activity log or (2) receiving bug change notification mails."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.4:*:*:*:*:*:*:*","matchCriteriaId":"8112FF13-B4CE-4DC7-85B1-C69D975F162B"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.6:*:*:*:*:*:*:*","matchCriteriaId":"86F5A3CA-E4A6-4E51-AC83-0C8F3E5E2C4E"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.8:*:*:*:*:*:*:*","matchCriteriaId":"F6E5E379-D475-42F3-B0DC-3D04C1D25566"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.10:*:*:*:*:*:*:*","matchCriteriaId":"893741D3-062B-45F9-B5A3-1B81058E7FD7"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.12:*:*:*:*:*:*:*","matchCriteriaId":"E8D53B5F-6AEE-4192-B838-E1DA92C59285"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14:*:*:*:*:*:*:*","matchCriteriaId":"1883A98C-E595-4F3C-87BF-A63393F9F561"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.1:*:*:*:*:*:*:*","matchCriteriaId":"DD49E53A-5676-4FAC-A8A2-30FAC04C33D7"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.2:*:*:*:*:*:*:*","matchCriteriaId":"1084AF8E-5269-4EFF-BBD2-C5A77945FCF2"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.3:*:*:*:*:*:*:*","matchCriteriaId":"D9A4B035-B73E-48E9-BBB9-83219F5D2A95"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.4:*:*:*:*:*:*:*","matchCriteriaId":"9452C271-2812-4775-8396-394C642EACFD"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.14.5:*:*:*:*:*:*:*","matchCriteriaId":"2D351AF2-C0AB-4BB3-8692-677A3025A615"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F16D338E-C5BC-46E1-95DD-D9B0E25EE56E"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.1:*:*:*:*:*:*:*","matchCriteriaId":"19F19219-3AFD-4D8E-B02B-BFCBD1BC7C36"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.2:*:*:*:*:*:*:*","matchCriteriaId":"B900D9A7-913A-4176-90CF-C7C3B09A4261"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.3:*:*:*:*:*:*:*","matchCriteriaId":"B692910E-633D-4A88-B245-56A2B58DD4CB"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.4:*:*:*:*:*:*:*","matchCriteriaId":"F86EE5DB-442B-4C78-8152-AF1048C6A974"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.16.5:*:*:*:*:*:*:*","matchCriteriaId":"19B82A1A-56EB-41D5-8619-2A717E3A6ECF"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17:*:*:*:*:*:*:*","matchCriteriaId":"9B2FC5C7-B218-4B87-9805-F90AC0E7A281"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.1:*:*:*:*:*:*:*","matchCriteriaId":"BBCDA64F-C49A-4F5B-B285-4079D8E3A499"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED3457-CC21-4DB3-931F-677F723E1B2A"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.4:*:*:*:*:*:*:*","matchCriteriaId":"6C8711D3-55CF-4131-BBAC-6BE07068219F"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.5:*:*:*:*:*:*:*","matchCriteriaId":"DF54FFA5-5177-46E6-9AFA-BA3345C16E8A"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.6:*:*:*:*:*:*:*","matchCriteriaId":"69D7EA7C-B401-4F5A-AC08-2199DD117403"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.17.7:*:*:*:*:*:*:*","matchCriteriaId":"DC2DDC7C-CD2B-4597-A5E0-266A884958FC"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc1:*:*:*:*:*:*","matchCriteriaId":"3635C0E9-2E43-4BAE-8267-2BB2F68B03BD"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:bugzilla:2.18:rc2:*:*:*:*:*:*","matchCriteriaId":"4869A709-AF79-49BD-A7D2-D48A8D79A085"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109872095201238&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11511","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=250605","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=253544","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17842","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109872095201238&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=250605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=253544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1636","sourceIdentifier":"cve@mitre.org","published":"2004-10-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the WvTFTPServer::new_connection function in wvtftpserver.cc for WvTftp 0.9 allows remote attackers to execute arbitrary code via a long option string in a TFTP packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:net_integration_technologies_inc.:wvtftp:0.9:*:*:*:*:*:*:*","matchCriteriaId":"D1BF8085-1BA8-4A50-BF39-59915AC0282D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109885074513940&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12986","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11525","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17869","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109885074513940&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12986","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17869","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1637","sourceIdentifier":"cve@mitre.org","published":"2004-10-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Hawking Technologies HAR11A modem/router allows remote attackers to obtain sensitive information by connecting to port 254, which displays a management interface and information on established connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hawking_technology:har11a_dsl_router:*:*:*:*:*:*:*:*","matchCriteriaId":"35F74AE9-2C41-4776-89EB-FB99BDD05331"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109882884617886&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11543","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17877","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109882884617886&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17877","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1638","sourceIdentifier":"cve@mitre.org","published":"2004-10-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly (2) HELO command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:tabs_laboratories:mailcarrier:2.51:*:*:*:*:*:*:*","matchCriteriaId":"E47042C9-5631-48B1-909F-2FF8872B273E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109880961630050&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12999","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11535","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17861","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109880961630050&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17861","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1639","sourceIdentifier":"cve@mitre.org","published":"2004-10-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 0.10, Mozilla 5.0, and Gecko 20040913 allows remote attackers to cause a denial of service (application crash or memory consumption) via a large binary file with a .html extension."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","versionEndIncluding":"0.10","matchCriteriaId":"2B982CDA-3EDB-44A9-950B-F9F670F3E5F7"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:gecko:2004-09-13:*:*:*:*:*:*:*","matchCriteriaId":"4D263A38-8667-4A0A-9377-55EC69A7B9D6"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:mozilla:5.0:*:*:*:*:*:*:*","matchCriteriaId":"35FB74FC-4614-4325-9249-0DC887FD6C34"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q4/0017.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109886388528179&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17839","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q4/0017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109886388528179&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17839","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1640","sourceIdentifier":"cve@mitre.org","published":"2004-08-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 0.94 and 1.0 allow remote attackers to execute arbitrary web script and HTML via the (1) terme parameter to search.php or (2) letter parameter to letter.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:xoops:xoops_dictionary:0.94:*:*:*:*:*:*:*","matchCriteriaId":"488E423F-275F-4C9D-AD1D-386E95900E6C"},{"vulnerable":false,"criteria":"cpe:2.3:a:xoops:xoops_dictionary:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4B7EC920-3B37-448C-AD54-1B6872477CC7"}]}]}],"references":[{"url":"http://cyruxnet.org/modulo_dic_xoops.htm","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109394077209963&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12424","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/9393","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9394","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11064","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17152","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17154","source":"cve@mitre.org"},{"url":"http://cyruxnet.org/modulo_dic_xoops.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109394077209963&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/9393","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17154","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1641","sourceIdentifier":"cve@mitre.org","published":"2004-08-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in Titan FTP 3.21 and earlier allows remote attackers to cause a denial of service (crash) via a long FTP command such as (1) CWD, (2) STAT, or (3) LIST."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:south_river_technologies:titan_ftp_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7086EFD5-725E-4483-9D21-31629681467F"},{"vulnerable":true,"criteria":"cpe:2.3:a:south_river_technologies:titan_ftp_server:2.10:*:*:*:*:*:*:*","matchCriteriaId":"26497879-83FB-491E-970A-983AF03A5275"},{"vulnerable":true,"criteria":"cpe:2.3:a:south_river_technologies:titan_ftp_server:3.01:*:*:*:*:*:*:*","matchCriteriaId":"7841CD3F-36E7-492F-809C-94DA7E9BF342"},{"vulnerable":true,"criteria":"cpe:2.3:a:south_river_technologies:titan_ftp_server:3.10:*:*:*:*:*:*:*","matchCriteriaId":"5CC45B1B-4A5B-486A-85DB-720495BC4368"},{"vulnerable":true,"criteria":"cpe:2.3:a:south_river_technologies:titan_ftp_server:3.21:*:*:*:*:*:*:*","matchCriteriaId":"B1F786C1-8532-46EF-BB0C-938053A09BB2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109396159332523&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12419","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11069","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17172","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109396159332523&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17172","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1642","sourceIdentifier":"cve@mitre.org","published":"2004-08-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WFTPD Pro Server 3.21 allows remote authenticated users to cause a denial of service (crash) via a series of long MLIST commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.21:*:*:*:*:*:*:*","matchCriteriaId":"B0F19F32-622D-4C1A-932B-B78C4C012530"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.21_r1:*:*:*:*:*:*:*","matchCriteriaId":"F4466ADA-D5BF-4441-96A8-78DB55A54BF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.21_r2:*:*:*:*:*:*:*","matchCriteriaId":"31F72D6B-2D6F-4615-AB54-84FC1907FA1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.21_r3:*:*:*:*:*:*:*","matchCriteriaId":"B81E8B24-258D-42B9-B361-AFF26A0D2E1F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109396193723317&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11067","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17169","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109396193723317&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1643","sourceIdentifier":"cve@mitre.org","published":"2004-08-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WS_FTP 5.0.2 allows remote authenticated users to cause a denial of service (CPU consumption) via a CD command that contains an invalid path with a \"../\" sequence."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"ED4F7DAA-DB7C-4CCC-9521-131FEFC776FD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109389890712888&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12406","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11065","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17155","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109389890712888&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17155","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1644","sourceIdentifier":"cve@mitre.org","published":"2004-08-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xedus 1.0 allows remote attackers to cause a denial of service (refuse connections) by connecting multiple times from the same IP address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jerod_moemeka:xedus:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E8CDB68B-6A40-4BFA-9B9F-E1C47019EBF7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109394018411394&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12418","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00047-08302004","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11071","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17165","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109394018411394&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00047-08302004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1645","sourceIdentifier":"cve@mitre.org","published":"2004-08-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML via the (1) username parameter to test.x, (2) username parameter to TestServer.x, or (3) param parameter to testgetrequest.x."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jerod_moemeka:xedus:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E8CDB68B-6A40-4BFA-9B9F-E1C47019EBF7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109394018411394&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12418","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00047-08302004","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11071","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17166","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109394018411394&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00047-08302004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17166","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1646","sourceIdentifier":"cve@mitre.org","published":"2004-08-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Xedus 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jerod_moemeka:xedus:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E8CDB68B-6A40-4BFA-9B9F-E1C47019EBF7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109394018411394&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12418","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00047-08302004","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11071","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17167","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109394018411394&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00047-08302004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17167","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1647","sourceIdentifier":"cve@mitre.org","published":"2004-08-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Password Protect allows remote attackers to execute arbitrary SQL statements and bypass authentication via (1) admin or Pass parameter to index_next.asp, (2) LoginId, OPass, or NPass to CPassChangePassword.asp, (3) users_edit.asp, or (4) users_add.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web_animations:password_protect:*:*:*:*:*:*:*:*","matchCriteriaId":"31E82CCB-03A6-4E1F-9FDC-0A7F2D41C8DD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109414967003192&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12407","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.criolabs.net/advisories/passprotect.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/11073","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17188","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109414967003192&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.criolabs.net/advisories/passprotect.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/11073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17188","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1648","sourceIdentifier":"cve@mitre.org","published":"2004-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in (1) index.asp, (2) ChangePassword.asp, (3) users_list.asp, (4) and users_add.asp in Password Protect allows remote attackers to inject arbitrary web script or HTML via the ShowMsg parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web_animations:password_protect:*:*:*:*:*:*:*:*","matchCriteriaId":"31E82CCB-03A6-4E1F-9FDC-0A7F2D41C8DD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109414967003192&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12407","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.criolabs.net/advisories/passprotect.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/11073","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17187","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109414967003192&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.criolabs.net/advisories/passprotect.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/11073","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17187","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1649","sourceIdentifier":"cve@mitre.org","published":"2004-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Microsoft Msinfo32.exe might allow local users to execute arbitrary code via a long filename in the msinfo_file command line parameter.  NOTE: this issue might not cross security boundaries, so it may be REJECTED in the future."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025902.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109413415205017&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=109391133831787&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17153","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025902.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109413415205017&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=109391133831787&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17153","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1650","sourceIdentifier":"cve@mitre.org","published":"2004-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"D-Link DCS-900 Internet Camera listens on UDP port 62976 for an IP address, which allows remote attackers to change the IP address of the camera via a UDP broadcast packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:dcs-900_internet_camera:2.10:*:*:*:*:*:*:*","matchCriteriaId":"CC70516A-245B-4474-BB8C-D88BC4A3991E"},{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:dcs-900_internet_camera:2.20:*:*:*:*:*:*:*","matchCriteriaId":"D00FDCDD-41DE-44EB-9B2D-F598B5C70E0D"},{"vulnerable":true,"criteria":"cpe:2.3:h:d-link:dcs-900_internet_camera:2.28:*:*:*:*:*:*:*","matchCriteriaId":"2AACA7E3-6F9B-4435-B782-E4055446C5ED"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109396893820049&w=2","source":"cve@mitre.org"},{"url":"http://miscname.com/public/dcs-900/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12425","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1011100","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11072","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17171","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109396893820049&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://miscname.com/public/dcs-900/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1011100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1651","sourceIdentifier":"cve@mitre.org","published":"2004-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in the registration page in phpScheduleIt 1.0.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Lastname fields during new user registration, or (3) the Schedule Name field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"72A3FEB2-6FF3-43E7-8C80-44F3E366DF7A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-09/0216.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109399590602709&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011127","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9451","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11080","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17193","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17194","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-09/0216.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109399590602709&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17194","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1652","sourceIdentifier":"cve@mitre.org","published":"2004-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpScheduleIt 1.0.0 RC1 does not clear administrative privileges if the administrator logs in as a normal user, which allows users with physical access to gain administrative privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0D449C2F-B0DC-4356-99D2-AC3F1D69B98E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109399590602709&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17195","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109399590602709&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17195","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1653","sourceIdentifier":"cve@mitre.org","published":"2004-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such as AnonCVS."}],"vendorComments":[{"organization":"Red Hat","comment":"Permitting TCP forwarding is the expected and known default configuration. If it is not desired, it can disabled using the AllowTcpForwarding option in the /etc/ssh/sshd_config configuration file. However, only disabling TCP forwarding does not improve security unless users are also denied shell access. For more information, see man sshd_config.","lastModified":"2009-11-25T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*","versionEndIncluding":"3.9","matchCriteriaId":"54168153-AA0C-4E2F-AF03-FF93295D1303"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109413637313484&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011143","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9562","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17213","source":"cve@mitre.org"},{"url":"https://security.netapp.com/advisory/ntap-20191107-0001/","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109413637313484&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011143","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.netapp.com/advisory/ntap-20191107-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1654","sourceIdentifier":"cve@mitre.org","published":"2004-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the calendar module in phpWebsite 0.9.3-4 and earlier allows remote attackers to execute arbitrary SQL commands via cal_template."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"47B0B838-401F-447D-A270-6B3C7416A2ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"90DF86C4-176B-4E4E-AF89-15F090E9C0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"9F3EAD02-CF8D-4154-9A67-9774BA4029AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"B72337C8-2B5C-4824-A3C0-D41A857DC9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.4:*:*:*:*:*:*:*","matchCriteriaId":"682290A8-AEB7-4652-A44C-A969AB937BAF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109413493005513&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12438","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00048-08312004","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.phpwebsite.appstate.edu/index.php?module=announce&ANN_user_op=view&ANN_id=822","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11088","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17199","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109413493005513&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00048-08312004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.phpwebsite.appstate.edu/index.php?module=announce&ANN_user_op=view&ANN_id=822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17199","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1655","sourceIdentifier":"cve@mitre.org","published":"2004-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in phpWebsite 0.9.3-4 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) CM_pid parameter in the comments module or (2) the subject or message fields in the notes module."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"47B0B838-401F-447D-A270-6B3C7416A2ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"90DF86C4-176B-4E4E-AF89-15F090E9C0F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"9F3EAD02-CF8D-4154-9A67-9774BA4029AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"B72337C8-2B5C-4824-A3C0-D41A857DC9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.4:*:*:*:*:*:*:*","matchCriteriaId":"682290A8-AEB7-4652-A44C-A969AB937BAF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109413493005513&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12438","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011120","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00048-08312004","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.phpwebsite.appstate.edu/index.php?module=announce&ANN_user_op=view&ANN_id=822","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11088","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17202","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17203","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109413493005513&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00048-08312004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.phpwebsite.appstate.edu/index.php?module=announce&ANN_user_op=view&ANN_id=822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17202","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17203","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1656","sourceIdentifier":"cve@mitre.org","published":"2004-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:comersus_open_technologies:comersus_cart:5.0.991:*:*:*:*:*:*:*","matchCriteriaId":"4A41DF2F-7E51-4F35-9623-9EA89FE1B101"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109405777905519&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11083","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17201","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109405777905519&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11083","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17201","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1657","sourceIdentifier":"cve@mitre.org","published":"2004-09-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Referrer HTTP headers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:newtelligence:dasblog:1.3:*:*:*:*:*:*:*","matchCriteriaId":"8B94BC97-9711-4141-BB3C-1AAF44CA953B"},{"vulnerable":true,"criteria":"cpe:2.3:a:newtelligence:dasblog:1.4:*:*:*:*:*:*:*","matchCriteriaId":"04655F91-B4AD-4814-8E30-3BF6723DCC01"},{"vulnerable":true,"criteria":"cpe:2.3:a:newtelligence:dasblog:1.5:*:*:*:*:*:*:*","matchCriteriaId":"27188BEA-9C79-4AB1-B50F-860AD5E89E78"},{"vulnerable":true,"criteria":"cpe:2.3:a:newtelligence:dasblog:1.6:*:*:*:*:*:*:*","matchCriteriaId":"2DD60052-2378-4499-BF9B-38100AED8B67"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109443321830050&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12416","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://staff.newtelligence.net/clemensv/PermaLink.aspx?guid=69bce168-cb09-4f09-8d53-f0b97f11b198","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11086","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17174","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109443321830050&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://staff.newtelligence.net/clemensv/PermaLink.aspx?guid=69bce168-cb09-4f09-8d53-f0b97f11b198","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17174","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1658","sourceIdentifier":"cve@mitre.org","published":"2004-09-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \\device\\physicalmemory to restore the running kernel's SDT ServiceTable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:personal_firewall:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E6C66920-4A4F-4335-B052-44E1F92F585B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:personal_firewall:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"658F01AE-C211-473C-BF70-E524E4310F20"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:personal_firewall:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1F769FAE-CC31-4C8B-B785-1423DFC2BA3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:personal_firewall:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"CB7202BC-AD0B-41B1-B7C1-7665498C967B"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:personal_firewall:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"38E60288-F9E6-4E7C-9B48-352277A34C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:personal_firewall:4.0.16:*:*:*:*:*:*:*","matchCriteriaId":"19EA5978-64EC-4B54-BC06-20324DB0E6CC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109420310631039&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12468/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.security.org.sg/vuln/kerio4016.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11096","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17270","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109420310631039&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12468/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.security.org.sg/vuln/kerio4016.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11096","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17270","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1659","sourceIdentifier":"cve@mitre.org","published":"2004-09-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Administrator, Editor, Journalist or Commenter privileges to inject arbitrary web script or HTML via the mod parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:0.88:*:*:*:*:*:*:*","matchCriteriaId":"35BB2223-5238-4E3D-895A-BE6793AE3A9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.3:*:*:*:*:*:*:*","matchCriteriaId":"4254A63A-3202-4D06-90B3-12D10511BC2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D9A2D600-BEA7-4936-B210-91629B2EFCDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"674CC558-E3B7-4120-879A-0408A595C5BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"EF7BF20D-34F9-453A-A54A-3A0B39EAAD58"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109415338521881&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12432","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11097","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17214","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109415338521881&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17214","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1660","sourceIdentifier":"cve@mitre.org","published":"2004-08-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to execute arbitrary PHP code via the cutepath parameter to (1) show_archives.php or (2) show_news.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.6","matchCriteriaId":"424436A1-A2C9-4B6B-90B1-4A491EED73C5"}]}]}],"references":[{"url":"http://seclists.org/lists/bugtraq/2004/Sep/0014.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12432","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.7a69ezine.org/node/view/130","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17288","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/bugtraq/2004/Sep/0014.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.7a69ezine.org/node/view/130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17288","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1661","sourceIdentifier":"cve@mitre.org","published":"2004-09-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains \"auth=1\" and \"uId=1.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sitecubed:mailworks_professional:*:*:*:*:*:*:*:*","matchCriteriaId":"3666408E-D196-4777-875D-74759748A394"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109416709710447&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12458","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11095","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17217","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109416709710447&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12458","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17217","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1662","sourceIdentifier":"cve@mitre.org","published":"2004-08-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"YaBB SE 1.5.1 allows remote attackers to obtain sensitive information via a direct HTTP request to Admin.php, which reveals the full path in a PHP error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:yabb:yabb:1.5.1:*:second_edition:*:*:*:*:*","matchCriteriaId":"81CD19BD-CF9C-4699-B167-686635A539A9"}]}]}],"references":[{"url":"http://echo.or.id/adv/adv05-y3dips-2004.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109441750900432&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17267","source":"cve@mitre.org"},{"url":"http://echo.or.id/adv/adv05-y3dips-2004.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109441750900432&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1663","sourceIdentifier":"cve@mitre.org","published":"2004-09-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 (formerly FastT 100) and Brocade SilkWorm Switches, allow remote attackers to cause a denial of service (freeze and possible data corruption) via crafted TCP packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:brocade:silkworm:3200:*:*:*:*:*:*:*","matchCriteriaId":"7DF1ED4B-1AEF-4EA4-B97E-A959C0FB9BA3"},{"vulnerable":true,"criteria":"cpe:2.3:h:brocade:silkworm:3250:*:*:*:*:*:*:*","matchCriteriaId":"DC0787B5-F7D2-4F3B-91B7-D63FC8EC93D8"},{"vulnerable":true,"criteria":"cpe:2.3:h:brocade:silkworm:3800:*:*:*:*:*:*:*","matchCriteriaId":"2AE6F784-D1CA-4545-B5A4-104904A67CB0"},{"vulnerable":true,"criteria":"cpe:2.3:h:brocade:silkworm:3850:*:*:*:*:*:*:*","matchCriteriaId":"D7A67E41-67F1-46BC-97F0-04859F188609"},{"vulnerable":true,"criteria":"cpe:2.3:h:brocade:silkworm:3900:*:*:*:*:*:*:*","matchCriteriaId":"FC3F08A6-0928-4654-8AC5-45EA7FB1C397"},{"vulnerable":true,"criteria":"cpe:2.3:h:brocade:silkworm_fiber_channel_switch:2010:*:*:*:*:*:*:*","matchCriteriaId":"8ABE8C25-072D-4444-9C70-CFBA055603B4"},{"vulnerable":true,"criteria":"cpe:2.3:h:brocade:silkworm_fiber_channel_switch:2040:*:*:*:*:*:*:*","matchCriteriaId":"B9DCB605-E91E-4F9A-99FF-82E7FF3DEE61"},{"vulnerable":true,"criteria":"cpe:2.3:h:brocade:silkworm_fiber_channel_switch:2050:*:*:*:*:*:*:*","matchCriteriaId":"260CD57E-6A9D-4507-A3CE-385E6D67AB6B"},{"vulnerable":true,"criteria":"cpe:2.3:h:engenio:storage_controller:2822:*:*:*:*:*:*:*","matchCriteriaId":"31B1F6AA-6AF8-4D36-9E17-37EA7B8EAAA9"},{"vulnerable":true,"criteria":"cpe:2.3:h:engenio:storage_controller:2882:*:*:*:*:*:*:*","matchCriteriaId":"7AC140B1-6C03-4DF7-8B3D-BA23BDA91614"},{"vulnerable":true,"criteria":"cpe:2.3:h:engenio:storage_controller:4884:*:*:*:*:*:*:*","matchCriteriaId":"F6F6F87E-31C4-4A6C-81C0-DEB055341C16"},{"vulnerable":true,"criteria":"cpe:2.3:h:engenio:storage_controller:5884:*:*:*:*:*:*:*","matchCriteriaId":"E2BCE31D-1E12-48D5-94DF-A650975A292C"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:ds4100:*:*:*:*:*:*:*:*","matchCriteriaId":"A70E5F14-9F22-4263-B9E2-5CADBCE1BE52"},{"vulnerable":true,"criteria":"cpe:2.3:h:storagetek:d280:*:*:*:*:*:*:*:*","matchCriteriaId":"353AFDAB-9369-4FC2-81EC-1CE5ACB418C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:broadcom:fabric_operating_system:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1B419E9E-A92F-4773-B64D-F6A9D595666E"},{"vulnerable":true,"criteria":"cpe:2.3:o:broadcom:fabric_operating_system:2.2:*:*:*:*:*:*:*","matchCriteriaId":"09357B7C-2D5C-4C4C-A630-92E93A00F366"},{"vulnerable":true,"criteria":"cpe:2.3:o:broadcom:fabric_operating_system:3.1:*:*:*:*:*:*:*","matchCriteriaId":"48535F1A-DDEA-4225-9592-7890E3CB7F64"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109435831811484&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12464","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11108","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17290","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109435831811484&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17290","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1664","sourceIdentifier":"cve@mitre.org","published":"2004-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via a large (1) query or (2) reply packet, which is not properly handled by the buffer overflow protection mechanism. NOTE: this issue might overlap CVE-2005-0430."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activision:call_of_duty:1.4:*:*:*:*:*:*:*","matchCriteriaId":"56174554-305C-44B2-84AC-1FBFB2630806"},{"vulnerable":true,"criteria":"cpe:2.3:a:activision:call_of_duty_united_offensive:1.41:*:*:*:*:*:*:*","matchCriteriaId":"794E93AF-7815-4C7B-B1F5-B24C6C8BFA90"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109449953200587&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11119","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17286","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109449953200587&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17286","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1665","sourceIdentifier":"cve@mitre.org","published":"2004-09-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web script or HTML via the no parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:psnews:psnews:1.1:*:*:*:*:*:*:*","matchCriteriaId":"FF1C5324-8257-4BA0-ACEE-7C0F4DF92431"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109458516524494&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011191","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11124","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17302","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109458516524494&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17302","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1666","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the MSN module in Trillian 0.74i allows remote MSN servers to execute arbitrary code via a long string that ends in a newline character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74i:*:*:*:*:*:*:*","matchCriteriaId":"9BEF2AD0-094A-4AFF-8F20-D39E8BA72EE7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109466618609375&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12487","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://unsecure.altervista.org/security/trillian.htm","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://unsecure.altervista.org/security/trillianbof.c","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11142","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17292","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109466618609375&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://unsecure.altervista.org/security/trillian.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://unsecure.altervista.org/security/trillianbof.c","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17292","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1667","sourceIdentifier":"cve@mitre.org","published":"2004-09-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in Halo Combat Evolved 1.04 and earlier allows remote attackers to cause a denial of service (server crash) via a long client response."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gearbox_software:halo_combat_evolved:1.2:*:*:*:*:*:*:*","matchCriteriaId":"BCE58614-742A-474F-A9F4-1BFFDCF95AC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gearbox_software:halo_combat_evolved:1.4:*:*:*:*:*:*:*","matchCriteriaId":"882444F5-32A0-405A-A3D3-EC68E25A3FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gearbox_software:halo_combat_evolved:1.31:*:*:*:*:*:*:*","matchCriteriaId":"0F3B68BB-CF9B-4D49-A584-53E7EC47B3C0"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/haloboom-adv.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109479695022024&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12504","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.bungie.net/News/Story.aspx?link=hpc105","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11147","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17310","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/haloboom-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109479695022024&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.bungie.net/News/Story.aspx?link=hpc105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17310","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1668","sourceIdentifier":"cve@mitre.org","published":"2004-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the (1) pageid, (2) subid, or (3) catid parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easyweb:factory_subjects_module:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3D275EC2-8407-477A-96E7-7492A010001B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109483089621955&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12497","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11148","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17311","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109483089621955&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17311","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1669","sourceIdentifier":"cve@mitre.org","published":"2004-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to execute arbitrary web script or HTML via the (1) User name parameter to accountsettings.html or (2) Search string parameter to search.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"59B3A55C-9EAE-4CEA-BC13-99EEEF3B456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"CEFA5E8D-C505-443A-BF27-1B1B80F6AE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"559FAE27-0092-4C36-9D21-4E79696B7EC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:merak:mail_server:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A995EEE4-9707-4FD6-9624-1168258CE0D3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109483971420067&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12789","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11371","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17313","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109483971420067&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17313","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1670","sourceIdentifier":"cve@mitre.org","published":"2004-09-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to (1) create arbitrary directories via a .. (dot dot) in the user parameter to viewaction.html or (2) rename arbitrary files via a ....// (doubled dot dot) in the folderold or folder parameters to folders.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"59B3A55C-9EAE-4CEA-BC13-99EEEF3B456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"CEFA5E8D-C505-443A-BF27-1B1B80F6AE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"559FAE27-0092-4C36-9D21-4E79696B7EC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:merak:mail_server:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A995EEE4-9707-4FD6-9624-1168258CE0D3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109483971420067&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12789","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11371","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17314","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109483971420067&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1671","sourceIdentifier":"cve@mitre.org","published":"2004-10-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to gain sensitive information via a direct request to (1) accountsettings_add.html or (2) topmenu.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"59B3A55C-9EAE-4CEA-BC13-99EEEF3B456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"CEFA5E8D-C505-443A-BF27-1B1B80F6AE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"559FAE27-0092-4C36-9D21-4E79696B7EC1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109483971420067&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12789","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11371","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17315","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109483971420067&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17315","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1672","sourceIdentifier":"cve@mitre.org","published":"2004-10-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"attachment.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to view other users' attachments by specifying the username and message ID in an HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"59B3A55C-9EAE-4CEA-BC13-99EEEF3B456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"CEFA5E8D-C505-443A-BF27-1B1B80F6AE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"559FAE27-0092-4C36-9D21-4E79696B7EC1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109483971420067&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12789","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11371","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17316","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109483971420067&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1673","sourceIdentifier":"cve@mitre.org","published":"2004-10-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"59B3A55C-9EAE-4CEA-BC13-99EEEF3B456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"CEFA5E8D-C505-443A-BF27-1B1B80F6AE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"559FAE27-0092-4C36-9D21-4E79696B7EC1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109483971420067&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12789","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11371","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17317","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109483971420067&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1674","sourceIdentifier":"cve@mitre.org","published":"2004-10-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arbitrary files via the originalfolder parameter or (2) move arbitrary files via the messageid parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"59B3A55C-9EAE-4CEA-BC13-99EEEF3B456B"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"CEFA5E8D-C505-443A-BF27-1B1B80F6AE49"},{"vulnerable":true,"criteria":"cpe:2.3:a:icewarp:web_mail:5.2.8:*:*:*:*:*:*:*","matchCriteriaId":"559FAE27-0092-4C36-9D21-4E79696B7EC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:merak:mail_server:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A995EEE4-9707-4FD6-9624-1168258CE0D3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109483971420067&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12789","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11371","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17976","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109483971420067&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1675","sourceIdentifier":"cve@mitre.org","published":"2004-09-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQUE (STOU) command with an MS-DOS device name argument such as (1) COM1, (2) LPT1, (3) PRN, or (4) AUX."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:4.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"51BE6EDE-C7BC-4730-9602-160A027D8F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:4.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7DE0A612-CF94-4DBE-808C-AE4CA9DD2C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:4.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F20066E0-BAE8-462F-86B5-A39DDB5D11C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:5.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"78B460EA-F742-4524-B213-BF92ABF82ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:5.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6E646B1A-167C-4DB6-84C1-77B071AC605A"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:5.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"EF068DF2-7298-4648-BA80-06321599E723"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:5.0.0.11:*:*:*:*:*:*:*","matchCriteriaId":"A9B3B340-C416-421D-9616-C4ACB59E05A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:5.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"CADBC6BB-BF83-4BC0-88FC-4D6E929B7D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:5.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5175168C-D623-49AE-9BB6-9DAF8B7C5EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:5.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"735F7214-91B5-4BDF-8F98-52249A22AE75"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109495074211638&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12507/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11155","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17329","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109495074211638&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12507/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17329","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1676","sourceIdentifier":"cve@mitre.org","published":"2004-09-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the image sending feature in Gadu-Gadu 6.0 build 149 allows remote attackers to execute arbitrary code via a crafted GG_MSG_IMAGE_REPLY message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0:*:*:*:*:*:*:*","matchCriteriaId":"62C53DCD-9F92-4DBB-860E-9148B0F62696"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build149:*:*:*:*:*:*:*","matchCriteriaId":"47FF1D1D-473E-41DC-86E9-9DD8D7B969CA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109508834910733&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12510","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11158","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17324","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109508834910733&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17324","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1677","sourceIdentifier":"cve@mitre.org","published":"2004-09-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"pdesk.cgi in PerlDesk allows remote attackers to gain sensitive information via an invalid lang parameter, which includes pathname information in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:logicnow:perldesk:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"4E5C5330-1012-4D06-8945-5FAF8381E530"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109509026406554&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12512","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17343","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109509026406554&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17343","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1678","sourceIdentifier":"cve@mitre.org","published":"2004-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitrary files and possibly execute arbitrary Perl modules via \"..\" sequences terminated by a %00 (null) character in the lang parameter, which can leak portions of the requested files if a compilation error message occurs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:logicnow:perldesk:*:*:*:*:*:*:*:*","matchCriteriaId":"928F82FC-047B-4B5A-9E14-6BF89E5BB642"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109509026406554&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12512","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11160","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19712","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109509026406554&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19712","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1679","sourceIdentifier":"cve@mitre.org","published":"2004-08-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in TwinFTP 1.0.3 R2 allows remote attackers to create arbitrary files via a .../ (triple dot) in the (1) CWD, (2) STOR, or (3) RETR commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jigunet:twinftp_enterprise:1.0.3_r2:*:*:*:*:*:*:*","matchCriteriaId":"CEF5CC6F-A91E-4254-99B4-BB9529AB07F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jigunet:twinftp_standard:1.0.3_r2:*:*:*:*:*:*:*","matchCriteriaId":"8B6BA171-A8E0-46A8-BE4D-91AE1FC95EFF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109509243831121&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12511/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.security.org.sg/vuln/twinftp103r2.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11159","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17323","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109509243831121&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12511/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.security.org.sg/vuln/twinftp103r2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17323","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1680","sourceIdentifier":"cve@mitre.org","published":"2004-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"application.cgi in the Pingtel Xpressa handset running firmware 2.1.11.24 allows remote authenticated users to cause a denial of service (VxWorks OS crash) via a long HTTP GET request, possibly triggering a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"5362ACDC-DA8B-4DA7-BEE3-C30083CD715D"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.7.4:*:*:*:*:*:*:*","matchCriteriaId":"5F08D9EF-49D8-44CC-B33D-4EF416E80F62"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"1BDFC05A-697B-4422-8E9E-A4A04F68ABCC"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9637C232-D310-4303-9936-CECF52E78992"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FACC7001-AB2F-4BDE-ADC5-F4E0FED70382"},{"vulnerable":true,"criteria":"cpe:2.3:h:pingtel:xpressa:2.1.11.24:*:*:*:*:*:*:*","matchCriteriaId":"8AF37768-6C63-456B-AA70-74A7AAF500F7"}]}]}],"references":[{"url":"http://secunia.com/advisories/12523","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2004/a091304-2.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11161","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17346","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.atstake.com/research/advisories/2004/a091304-2.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17346","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1681","sourceIdentifier":"cve@mitre.org","published":"2004-08-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI for QNX RTP 6.1 allow local users to gain privileges via a long -s (server) command line parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:photon_microgui:*:*:*:*:*:*:*:*","matchCriteriaId":"9C788876-FC57-4801-A12A-4915F7764828"},{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtp:6.1:*:*:*:*:*:*:*","matchCriteriaId":"76AB2330-A25F-48CB-A272-81B4D188912E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109510393407597&w=2","source":"cve@mitre.org"},{"url":"http://www.rfdslabs.com.br/qnx-advs-03-2004.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11164","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17339","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109510393407597&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.rfdslabs.com.br/qnx-advs-03-2004.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17339","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1682","sourceIdentifier":"cve@mitre.org","published":"2004-08-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qnx:rtp:6.1:*:*:*:*:*:*:*","matchCriteriaId":"76AB2330-A25F-48CB-A272-81B4D188912E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109511327005476&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12533","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.rfdslabs.com.br/qnx-advs-04-2004.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17347","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109511327005476&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.rfdslabs.com.br/qnx-advs-04-2004.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17347","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1683","sourceIdentifier":"cve@mitre.org","published":"2004-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A race condition in crrtrap for QNX RTP 6.1 allows local users to gain privileges by modifying the PATH environment variable to reference a malicious io-graphics program before is executed by crrtrap."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:qnx:rtos:6.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7B3A983E-7A0C-4BA9-AC9C-131437BFE793"},{"vulnerable":false,"criteria":"cpe:2.3:a:qnx:rtos:6.2.0a:*:*:*:*:*:*:*","matchCriteriaId":"6C896443-5476-43FC-A437-50EFE29DEA72"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109511737504357&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11165","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17345","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109511737504357&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11165","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17345","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1684","sourceIdentifier":"cve@mitre.org","published":"2004-09-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zyxel P681 running ZyNOS Vt020225a contains portions of memory in an ARP request, which allows remote attackers to obtain sensitive information by sniffing the network."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:prestige:681:*:*:*:*:*:*:*","matchCriteriaId":"200CE088-9483-4EDF-8472-F1C68EC0B26D"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zynos:vt020225a:*:*:*:*:*:*:*","matchCriteriaId":"C61A26C3-DD1A-4314-84F7-3ECA85AC4854"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109510732611448&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9962","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11167","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17372","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109510732611448&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9962","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17372","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1685","sourceIdentifier":"cve@mitre.org","published":"2004-09-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to bypass authentication by connecting to it from the same IP address as the administrator who is logged in, then accessing the setup_status.htm or status.HTM pages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:smc_networks:smc7004vwbr:1.21a:*:*:*:*:*:*:*","matchCriteriaId":"2C548507-4D36-4306-9F63-93CAC1B6922D"},{"vulnerable":true,"criteria":"cpe:2.3:h:smc_networks:smc7004vwbr:1.22:*:*:*:*:*:*:*","matchCriteriaId":"2DEB5C35-39F4-41A4-BDD3-634F1EE530A4"},{"vulnerable":true,"criteria":"cpe:2.3:h:smc_networks:smc7004vwbr:1.23:*:*:*:*:*:*:*","matchCriteriaId":"8205F896-AE0D-451F-883C-4AC8116C66D6"},{"vulnerable":true,"criteria":"cpe:2.3:h:smc_networks:smc7008abr:1.32:*:*:*:*:*:*:*","matchCriteriaId":"C227D3AD-A691-43AD-9587-CE4E19C7B2D6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109526094614160&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12601","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/10088","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11197","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17443","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109526094614160&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/10088","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17443","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1686","sourceIdentifier":"cve@mitre.org","published":"2004-09-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML page that contains an Internet Explorer formatted comment between the DOCTYPE tag and the HTML tag, as demonstrated using the DesignScience MathPlayer ActiveX plugin."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"DA3D2175-7DF7-4D57-8B26-5BA68EF7A935"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109539520310153&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11200","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20617","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109539520310153&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20617","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1687","sourceIdentifier":"cve@mitre.org","published":"2004-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EBAEA3C3-D65B-47B6-9A1B-CE18F7C86771"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.1:sr4:*:*:*:*:*:*","matchCriteriaId":"AEBCC803-6F31-4CA5-B8AF-42AA370E0CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3:*:*:*:*:*:*:*","matchCriteriaId":"7CB43A6B-03DE-4D60-AB41-87E419F82582"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.01:*:*:*:*:*:*:*","matchCriteriaId":"3D54E309-5D2F-4C3C-835B-7653D86E25F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.02:*:*:*:*:*:*:*","matchCriteriaId":"4027A962-81FD-472F-80CD-B1C3BABF3555"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.3.03:*:*:*:*:*:*:*","matchCriteriaId":"C4396E99-B5C8-4914-A3DB-76E22A10AE84"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.02:*:*:*:*:*:*:*","matchCriteriaId":"0D89B42F-7738-47EE-871A-FE16C53BCD81"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.03:*:*:*:*:*:*:*","matchCriteriaId":"FD4EF4E8-F8A9-40C4-9F89-8C64A8CF2625"},{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.04:*:*:*:*:*:*:*","matchCriteriaId":"A31D3D44-EC0B-4502-A1FA-3AE2BF4D4254"}]}]}],"references":[{"url":"http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109537195413691&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12590","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11201","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17421","source":"cve@mitre.org"},{"url":"http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109537195413691&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17421","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1688","sourceIdentifier":"cve@mitre.org","published":"2004-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Pigeon Server 3.02.0143 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a long login name sent to port 3103."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tech-noel:pigeon_server:3.02.0143:*:*:*:*:*:*:*","matchCriteriaId":"192210C4-88F3-44EE-95B2-A059A183BFF5"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026515.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109543366631724&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12585","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11203","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17427","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026515.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109543366631724&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17427","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1689","sourceIdentifier":"cve@mitre.org","published":"2004-09-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*","matchCriteriaId":"B6419309-385F-4525-AD4B-C73B1A3ED935"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109537972929201&w=2","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.nl/0409-exploits/sudoedit.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12596","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-219.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/424358","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/10023","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11204","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.sudo.ws/sudo/alerts/sudoedit.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17424","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109537972929201&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.nl/0409-exploits/sudoedit.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-219.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/424358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/10023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.sudo.ws/sudo/alerts/sudoedit.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1690","sourceIdentifier":"cve@mitre.org","published":"2004-09-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Web Server in DNS4Me 3.0.0.4 allows remote attackers to execute arbitrary web script or HTML via the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rhinosoft:dns4me:3.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9BEC306-AB7C-402A-8703-3E49FBFBFBA7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109552436811493&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12595","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011334","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00049-09162004","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11213","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17425","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109552436811493&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00049-09162004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17425","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1691","sourceIdentifier":"cve@mitre.org","published":"2004-09-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU consumption and crash) via a large amount of data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rhinosoft:dns4me:3.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A9BEC306-AB7C-402A-8703-3E49FBFBFBA7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109552436811493&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12595","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011334","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00049-09162004","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11213","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17426","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109552436811493&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12595","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00049-09162004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1692","sourceIdentifier":"cve@mitre.org","published":"2004-09-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary web script or HTML via the (1) Itemid, (2) mosmsg, or (3) limit parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_open_source:4.5_1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"3E267995-8062-41E8-9D40-5A097465C322"}]}]}],"references":[{"url":"http://mamboforge.net/frs/shownotes.php?release_id=1672","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=109571849713158&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10179","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11220","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20616","source":"cve@mitre.org"},{"url":"http://mamboforge.net/frs/shownotes.php?release_id=1672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=109571849713158&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20616","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1693","sourceIdentifier":"cve@mitre.org","published":"2004-09-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remote web server that contains the code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo:4.5_1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"2C7E14F4-A0E9-4014-8C3E-E6DCF3393D3F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109571849713158&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011365","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10180","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11220","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17449","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109571849713158&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11220","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17449","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1694","sourceIdentifier":"cve@mitre.org","published":"2004-09-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Symantec ON Command CCM 5.4.x and iCommand 3.0.x has four default usernames and passwords, one of which is hardcoded, which allows remote attackers to gain unauthorized access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:on_command_ccm:5.0:*:*:*:*:*:*:*","matchCriteriaId":"B36BFEA0-B3A6-470C-ADBD-1BFABEB9A8C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:on_command_ccm:5.1:*:*:*:*:*:*:*","matchCriteriaId":"8E131CCD-BA66-4618-9C73-21468137BEB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:on_command_ccm:5.2:*:*:*:*:*:*:*","matchCriteriaId":"43BCB836-FC9E-422A-993D-F27160C365C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:on_command_ccm:5.3:*:*:*:*:*:*:*","matchCriteriaId":"86CB937E-37F1-4617-A24B-7152E3BE0823"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:on_command_ccm:5.4:*:*:*:*:*:*:*","matchCriteriaId":"AAFC9887-B922-4A95-8B13-185B03B30B41"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:on_icommand:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D9659D35-EC8F-4214-883C-A9E292DC48DA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109571689621784&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12604","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.sarc.com/avcenter/security/Content/2004.09.29.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11225","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17447","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109571689621784&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.sarc.com/avcenter/security/Content/2004.09.29.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1695","sourceIdentifier":"cve@mitre.org","published":"2004-09-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / (slash)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emulive:server4:commerce_build_7560:*:*:*:*:*:*:*","matchCriteriaId":"7C0A6C2F-E3D5-4329-BA92-04193A7AD065"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109577497718374&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12616","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00051-09202004","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11226","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17450","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109577497718374&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00051-09202004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17450","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1696","sourceIdentifier":"cve@mitre.org","published":"2004-09-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to cause a denial of service (application crash) via a sequence of carriage returns sent to TCP port 66."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emulive:server4:commerce_build_7560:*:*:*:*:*:*:*","matchCriteriaId":"7C0A6C2F-E3D5-4329-BA92-04193A7AD065"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109577497718374&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12616","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00051-09202004","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11226","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17451","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109577497718374&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12616","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00051-09202004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17451","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1697","sourceIdentifier":"cve@mitre.org","published":"2004-09-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"Forgot your Password\" link in Computer Associates (CA) Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:ca:unicenter_management:portal_2.0:*:*:*:*:*:*:*","matchCriteriaId":"CCC3E00F-351D-4870-8AFC-99EA705D57E2"},{"vulnerable":false,"criteria":"cpe:2.3:a:ca:unicenter_management:portal_3.1:*:*:*:*:*:*:*","matchCriteriaId":"17B1E3A6-034C-4C55-A0E3-67AD0A9C4A69"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109579952809320&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12620","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11229","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17464","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109579952809320&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17464","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1698","sourceIdentifier":"cve@mitre.org","published":"2004-09-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Base64 function in PopMessenger 1.60 (before 20 Sep 2004) and earlier allows remote attackers to cause a denial of service (application crash) via invalid characters in a message, which causes several alert dialogs to be displayed and leads to a crash."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leadmind:popmessenger:1.60:*:*:*:*:*:*:*","matchCriteriaId":"5972549F-22ED-4DDE-A8F1-C08794147E95"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109581586128899&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12612/","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11230","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17465","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109581586128899&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12612/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1699","sourceIdentifier":"cve@mitre.org","published":"2004-09-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SettingsBase.php in Pinnacle ShowCenter 1.51 allows remote attackers to cause a denial of service (web interface errors) via an invalid Skin parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pinnacle_systems:showcenter:1.51:*:*:*:*:*:*:*","matchCriteriaId":"D51964CE-A2D6-49F5-B2FC-B00188704E26"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026733.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109589167110196&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11232","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17463","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026733.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109589167110196&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17463","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1700","sourceIdentifier":"cve@mitre.org","published":"2004-10-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SettingsBase.php in Pinnacle ShowCenter 1.51 build 121 allows remote attackers to inject arbitrary HTML or web script via the Skin parameter, which is echoed in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pinnacle_systems:showcenter:1.51_build_121:*:*:*:*:*:*:*","matchCriteriaId":"376255F9-CFC3-488F-9DB2-BD7D796B1917"}]}]}],"references":[{"url":"http://secunia.com/advisories/12613","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11415","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17708","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12613","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17708","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1701","sourceIdentifier":"cve@mitre.org","published":"2004-08-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH command during RSA authentication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5E712F24-407C-451F-9DB4-09579B50F85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B3AE934D-08E5-42C7-B4C1-C9B0C8881B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FD09E7B0-CA9F-49FC-BB8B-54CDB3230C98"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CC2CD9C4-C206-4C43-B519-6E791187E2DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D38FC40B-AC0A-4DD6-9964-3E8D57EC5F19"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2B4445F7-307B-4653-A0E4-0AE513218980"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.5:b1:*:*:*:*:*:*","matchCriteriaId":"B4EC7DFB-CBB8-457F-94A0-1DBB833F5F71"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.5:pre:*:*:*:*:*:*","matchCriteriaId":"0B6729F6-B94B-4897-BEF5-C3A10A18D085"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.5:pre2:*:*:*:*:*:*","matchCriteriaId":"8CF801CA-BED6-43CA-8EA1-522365F2AA57"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"455F26C8-CFDD-4C9C-8482-8D53614B1143"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"61A3C108-D79A-4465-8F4D-317AD84098AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.7:p1:*:*:*:*:*:*","matchCriteriaId":"D21D57EA-DF58-429B-9FBE-F0080085B62E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.7:p2:*:*:*:*:*:*","matchCriteriaId":"5E622AEA-F5B4-4BA3-B9F0-2E7C4D121411"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.7:p3:*:*:*:*:*:*","matchCriteriaId":"D23A118C-59A6-44AB-A772-ED0037C95B53"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4EC61324-5640-48E4-B3E3-0006FC90770E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.8:p1:*:*:*:*:*:*","matchCriteriaId":"BFC8CA7A-AB4C-4A04-B290-43A5E2B7B9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.1.0:a6:*:*:*:*:*:*","matchCriteriaId":"9CD529EF-93DF-441E-968B-32BAF48A9913"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.1.0:a8:*:*:*:*:*:*","matchCriteriaId":"9BAB0408-08BD-4DCE-BA56-C60AD845E705"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.1.0:a9:*:*:*:*:*:*","matchCriteriaId":"F78851E3-1E2B-45DB-8B4A-F8E1BDE2E057"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.1.7:p1:*:*:*:*:*:*","matchCriteriaId":"546496E5-38B1-4E01-A8AB-C32DD7FDC59E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109208394910086&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110886670528775&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12251","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200408-08.xml","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.coresecurity.com/common/showdoc.php?idx=387&idxseccion=10","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10899","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16935","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109208394910086&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110886670528775&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200408-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.coresecurity.com/common/showdoc.php?idx=387&idxseccion=10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10899","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16935","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1702","sourceIdentifier":"cve@mitre.org","published":"2004-08-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of the ReceiveTransaction function, which leads to a failed malloc call and triggers to a null dereference, which allows remote attackers to cause a denial of service (crash)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"5E712F24-407C-451F-9DB4-09579B50F85B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B3AE934D-08E5-42C7-B4C1-C9B0C8881B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"FD09E7B0-CA9F-49FC-BB8B-54CDB3230C98"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CC2CD9C4-C206-4C43-B519-6E791187E2DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D38FC40B-AC0A-4DD6-9964-3E8D57EC5F19"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2B4445F7-307B-4653-A0E4-0AE513218980"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.5:b1:*:*:*:*:*:*","matchCriteriaId":"B4EC7DFB-CBB8-457F-94A0-1DBB833F5F71"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.5:pre:*:*:*:*:*:*","matchCriteriaId":"0B6729F6-B94B-4897-BEF5-C3A10A18D085"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.5:pre2:*:*:*:*:*:*","matchCriteriaId":"8CF801CA-BED6-43CA-8EA1-522365F2AA57"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"455F26C8-CFDD-4C9C-8482-8D53614B1143"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"61A3C108-D79A-4465-8F4D-317AD84098AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.7:p1:*:*:*:*:*:*","matchCriteriaId":"D21D57EA-DF58-429B-9FBE-F0080085B62E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.7:p2:*:*:*:*:*:*","matchCriteriaId":"5E622AEA-F5B4-4BA3-B9F0-2E7C4D121411"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.7:p3:*:*:*:*:*:*","matchCriteriaId":"D23A118C-59A6-44AB-A772-ED0037C95B53"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"4EC61324-5640-48E4-B3E3-0006FC90770E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.0.8:p1:*:*:*:*:*:*","matchCriteriaId":"BFC8CA7A-AB4C-4A04-B290-43A5E2B7B9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.1.0:a6:*:*:*:*:*:*","matchCriteriaId":"9CD529EF-93DF-441E-968B-32BAF48A9913"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.1.0:a8:*:*:*:*:*:*","matchCriteriaId":"9BAB0408-08BD-4DCE-BA56-C60AD845E705"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.1.0:a9:*:*:*:*:*:*","matchCriteriaId":"F78851E3-1E2B-45DB-8B4A-F8E1BDE2E057"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:cfengine:2.1.7:p1:*:*:*:*:*:*","matchCriteriaId":"546496E5-38B1-4E01-A8AB-C32DD7FDC59E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109208394910086&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12251","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200408-08.xml","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.coresecurity.com/common/showdoc.php?idx=387&idxseccion=10","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10900","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16937","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109208394910086&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200408-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.coresecurity.com/common/showdoc.php?idx=387&idxseccion=10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16937","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1703","sourceIdentifier":"cve@mitre.org","published":"2004-07-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the administrator's browser loads the page with the img tag."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fusionphp:fusion_news:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"DABAE06D-BAE7-4551-AC39-7869817A2D44"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109122824523226&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://securitytracker.com/id?1010829","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10836","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16853","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=109122824523226&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://securitytracker.com/id?1010829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10836","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1704","sourceIdentifier":"cve@mitre.org","published":"2004-07-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WpQuiz 2.60b1 through 2.60b8 allows remote attackers to gain privileges via a direct request to adminrestore.php in the extras directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wire_plastic_design:wpquiz:2.60b1:*:*:*:*:*:*:*","matchCriteriaId":"0D8DE3CB-55D0-478F-8114-EBA0420B4A18"},{"vulnerable":true,"criteria":"cpe:2.3:a:wire_plastic_design:wpquiz:2.60b2:*:*:*:*:*:*:*","matchCriteriaId":"A20A0851-FAA0-4A26-A3A2-77CBB3FCF09D"},{"vulnerable":true,"criteria":"cpe:2.3:a:wire_plastic_design:wpquiz:2.60b3:*:*:*:*:*:*:*","matchCriteriaId":"9D0A37C5-6510-4BB2-BBFD-D1CB108EA791"},{"vulnerable":true,"criteria":"cpe:2.3:a:wire_plastic_design:wpquiz:2.60b4:*:*:*:*:*:*:*","matchCriteriaId":"E0C15558-A80E-4D2B-AA19-1C9B611243C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wire_plastic_design:wpquiz:2.60b5:*:*:*:*:*:*:*","matchCriteriaId":"9CEDA022-D39E-4921-B411-4A5B41BBE7F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:wire_plastic_design:wpquiz:2.60b6:*:*:*:*:*:*:*","matchCriteriaId":"D4328225-320A-4826-AE59-98CFE6C8B964"},{"vulnerable":true,"criteria":"cpe:2.3:a:wire_plastic_design:wpquiz:2.60b7:*:*:*:*:*:*:*","matchCriteriaId":"74E02A33-5B8F-40C4-83D2-CECE3165DBAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:wire_plastic_design:wpquiz:2.60b8:*:*:*:*:*:*:*","matchCriteriaId":"036BFB05-01B2-4AC3-96D8-3CA1E08E6701"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109122270013514&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8321","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16848","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109122270013514&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1705","sourceIdentifier":"cve@mitre.org","published":"2004-07-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citadel:ux:5.90:*:*:*:*:*:*:*","matchCriteriaId":"40B4D12C-52B9-48E5-B4E7-693871C01AEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:citadel:ux:5.91:*:*:*:*:*:*:*","matchCriteriaId":"A8FB4964-7A47-4C79-A9FB-449BEDF0C1D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:citadel:ux:6.07:*:*:*:*:*:*:*","matchCriteriaId":"A0736380-4031-4BBE-9B12-FE8ACF1BC36F"},{"vulnerable":true,"criteria":"cpe:2.3:a:citadel:ux:6.08:*:*:*:*:*:*:*","matchCriteriaId":"6015B2FA-A93E-4DFB-83BA-1ED45D449FD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:citadel:ux:6.23:*:*:*:*:*:*:*","matchCriteriaId":"34FC0EC3-E9E3-45B9-9716-C4803F4DA54C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109121546120575&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109146099404071&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12197","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010809","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.nosystem.com.ar/advisories/advisory-04.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10833","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16840","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109121546120575&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109146099404071&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12197","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010809","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.nosystem.com.ar/advisories/advisory-04.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16840","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1706","sourceIdentifier":"cve@mitre.org","published":"2004-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The U.S. Robotics USR808054 wireless access point allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via an HTTP GET request with a long version string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:u.s.robotics:usr808054:1.21_h:*:*:*:*:*:*:*","matchCriteriaId":"803E9861-B254-48B8-A7F0-7BFEBBA1BC20"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109146350605751&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12207","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10840","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16860","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109146350605751&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1707","sourceIdentifier":"cve@mitre.org","published":"2004-07-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) dbsnmp and (2) nmo programs in Oracle 8i, Oracle 9i, and Oracle IAS 9.0.2.0.1, on Unix systems, use a default path to find and execute library files while operating at raised privileges, which allows certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:*:*:*:*:*:*:*:*","matchCriteriaId":"AD38E99A-864A-4E99-B6A5-12AACDA822E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*","matchCriteriaId":"6A6F28FD-6EAD-4EDD-B9A1-0B120D0F0919"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C0160E00-D722-40CE-976C-77CB91C1B94D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E59B89D9-AAF9-40CB-931C-EB4958491B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C64888FB-133F-4930-8368-1BD2A4FB11A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"87DEB7BD-FB71-4C22-A0FF-89923B263DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BAAD1A33-4333-4AFB-8D49-1274AE345BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"852BF209-3C6F-403B-920D-50C46D37515B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_portal:3.0.9.8.5:*:*:*:*:*:*:*","matchCriteriaId":"4CB7896F-B5E6-4182-85F0-11A04A16F961"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_portal:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"DFEBABBB-DC11-4A8B-8C8A-A05D144F11A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_portal:9.0.2.3a:*:*:*:*:*:*:*","matchCriteriaId":"5C5E7916-B077-4EE8-AD9E-FA118019E035"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server_portal:9.0.2.3b:*:*:*:*:*:*:*","matchCriteriaId":"F03E1EB3-EB24-4A18-9DA1-AB6243C48221"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server_lite:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3E33A069-8301-4AD5-BDD3-8371DA394EE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server_lite:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8C87F621-3405-4754-8112-87078CDC2554"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server_lite:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CAC67B4E-CCFE-4ACB-B3FF-7A6133219F5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D96A60B5-7B83-4E94-AF2B-AF3DF28EE1D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0C5C8D47-953E-41DF-9852-955611F6D387"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.0.6_.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C4798CAE-9AAA-4623-85B2-309DB46DD28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"121CF7A1-1710-4DA1-B7B6-028557D3FA49"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.0.2:*:*:*:*:*:*:*","matchCriteriaId":"616AD7A7-C8F3-4125-8E26-64109EA40730"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.5_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C7365AA-ACDA-461A-A84C-6B4FF04F295F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"42C22E50-FDB8-4314-9F36-70D0130EAA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.6_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2C65AC14-2AA0-4475-9932-E4AEA410CBCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"BA730ABB-F315-4F7F-B820-33C5558B05DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:enterprise_8.1.7_.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B4CE4E08-4892-419D-AC51-68DD42073092"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C65C2671-2FFE-4461-A570-72E3BBC312D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.0.6_.3:*:*:*:*:*:*:*","matchCriteriaId":"CA59E72F-ACC1-44F3-AE63-B42F1EB83F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B5CB4061-855C-4DAA-BDAD-AA1E68EFC1E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.6:*:*:*:*:*:*:*","matchCriteriaId":"07F81AC9-DEBD-4B04-8753-C68BAE509B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"0785C55D-183D-42D8-A9F9-DBD297FE7F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8086BBDC-76BE-47C0-8F11-CEC57A23FC27"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.1:*:*:*:*:*:*:*","matchCriteriaId":"72BAAEF7-74CA-4C4F-8D52-AC4D5DE2E0E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle8i:standard_8.1.7_.4:*:*:*:*:*:*:*","matchCriteriaId":"EECAE774-22F3-4872-9E05-A14376F3883D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"DFAA7E8B-263B-40A2-B6D8-8A303A7D4358"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:client_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"085FF0CB-B426-4DCB-9411-017A45280A60"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2201796B-013B-4440-B366-1F2966AA86FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"43C6FFA8-18A6-4EE1-BE10-A1B7F3C1A47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"F90F6C4F-CEF5-4172-97FC-617B71EAA636"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"2FFA2A5C-B289-4505-85F5-7F6F0222B552"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4E876825-D6E5-4958-B737-4CE43A32BEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8E07567-754A-40C0-9428-D151880EE6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"6233345D-5100-404A-9B61-524D9679D9E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB739C3-A9BD-433F-8547-12BC615DB18D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F4D7A3CB-54CC-4CD9-9672-366233BF0CCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"58DB0B6B-EB97-448A-B63E-E5997382DD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DA77BC6D-661F-46E9-B144-1587C1192B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"16F9C7F3-8140-4FEF-8319-64CE51B830AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2:*:*:*:*:*:*:*","matchCriteriaId":"68286D06-9EBA-4FBD-AB0B-D80993895416"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C059683-E0A1-4E97-B393-CB6B0EACF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675664-7036-48D0-9524-0350F626D4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"EA9F3EE8-DA8B-4605-B70B-CFCA25B07C1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D0DE0FB4-3C1A-460D-B48E-11D7AF415A94"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0:*:*:*:*:*:*:*","matchCriteriaId":"6E46FE2E-CA1A-4970-81FF-0BFFF2CF6849"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3EE7A2B1-A161-4A20-9EEC-B1EF7F2E387C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D65D66A0-23F7-4110-AF71-05CBFB3F92F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F207CBC6-D186-418D-8F11-3E623530E00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB2708A-58D1-4F17-8504-3748D6667788"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"E83B1C7A-287A-405F-B44E-85F891183D2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"34FC1E19-8F20-4215-8D90-E42EF7126BD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2:*:*:*:*:*:*:*","matchCriteriaId":"CB172848-A873-4137-A335-AD034806A5EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B78BD7D2-7B48-438C-8C24-01C4007C1A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0DDCC0D1-32AD-4902-8383-2AA169C3F3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2D4D70A8-A6FE-4F82-82F1-AB1E9C28FB35"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"7F64908D-FDAA-499B-8060-8A6EC2443418"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.3:*:*:*:*:*:*:*","matchCriteriaId":"99255D3E-41FF-4D2F-A11B-9563997F4110"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109147677214087&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12205","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10829","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16839","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109147677214087&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16839","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1708","sourceIdentifier":"cve@mitre.org","published":"2004-08-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Webbsyte Chat 0.9.0 allows remote attackers to cause a denial of service (crash) via a large number of connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shawn_webb:webbsyte_chat:0.9:*:*:*:*:*:*:*","matchCriteriaId":"E13F4360-AF2C-42C8-ABCE-AD6F9F588698"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109156450320855&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10842","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16852","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109156450320855&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16852","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1709","sourceIdentifier":"cve@mitre.org","published":"2004-08-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Datakey Rainbow iKey2032 USB token, when using the CIP client package, does not encrypt communications between the token and the driver, which could allow local users to obtain the PINs of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:datakey:rainbow_ikey2032_usb_token:*:*:*:*:*:*:*:*","matchCriteriaId":"71AF16D7-9F34-4BBA-BA99-3A14D94F0529"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109164096013467&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16887","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109164096013467&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16887","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1710","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"page.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the url parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andrew_kilpatrick:page_cgi:*:*:*:*:*:*:*:*","matchCriteriaId":"546EF48E-3019-4D38-AE87-BA9400AA7F17"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109181771832634&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8936","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19713","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109181771832634&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19713","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1711","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary web script or HTML via the reply parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"044E2E34-470C-45C9-8136-22493077D842"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5FB2555-7146-4A75-9D24-250BBC09244A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"949F0BC0-A79E-4B1D-894D-650CF68109F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"616AE17F-F5B4-4D64-B287-0AAB189C802A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"74246580-F351-4EAE-9406-2386CFF1819D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"077FFAAB-BACD-43F4-B146-DBFFD58CE619"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"9C715839-F020-4F42-94F0-9FA34F294578"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109182851216921&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12262","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10884","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16924","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109182851216921&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10884","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1712","sourceIdentifier":"cve@mitre.org","published":"2004-08-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in TypePad allows remote attackers to inject arbitrary Javascript via the name parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:typepad:typepad:*:*:*:*:*:*:*:*","matchCriteriaId":"C70F2C6F-B478-4CC7-8FC9-95C7A62FC125"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109189453302959&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19664","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109189453302959&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1713","sourceIdentifier":"cve@mitre.org","published":"2004-08-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in HP Process Resource Manager (PRM) C.02.01[.01] and earlier, as used by HP-UX Workload Manager (WLM), allows local users to corrupt data files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:process_resource_manager:c.01.07:*:*:*:*:*:*:*","matchCriteriaId":"7494989E-0CCD-4FA3-BAA1-A557A31AF6F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:process_resource_manager:c.01.08.02:*:*:*:*:*:*:*","matchCriteriaId":"65078529-5C73-4139-B318-87798647851F"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:process_resource_manager:c.02.01.01:*:*:*:*:*:*:*","matchCriteriaId":"731AC178-8E74-42C1-AEBE-387B605A91E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:workload_manager:a.02.01:*:*:*:*:*:*:*","matchCriteriaId":"5F04D31D-3CDF-4552-B683-DF644E3715A4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109215093809027&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12245","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10907","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16928","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109215093809027&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12245","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1714","sourceIdentifier":"cve@mitre.org","published":"2004-08-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying firewall.ini to contain a large firewall rule."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-732"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6cbd:*:*:*:*:*:*:*","matchCriteriaId":"D62AC2AC-E7ED-498B-805F-2300B9793C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6cbr:*:*:*:*:*:*:*","matchCriteriaId":"E03A05BE-03F9-49A5-8864-146E44E223B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6cbz:*:*:*:*:*:*:*","matchCriteriaId":"44D1258B-70B0-4B20-9992-1E5DDD899935"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6cca:*:*:*:*:*:*:*","matchCriteriaId":"8FFB331C-EA1C-4DC6-B699-A4F6AB8FFB7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6ccb:*:*:*:*:*:*:*","matchCriteriaId":"2E52039E-728B-4028-AEB0-9F77EE75B245"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6ccc:*:*:*:*:*:*:*","matchCriteriaId":"F101B85F-C141-4977-885F-C29306BF1C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6ccd:*:*:*:*:*:*:*","matchCriteriaId":"5746C7F8-8560-4082-AD73-66DB9D16D619"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6cce:*:*:*:*:*:*:*","matchCriteriaId":"A76034E6-B3B8-4A6A-B6CA-16AA2A8CD854"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6ccf:*:*:*:*:*:*:*","matchCriteriaId":"7A02F0CF-E1C0-43FE-9971-966002A53679"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6ccg:*:*:*:*:*:*:*","matchCriteriaId":"4E9F7EF2-D5AC-47F3-948D-ED87B4F5269C"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.5cdf:*:*:*:*:*:*:*","matchCriteriaId":"093413D9-CE6C-4285-9923-6DC2952F9764"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6cbz:*:*:*:*:*:*:*","matchCriteriaId":"E33242A8-7BE6-4A69-A7CC-81BAFC2ADD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6cca:*:*:*:*:*:*:*","matchCriteriaId":"21E08CB5-0C90-4AF2-814C-3B4333681575"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6ccb:*:*:*:*:*:*:*","matchCriteriaId":"8A52A4E2-281A-460C-BCCC-00A464BD6270"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6ccc:*:*:*:*:*:*:*","matchCriteriaId":"B7DB4F39-B3C9-4AA2-A047-709A5D9B7F84"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6ccd:*:*:*:*:*:*:*","matchCriteriaId":"4987E532-8729-4BC4-9997-962C32BC6CFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6cce:*:*:*:*:*:*:*","matchCriteriaId":"B47779E2-7BC5-4A5D-AD90-AC226735C631"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6ccf:*:*:*:*:*:*:*","matchCriteriaId":"3BB1C793-85F6-48EB-8A53-DE8E91271A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6ccg:*:*:*:*:*:*:*","matchCriteriaId":"4D4D3A70-1CE2-4DD6-8890-55D1DCCFEBA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6cch:*:*:*:*:*:*:*","matchCriteriaId":"3A51DA17-F432-4AF0-9902-3FF9509C97BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6cno:*:*:*:*:*:*:*","matchCriteriaId":"E1CA428F-B281-46E2-86C1-E48A94BA4345"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025112.html","source":"cve@mitre.org","tags":["Not Applicable"]},{"url":"http://marc.info/?l=bugtraq&m=109223751031166&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/10915","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16959","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025112.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Not Applicable"]},{"url":"http://marc.info/?l=bugtraq&m=109223751031166&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/10915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1715","sourceIdentifier":"cve@mitre.org","published":"2004-08-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This was fixed in MIMEsweeper for Web v5.0.4.","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via \"..\\\\\", \"..\\\", and similar dot dot sequences in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mimesweeper_for_web:4.0:*:*:*:*:*:*:*","matchCriteriaId":"947EF78C-0E17-4C8E-AD28-F0534A20107F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mimesweeper_for_web:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C4EAB5F2-58E0-4D58-9888-3AC2CEB0F580"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109224211512029&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109225567212978&w=2","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.nl/0408-exploits/clearswift.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12273","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10918","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16960","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109224211512029&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109225567212978&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.nl/0408-exploits/clearswift.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12273","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16960","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1716","sourceIdentifier":"cve@mitre.org","published":"2004-08-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PForum before 1.26 allows remote attackers to inject arbitrary web script or HTML via the (1) IRC Server or (2) AIM ID fields in the user profile."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powie:pforum:1.24:*:*:*:*:*:*:*","matchCriteriaId":"482C52B4-A029-4D00-8CA6-1D3225D8DE8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:powie:pforum:1.25:*:*:*:*:*:*:*","matchCriteriaId":"BC0DC717-9742-4852-9582-8E4EF0C361DD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109267937212298&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12317/","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/674542","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/8985","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.pscript.de/news/index.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10954","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17003","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109267937212298&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12317/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/674542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/8985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.pscript.de/news/index.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1717","sourceIdentifier":"cve@mitre.org","published":"2004-08-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote attackers to execute arbitrary code via a Postscript file with a long (1) BoundingBox, (2) comment, (3) Orientation, (4) PageOrder, or (5) Pages value."}],"vendorComments":[{"organization":"Red Hat","comment":"This CVE is a duplicate (rediscovery) of CVE-2002-0838","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"21635C49-6F67-4852-A34B-6CA758D92F48"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:2.7b1:*:*:*:*:*:*:*","matchCriteriaId":"B2CDF1F6-AEA8-493B-AF8E-B06C2AFD0DCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:2.7b2:*:*:*:*:*:*:*","matchCriteriaId":"E062D50D-DEFA-45A6-B749-E3B7CAACD621"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:2.7b3:*:*:*:*:*:*:*","matchCriteriaId":"81853A68-8286-4159-87FC-91CE94484DDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:2.7b4:*:*:*:*:*:*:*","matchCriteriaId":"6A2C2C2E-227C-477A-8E6B-D82C941A778F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:2.7b5:*:*:*:*:*:*:*","matchCriteriaId":"9B0FE26D-8B0B-4620-BC5B-6C0E0D635FA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:2.9.4:*:*:*:*:*:*:*","matchCriteriaId":"BDB7A45D-C67B-4D46-94AF-3BAA75C06157"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D68136DD-B309-47D7-9320-D48EF6E0F9B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F698620-41A9-4058-B3A2-68134FDEACD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"9775BB2D-B945-4533-BBA7-2602CD4B2C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"0FE2C974-BC5F-4D18-8B56-6E76CFC8237F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"621BAE10-276D-44DA-A124-51D4A00E7552"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CE42231C-7764-41ED-B7A3-641CFC58BBC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"4655CA87-E507-4FAF-A848-C502BE8564FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.4.12:*:*:*:*:*:*:*","matchCriteriaId":"DAE9A7B0-6DF8-44BC-A9EC-7EB89AC91722"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"DB5E5D66-FF08-4B26-A2BD-421E7FFF73B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"3A29A154-2CF6-441B-8715-84F49F21A15A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gv:gv:3.5.8:*:*:*:*:*:*:*","matchCriteriaId":"185BFE23-5F13-45A1-B514-21957A613799"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109267677114331&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10944","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17019","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109267677114331&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1718","sourceIdentifier":"cve@mitre.org","published":"2004-08-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ZwOpenSection function in Integrity Protection Driver (IPD) 1.4 and earlier allows local users to cause a denial of service (crash) via an invalid pointer in the \"oa\" argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pedestal_software:integrity_protection_driver:1.2:*:*:*:*:*:*:*","matchCriteriaId":"83F2F0D5-E7E1-4F3D-B766-BC4C599FF247"},{"vulnerable":true,"criteria":"cpe:2.3:a:pedestal_software:integrity_protection_driver:1.3:*:*:*:*:*:*:*","matchCriteriaId":"A48668E9-B5BB-4844-B3BF-2283BCCF08B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:pedestal_software:integrity_protection_driver:1.4:*:*:*:*:*:*:*","matchCriteriaId":"BB4E8A83-4140-497A-92FA-0431AFB905D0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109276749821133&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12169","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ngsec.com/docs/advisories/NGSEC-2004-6.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10965","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17010","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109276749821133&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ngsec.com/docs/advisories/NGSEC-2004-6.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1719","sourceIdentifier":"cve@mitre.org","published":"2004-08-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) cserver, (3) ext, (4) global, (5) showgroups, (6) or showlite parameters to address.html, or the (7) spage or (8) autoresponder parameters to settings.html, the (9) folder parameter to readmail.html, or the (10) attachmentpage_text_error parameter to attachment.html, (11) folder, (12) ct, or (13) cv parameters to calendar.html, (14) an <img> tag, or (15) the subject of an e-mail message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:merak:mail_server:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A995EEE4-9707-4FD6-9624-1168258CE0D3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109279057326044&w=2","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.nl/0408-exploits/merak527.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12269","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010969","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9037","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9038","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9039","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9040","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9041","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9042","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10966","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17024","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109279057326044&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.nl/0408-exploits/merak527.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9041","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1720","sourceIdentifier":"cve@mitre.org","published":"2004-08-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sensitive information via an invalid HTTP request, which reveals the installation path. NOTE: it is unclear whether the calendar.html is an exposure, since the path is leaked in web logs that may only be available to the administrators, who would have access to the path through legitimate means."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:merak:mail_server:7.4.5:*:*:*:*:*:*:*","matchCriteriaId":"A995EEE4-9707-4FD6-9624-1168258CE0D3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109279057326044&w=2","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.nl/0408-exploits/merak527.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12269","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010969","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9043","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10966","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17027","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109279057326044&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.nl/0408-exploits/merak527.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1721","sourceIdentifier":"cve@mitre.org","published":"2004-08-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:merak:mail_server:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"F791580D-74D9-48FA-8B46-8A6635174FA8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109279057326044&w=2","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.nl/0408-exploits/merak527.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12269","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010969","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9045","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10966","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17029","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109279057326044&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.nl/0408-exploits/merak527.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17029","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1722","sourceIdentifier":"cve@mitre.org","published":"2004-08-17T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL statements via the schedule parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:merak:mail_server:7.5.2:*:*:*:*:*:*:*","matchCriteriaId":"346B603F-3B90-4242-94E0-D3FACD74F585"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109279057326044&w=2","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.nl/0408-exploits/merak527.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12269","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010969","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9044","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10966","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17022","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109279057326044&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.nl/0408-exploits/merak527.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17022","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1723","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) updateuser.php and (2) forums_prune.php scripts in PHP-Fusion 4.00 allow remote attackers to obtain sensitive information via a direct HTTP request, which reveals the installation path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_fusion:php_fusion:4.00:*:*:*:*:*:*:*","matchCriteriaId":"71DC9F38-3CAD-4B5F-8DC9-0183A92F640F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109285292901685&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17036","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109285292901685&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1724","sourceIdentifier":"cve@mitre.org","published":"2004-08-18T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups directory to world read/write/execute (777), which allows remote attackers to download or view database backups, which have easily guessable filenames and contain the administrator username and password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_fusion:php_fusion:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EA28972C-57DB-4713-8CF1-29A44150E147"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109285292901685&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12336","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10974","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17037","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109285292901685&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1725","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code via a crafted image file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:john_bradley:xv:3.10a:*:*:*:*:*:*:*","matchCriteriaId":"2F6EA50F-7B52-4FF4-A460-9650CAEBE06C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109302498125092&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10985","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17053","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109302498125092&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1726","sourceIdentifier":"cve@mitre.org","published":"2004-08-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in (1) xviris.c, (2) xvpcx.c, and (3) xvpm.c in XV allow remote attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:john_bradley:xv:3.10a:*:*:*:*:*:*:*","matchCriteriaId":"2F6EA50F-7B52-4FF4-A460-9650CAEBE06C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109302498125092&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10985","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17053","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109302498125092&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10985","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17053","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1727","sourceIdentifier":"cve@mitre.org","published":"2004-08-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connections from the same IP address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:2.50:*:*:*:*:*:*:*","matchCriteriaId":"F5268F89-08F2-427F-8C66-7E727D944913"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109309119502208&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12346","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00043-08202004","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10983","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17064","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109309119502208&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00043-08202004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17064","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1728","sourceIdentifier":"cve@mitre.org","published":"2004-08-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in British National Corpus SARA (sarad) allows remote attackers to execute arbitrary code by calling the client with a long string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:british_national_corpus:sara:*:*:*:*:*:*:*:*","matchCriteriaId":"2DAE3673-9CB3-4BB8-875D-096834C98EDE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109308454122827&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12348","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10984","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17060","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109308454122827&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17060","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1729","sourceIdentifier":"cve@mitre.org","published":"2004-08-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Nihuo Web Log Analyzer 1.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nihuo_software:web_log_analyzer:1.6:*:*:*:*:*:*:*","matchCriteriaId":"87F922B5-AD51-4A41-BF4F-C46151B6DCE1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109305923208449&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12347","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10988","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17055","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109305923208449&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10988","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17055","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1730","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Mantis bugtracker allows remote attackers to inject arbitrary web script or HTML via (1) the return parameter to login_page.php, (2) e-mail field in signup.php, (3) action parameter to login_select_proj_page.php, or (4) hide_status parameter to view_all_set.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9:*:*:*:*:*:*:*","matchCriteriaId":"0266C2F7-FB20-44EF-B0BB-ECCF055D03A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A21FF02F-982C-429F-A14D-D6E18058DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10:*:*:*:*:*:*:*","matchCriteriaId":"9407F704-FF3C-4976-BE4C-A1DDC16715D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"A5173B32-1099-47C9-996B-56DB29456BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"A6CA26FD-9C45-4628-82B7-E37E3EA3E2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11:*:*:*:*:*:*:*","matchCriteriaId":"7B9B4611-C002-40F5-978C-BB90F1A893C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"4C7C8B5A-A630-4EDD-A6E8-27D2E1139CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.12:*:*:*:*:*:*:*","matchCriteriaId":"B347D6C8-4607-481D-863E-7F41E9868041"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13:*:*:*:*:*:*:*","matchCriteriaId":"4F434D16-4F09-4BCF-BD3E-9114876C2575"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"F6D8FD23-C9A3-40AB-B3ED-86739BA8A362"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14:*:*:*:*:*:*:*","matchCriteriaId":"72BD480B-7CFB-4FD3-8E47-028F32AEF902"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.1:*:*:*:*:*:*:*","matchCriteriaId":"AC7C781D-F5D1-4C63-B6E3-230DEC80104E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.2:*:*:*:*:*:*:*","matchCriteriaId":"D0755FA0-2365-42B4-8E42-214D5BAD71A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.3:*:*:*:*:*:*:*","matchCriteriaId":"35248DDA-D37D-4D72-9FF8-6813BA4C87BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.4:*:*:*:*:*:*:*","matchCriteriaId":"A67C54F4-4155-43DA-8E07-579249759989"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.5:*:*:*:*:*:*:*","matchCriteriaId":"9DE7BEF1-1522-4666-B6B1-36A308FBC0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.6:*:*:*:*:*:*:*","matchCriteriaId":"C376D216-914A-4D96-8603-C6861B3E2857"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.7:*:*:*:*:*:*:*","matchCriteriaId":"CF0636CA-49A5-4463-B22B-6C5E1E2D44AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.8:*:*:*:*:*:*:*","matchCriteriaId":"E3A07B4C-CE12-4381-BFE4-CE79411F5069"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15:*:*:*:*:*:*:*","matchCriteriaId":"DB6E1BE3-BF57-4ED4-918D-8B23CB195ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.1:*:*:*:*:*:*:*","matchCriteriaId":"BB502B29-FBC5-4984-A735-AA0B6DF4A58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.2:*:*:*:*:*:*:*","matchCriteriaId":"3F759138-7079-471F-B30D-ED62351CFCB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.3:*:*:*:*:*:*:*","matchCriteriaId":"5DF83421-973D-4AC9-BDA3-4161B9CF2D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.4:*:*:*:*:*:*:*","matchCriteriaId":"1633BF3C-89C2-4BEF-9F56-6F19984D3CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.5:*:*:*:*:*:*:*","matchCriteriaId":"084BD5F4-37F8-4913-8045-769FD81F8C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.6:*:*:*:*:*:*:*","matchCriteriaId":"76B09948-A44C-47D8-A5EC-3873FF36F451"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.7:*:*:*:*:*:*:*","matchCriteriaId":"89D72C1E-73E5-4F51-9D30-D28026939C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.8:*:*:*:*:*:*:*","matchCriteriaId":"E9EDAA7A-DF0C-4D9E-9D30-0422E4801612"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.9:*:*:*:*:*:*:*","matchCriteriaId":"2C469C66-B64B-49BD-9D1C-D15F0E9028EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.10:*:*:*:*:*:*:*","matchCriteriaId":"C28223A1-359F-434C-BAAA-82A5F310FA44"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.11:*:*:*:*:*:*:*","matchCriteriaId":"7BF1F18B-AE36-48F3-B784-5C97B3F2535E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.12:*:*:*:*:*:*:*","matchCriteriaId":"F073B8A1-3339-4BF2-B8D1-F6BA5CF9695A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16:*:*:*:*:*:*:*","matchCriteriaId":"3A62328B-4C77-4FF4-B1D9-BE4A2E5C61FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*","matchCriteriaId":"6DAFD163-7FE7-48FB-8860-7B00B0FFA628"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:*","matchCriteriaId":"03A0C36A-83DF-4E67-BA82-0ACE4D50C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17:*:*:*:*:*:*:*","matchCriteriaId":"7C074DBE-AFC9-4094-A170-A31D79C139D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"53520AA0-E5AB-450A-9D95-E075B552D2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"8462CB86-30B1-43D8-B306-271709423DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*","matchCriteriaId":"131A96BB-EF2E-4AE2-9334-91CA96222BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*","matchCriteriaId":"17DC6205-7016-40C3-921A-B5AEC8513CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4:*:*:*:*:*:*:*","matchCriteriaId":"721A536A-9626-4BD7-B84A-E3C4074F1217"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*","matchCriteriaId":"4D77F95A-0059-4442-8D9D-AA7F101FBBE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.5:*:*:*:*:*:*:*","matchCriteriaId":"89786096-AE1B-491B-8284-DBCC2F6112F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18:*:*:*:*:*:*:*","matchCriteriaId":"E0BC255D-6B0F-412D-B639-B9F9656E4839"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"4B4CFE80-223F-45DA-A9FB-03474F61E027"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a2:*:*:*:*:*:*:*","matchCriteriaId":"8724300D-CBDC-4C66-BF78-038F838C06DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a3:*:*:*:*:*:*:*","matchCriteriaId":"B7283A58-EE8E-493F-8E51-C97FF87ECA16"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a4:*:*:*:*:*:*:*","matchCriteriaId":"E3CF3162-EAF8-438C-891A-FD13ECF6D6A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18a1:*:*:*:*:*:*:*","matchCriteriaId":"2202C65A-33FB-4742-8706-2BDD5B442030"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a:*:*:*:*:*:*:*","matchCriteriaId":"C1E7658F-A543-46F5-B79D-E0E25B7C574F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109312225727345&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12338","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10994","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17066","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17069","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17070","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17072","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109312225727345&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17069","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17070","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17072","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1731","sourceIdentifier":"cve@mitre.org","published":"2004-08-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9:*:*:*:*:*:*:*","matchCriteriaId":"0266C2F7-FB20-44EF-B0BB-ECCF055D03A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A21FF02F-982C-429F-A14D-D6E18058DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10:*:*:*:*:*:*:*","matchCriteriaId":"9407F704-FF3C-4976-BE4C-A1DDC16715D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"A5173B32-1099-47C9-996B-56DB29456BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"A6CA26FD-9C45-4628-82B7-E37E3EA3E2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11:*:*:*:*:*:*:*","matchCriteriaId":"7B9B4611-C002-40F5-978C-BB90F1A893C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"4C7C8B5A-A630-4EDD-A6E8-27D2E1139CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.12:*:*:*:*:*:*:*","matchCriteriaId":"B347D6C8-4607-481D-863E-7F41E9868041"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13:*:*:*:*:*:*:*","matchCriteriaId":"4F434D16-4F09-4BCF-BD3E-9114876C2575"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"F6D8FD23-C9A3-40AB-B3ED-86739BA8A362"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14:*:*:*:*:*:*:*","matchCriteriaId":"72BD480B-7CFB-4FD3-8E47-028F32AEF902"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.1:*:*:*:*:*:*:*","matchCriteriaId":"AC7C781D-F5D1-4C63-B6E3-230DEC80104E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.2:*:*:*:*:*:*:*","matchCriteriaId":"D0755FA0-2365-42B4-8E42-214D5BAD71A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.3:*:*:*:*:*:*:*","matchCriteriaId":"35248DDA-D37D-4D72-9FF8-6813BA4C87BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.4:*:*:*:*:*:*:*","matchCriteriaId":"A67C54F4-4155-43DA-8E07-579249759989"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.5:*:*:*:*:*:*:*","matchCriteriaId":"9DE7BEF1-1522-4666-B6B1-36A308FBC0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.6:*:*:*:*:*:*:*","matchCriteriaId":"C376D216-914A-4D96-8603-C6861B3E2857"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.7:*:*:*:*:*:*:*","matchCriteriaId":"CF0636CA-49A5-4463-B22B-6C5E1E2D44AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.8:*:*:*:*:*:*:*","matchCriteriaId":"E3A07B4C-CE12-4381-BFE4-CE79411F5069"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15:*:*:*:*:*:*:*","matchCriteriaId":"DB6E1BE3-BF57-4ED4-918D-8B23CB195ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.1:*:*:*:*:*:*:*","matchCriteriaId":"BB502B29-FBC5-4984-A735-AA0B6DF4A58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.2:*:*:*:*:*:*:*","matchCriteriaId":"3F759138-7079-471F-B30D-ED62351CFCB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.3:*:*:*:*:*:*:*","matchCriteriaId":"5DF83421-973D-4AC9-BDA3-4161B9CF2D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.4:*:*:*:*:*:*:*","matchCriteriaId":"1633BF3C-89C2-4BEF-9F56-6F19984D3CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.5:*:*:*:*:*:*:*","matchCriteriaId":"084BD5F4-37F8-4913-8045-769FD81F8C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.6:*:*:*:*:*:*:*","matchCriteriaId":"76B09948-A44C-47D8-A5EC-3873FF36F451"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.7:*:*:*:*:*:*:*","matchCriteriaId":"89D72C1E-73E5-4F51-9D30-D28026939C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.8:*:*:*:*:*:*:*","matchCriteriaId":"E9EDAA7A-DF0C-4D9E-9D30-0422E4801612"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.9:*:*:*:*:*:*:*","matchCriteriaId":"2C469C66-B64B-49BD-9D1C-D15F0E9028EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.10:*:*:*:*:*:*:*","matchCriteriaId":"C28223A1-359F-434C-BAAA-82A5F310FA44"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.11:*:*:*:*:*:*:*","matchCriteriaId":"7BF1F18B-AE36-48F3-B784-5C97B3F2535E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.12:*:*:*:*:*:*:*","matchCriteriaId":"F073B8A1-3339-4BF2-B8D1-F6BA5CF9695A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16:*:*:*:*:*:*:*","matchCriteriaId":"3A62328B-4C77-4FF4-B1D9-BE4A2E5C61FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.0:*:*:*:*:*:*:*","matchCriteriaId":"6DAFD163-7FE7-48FB-8860-7B00B0FFA628"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:*","matchCriteriaId":"03A0C36A-83DF-4E67-BA82-0ACE4D50C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17:*:*:*:*:*:*:*","matchCriteriaId":"7C074DBE-AFC9-4094-A170-A31D79C139D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.0:*:*:*:*:*:*:*","matchCriteriaId":"53520AA0-E5AB-450A-9D95-E075B552D2E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"8462CB86-30B1-43D8-B306-271709423DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*","matchCriteriaId":"131A96BB-EF2E-4AE2-9334-91CA96222BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*","matchCriteriaId":"17DC6205-7016-40C3-921A-B5AEC8513CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4:*:*:*:*:*:*:*","matchCriteriaId":"721A536A-9626-4BD7-B84A-E3C4074F1217"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*","matchCriteriaId":"4D77F95A-0059-4442-8D9D-AA7F101FBBE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.5:*:*:*:*:*:*:*","matchCriteriaId":"89786096-AE1B-491B-8284-DBCC2F6112F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18:*:*:*:*:*:*:*","matchCriteriaId":"E0BC255D-6B0F-412D-B639-B9F9656E4839"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"4B4CFE80-223F-45DA-A9FB-03474F61E027"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a2:*:*:*:*:*:*:*","matchCriteriaId":"8724300D-CBDC-4C66-BF78-038F838C06DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a3:*:*:*:*:*:*:*","matchCriteriaId":"B7283A58-EE8E-493F-8E51-C97FF87ECA16"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a4:*:*:*:*:*:*:*","matchCriteriaId":"E3CF3162-EAF8-438C-891A-FD13ECF6D6A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18a1:*:*:*:*:*:*:*","matchCriteriaId":"2202C65A-33FB-4742-8706-2BDD5B442030"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a:*:*:*:*:*:*:*","matchCriteriaId":"C1E7658F-A543-46F5-B79D-E0E25B7C574F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109312225727345&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10995","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17093","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109312225727345&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1732","sourceIdentifier":"cve@mitre.org","published":"2004-08-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This was fixed in version 1.4.2.","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mydms:mydms:1.4:*:*:*:*:*:*:*","matchCriteriaId":"785538B9-2136-47C7-A609-7462A27B5595"},{"vulnerable":true,"criteria":"cpe:2.3:a:mydms:mydms:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0CE813AB-3DC6-44F5-AD78-B4A8BFECDAEA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109314495007280&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12340","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10996","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17054","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109314495007280&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17054","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1733","sourceIdentifier":"cve@mitre.org","published":"2004-08-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via .. (dot dot) sequences in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mydms:mydms:1.4:*:*:*:*:*:*:*","matchCriteriaId":"785538B9-2136-47C7-A609-7462A27B5595"},{"vulnerable":true,"criteria":"cpe:2.3:a:mydms:mydms:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"0CE813AB-3DC6-44F5-AD78-B4A8BFECDAEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mydms:mydms:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"0BC40E9D-F671-4AF4-8167-0D8FE4D1B6C0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109314495007280&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12340","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10996","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17058","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109314495007280&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10996","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1734","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in Mantis 0.19.0a allows remote attackers to execute arbitrary PHP code by modifying the (1) t_core_path parameter to bug_api.php or (2) t_core_dir parameter to relationship_api.php to reference a URL on a remote web server that contains the code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a:*:*:*:*:*:*:*","matchCriteriaId":"C1E7658F-A543-46F5-B79D-E0E25B7C574F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109313416727851&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10993","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17065","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109313416727851&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17065","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1735","sourceIdentifier":"cve@mitre.org","published":"2004-08-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the description field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F2E8161D-DA40-43BB-A2A2-931D2734ABA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.1:*:*:*:*:*:*:*","matchCriteriaId":"A6C16EFE-0F19-4082-8A0A-B8EAD35C2D70"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16B428D5-8502-4310-888D-F0F87124F9F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sympa:sympa:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F68B660F-2FD7-4B54-8841-95EAE2646038"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109312475207604&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12339","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10992","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17057","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109312475207604&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1736","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the installation path in a PHP error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.8.5a:*:*:*:*:*:*:*","matchCriteriaId":"43FD0F4A-4811-4B4A-AF03-8FBC63A99CE9"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025376.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109272483621038&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12308","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17014","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025376.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109272483621038&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1737","sourceIdentifier":"cve@mitre.org","published":"2004-08-16T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.6:*:*:*:*:*:*:*","matchCriteriaId":"88AB7EF7-FD9D-4854-8B18-9BB214E9C03E"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"97372003-62C9-4981-8E8E-22C1D19333F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"421F4C7D-A2C4-47CC-B663-4E12CD130D04"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"70A04BE7-5893-45F1-9F9A-B869E3963EAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"59471E38-C230-43D5-9533-5B2CB327DB39"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"04D3E0EF-80B7-49E0-9DAF-3752E08AD64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"9D46F997-5FE7-477A-A161-4E682579124A"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"51B5B1BE-1B7D-4338-A189-C5D401AF1857"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.6.8:*:*:*:*:*:*:*","matchCriteriaId":"BFD527D7-C79F-42D5-9CB7-B5CA9B242BDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.6.8a:*:*:*:*:*:*:*","matchCriteriaId":"D099FE2B-13CA-447E-B5E7-75A1D407A971"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.8:*:*:*:*:*:*:*","matchCriteriaId":"B3BBF3F3-18C0-49C5-99B0-80FCD133532B"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D1896A7C-6938-494D-90A5-E10BC91EB37D"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.8.2:*:*:*:*:*:*:*","matchCriteriaId":"19CD9A10-32F6-45A4-8793-87E0C2E78675"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.8.2a:*:*:*:*:*:*:*","matchCriteriaId":"C6EF1390-E1B5-45B0-8732-A7004351E1BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.8.3:*:*:*:*:*:*:*","matchCriteriaId":"5D3D7996-E56A-4B72-864E-EC6037028351"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.8.3a:*:*:*:*:*:*:*","matchCriteriaId":"000AE712-7298-4CA1-930B-4DF372671EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.8.4:*:*:*:*:*:*:*","matchCriteriaId":"CFD258DF-CB70-484C-9A6F-F9ABDB012C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.8.5:*:*:*:*:*:*:*","matchCriteriaId":"DFF12ADC-83AA-45FE-9678-F49D05234D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_cacti_group:cacti:0.8.5a:*:*:*:*:*:*:*","matchCriteriaId":"43FD0F4A-4811-4B4A-AF03-8FBC63A99CE9"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025376.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109272483621038&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12308","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-21.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10960","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17011","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025376.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109272483621038&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-21.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1738","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in page.php in JShop allows remote attackers to inject arbitrary web script or HTML via the xPage parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jshop_e-commerce:jshop_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"E58E5AF4-8ECE-49DE-9294-ADC991914D46"}]}]}],"references":[{"url":"http://indohack.sourceforge.net/drponidi/jshop-vuln.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109327547026265&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12345","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011020","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17075","source":"cve@mitre.org"},{"url":"http://indohack.sourceforge.net/drponidi/jshop-vuln.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109327547026265&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011020","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1739","sourceIdentifier":"cve@mitre.org","published":"2004-08-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This has been fixed in version 1.61 Security Release.","cveTags":[],"descriptions":[{"lang":"en","value":"Bird Chat 1.61 allows remote attackers to cause a denial of service (crash) via invalid users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bird_chat:internet_chat_server:1.61:*:*:*:*:*:*:*","matchCriteriaId":"A47E0F3F-9324-4B2E-9330-5ECD4B554DFE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109327938924287&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12365","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.autistici.org/fdonato/advisory/BirdChat1.61-adv.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11010","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17080","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109327938924287&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.autistici.org/fdonato/advisory/BirdChat1.61-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17080","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1740","sourceIdentifier":"cve@mitre.org","published":"2004-08-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Music daemon (musicd) 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD with a full pathname, then calling SHOWLIST."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:music_daemon:music_daemon:0.1:*:*:*:*:*:*:*","matchCriteriaId":"20189120-6AC3-425C-B184-2C8BB1752AB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:music_daemon:music_daemon:0.2:*:*:*:*:*:*:*","matchCriteriaId":"46579BFE-2F15-4805-8841-EDF6E5FD955D"},{"vulnerable":true,"criteria":"cpe:2.3:a:music_daemon:music_daemon:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7976288A-420F-4ED2-B0F1-930F60E4B92D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109329098806595&w=2","source":"cve@mitre.org"},{"url":"http://musicdaemon.sourceforge.net/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11006","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17067","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109329098806595&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://musicdaemon.sourceforge.net/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17067","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1741","sourceIdentifier":"cve@mitre.org","published":"2004-08-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Music daemon (musicd) 0.0.3 and earlier allows remote attackers to cause a denial of service (crash) by calling LOAD with a binary file as an argument, then calling SHOWLIST."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:music_daemon:music_daemon:0.1:*:*:*:*:*:*:*","matchCriteriaId":"20189120-6AC3-425C-B184-2C8BB1752AB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:music_daemon:music_daemon:0.2:*:*:*:*:*:*:*","matchCriteriaId":"46579BFE-2F15-4805-8841-EDF6E5FD955D"},{"vulnerable":true,"criteria":"cpe:2.3:a:music_daemon:music_daemon:0.3:*:*:*:*:*:*:*","matchCriteriaId":"7976288A-420F-4ED2-B0F1-930F60E4B92D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109329098806595&w=2","source":"cve@mitre.org"},{"url":"http://musicdaemon.sourceforge.net/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1011025","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11006","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17068","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109329098806595&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://musicdaemon.sourceforge.net/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1011025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1742","sourceIdentifier":"cve@mitre.org","published":"2004-08-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. (dot dot) in the viewcat parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web-app.org:webapp:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"79090F47-9D7C-42F4-A64E-6633A3CF73F0"}]}]}],"references":[{"url":"http://cornerstone.web-app.org/cgi-bin/index.cgi?action=downloadinfo&cat=updates&id=1","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109336268002879&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12373","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11028","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17100","source":"cve@mitre.org"},{"url":"http://cornerstone.web-app.org/cgi-bin/index.cgi?action=downloadinfo&cat=updates&id=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109336268002879&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17100","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1743","sourceIdentifier":"cve@mitre.org","published":"2004-08-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the disk_c virtual folder."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:efs_software:efs_web_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B504B5AB-2D13-42AD-81E0-C944A4B307D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:efs_software:efs_web_server:1.25:*:*:*:*:*:*:*","matchCriteriaId":"F254EE0D-D012-4115-B90D-B480724FBE9D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109341398102863&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12372","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011045","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00045-08242004","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11034","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17109","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109341398102863&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.gulftech.org/?node=research&article_id=00045-08242004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17109","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1744","sourceIdentifier":"cve@mitre.org","published":"2004-08-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to cause a denial of service (CPU consumption or crash) via many large HTTP requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:efs_software:efs_web_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"B504B5AB-2D13-42AD-81E0-C944A4B307D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:efs_software:efs_web_server:1.25:*:*:*:*:*:*:*","matchCriteriaId":"F254EE0D-D012-4115-B90D-B480724FBE9D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109341398102863&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12372","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011045","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00045-08242004","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/9175","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11036","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17110","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109341398102863&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011045","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00045-08242004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/9175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17110","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1745","sourceIdentifier":"cve@mitre.org","published":"2004-08-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Painkiller 1.3.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:people_can_fly:painkiller:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"B01ECBCE-8896-4436-B694-96B2E57D8664"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109339761608821&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12367","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11029","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17101","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109339761608821&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17101","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1746","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in PHP Code Snippet Library allows remote attackers to inject arbitrary web script or HTML via the (1) cat_select or (2) show parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_code_snippet_library:php_code_snippet_library:0.8:*:*:*:*:*:*:*","matchCriteriaId":"4206B954-6065-4E41-A9AB-FD34726F51ED"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109340580218818&w=2","source":"cve@mitre.org"},{"url":"http://nikyt0x.webcindario.com/0001.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12370","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11038","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17108","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109340580218818&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://nikyt0x.webcindario.com/0001.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1747","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in NetworkEverywhere NR041 running firmware 1.2 Release 03 allows remote attackers to inject arbitrary web script or HTML via the DHCP HOSTNAME option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:network_everywhere:nr041:1.2_release_03:*:*:*:*:*:*:*","matchCriteriaId":"A3B6D8A8-5F38-4ED4-8A57-F5D37A734AD5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109344996523392&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11046","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17120","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109344996523392&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17120","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1748","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NtRegmon before 6.12 allows local users to cause a denial of service (crash), while NtRegmon is running, via invalid pointers to hook functions such as ZwSetQueryValue."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sysinternals:regmon:*:*:*:*:*:*:*:*","versionEndIncluding":"6.11","matchCriteriaId":"D15B099B-A54B-48CC-B16F-BAF3C4FB0D35"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109345177124374&w=2","source":"cve@mitre.org"},{"url":"http://www.ngsec.com/docs/advisories/NGSEC-2004-7.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11042","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17106","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109345177124374&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ngsec.com/docs/advisories/NGSEC-2004-7.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17106","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1749","sourceIdentifier":"cve@mitre.org","published":"2004-07-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, allows remote attackers to cause a denial of service (CPU consumption) via a large number of HTTP requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:toplayer:attack_mitigator:5500_3.11.008:*:*:*:*:*:*:*","matchCriteriaId":"9E4AC7D2-7A15-46C6-B17B-EA9EA693960D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109345253016318&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12390","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11049","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17125","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109345253016318&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17125","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1750","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RealVNC 4.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of connections to port 5900."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vnc:realvnc:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C9AEF531-D593-4839-A732-915CC7C3AF13"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109346198700529&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13143","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11048","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17123","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109346198700529&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1751","sourceIdentifier":"cve@mitre.org","published":"2004-08-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service (client or server crash) via a large packet, which generates a \"Message too long\" socket error that is treated as a critical error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:massive_entertainment:ground_control_ii_operation_exodus:1.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"3516ADE5-A4B4-473F-8D39-77881E764375"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/gc2boom-adv.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109357154602892&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011075","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11058","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17130","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/gc2boom-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109357154602892&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11058","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17130","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1752","sourceIdentifier":"cve@mitre.org","published":"2004-08-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email with a long Content-Type header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:nakedsoft:gaucho:1.4_build_145:*:*:*:*:*:*:*","matchCriteriaId":"5865861A-49D4-46BC-812C-E7B28A1898D1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109364123707953&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12387","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011032","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.security.org.sg/vuln/gaucho140.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11023","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17090","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109364123707953&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011032","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.security.org.sg/vuln/gaucho140.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17090","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1753","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*","matchCriteriaId":"CCFD7AF7-0FE9-4F56-98B0-60FC7F7F1B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4C1BC491-9C5A-46D5-B6C3-5A8E5A1A0AF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:netscape:navigator:7.2:*:*:*:*:*:*:*","matchCriteriaId":"842CBD30-B4BA-4FCF-9152-9DBEBE59857C"}]}]}],"references":[{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=162134","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12392","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/373080","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/373232","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/373309","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11059","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17137","source":"cve@mitre.org"},{"url":"http://bugzilla.mozilla.org/show_bug.cgi?id=162134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12392","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/373080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/373232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/373309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11059","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17137","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1754","sourceIdentifier":"cve@mitre.org","published":"2004-06-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:7.0.4:*:solaris:*:*:*:*:*","matchCriteriaId":"78A16B88-E49B-4C4C-A82E-03511C99872D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:7.0.4:*:windows_2000_nt:*:*:*:*:*","matchCriteriaId":"30BE919C-A7DF-46C3-BFF6-F0452F0FC434"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:8.0:*:*:*:*:*:*:*","matchCriteriaId":"593124AA-5952-4A7E-AB55-D5D851C5DE0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:8.0:*:solaris:*:*:*:*:*","matchCriteriaId":"F66D6BB6-2355-4644-8A18-725F9E970EA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:enterprise_firewall:8.0:*:windows_2000_nt:*:*:*:*:*","matchCriteriaId":"AD892E2E-E1C9-49A2-A42C-3B56F2B0BA4D"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security:5110_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3B647CBE-35DA-404C-BC71-0C378CC5CA1B"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security:5200_1.0:*:*:*:*:*:*:*","matchCriteriaId":"8EB8A732-3D37-4B96-8674-E03CC3826967"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security:5300_1.0:*:*:*:*:*:*:*","matchCriteriaId":"F702A853-EE1C-4937-AED9-FF11EE442F9F"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security:5310_1.0:*:*:*:*:*:*:*","matchCriteriaId":"F0043B75-B1FA-48F7-B0B8-DF25CE5CED1F"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security:5400_2.0:*:*:*:*:*:*:*","matchCriteriaId":"B413854B-9D67-4FFA-81A7-884D3F473D06"},{"vulnerable":true,"criteria":"cpe:2.3:h:symantec:gateway_security:5400_2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5838D7A8-80F3-4571-80BE-D4AF0AA7F4C4"}]}]}],"references":[{"url":"http://lists.virus.org/bugtraq-0406/msg00234.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11888","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2004.06.21.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10557","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://lists.virus.org/bugtraq-0406/msg00234.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2004.06.21.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-1755","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after the first connection, which could allow users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":false,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*","matchCriteriaId":"FBDF3AC0-0680-4EEE-898C-47D194667BE2"},{"vulnerable":false,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*","matchCriteriaId":"8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"},{"vulnerable":false,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6828CE4B-91E8-4688-977F-DC7BC21131C8"},{"vulnerable":false,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*","matchCriteriaId":"BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"},{"vulnerable":false,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*","matchCriteriaId":"9CD2BB36-AC0B-48E9-91E1-A4465896E87A"},{"vulnerable":false,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"},{"vulnerable":false,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*","matchCriteriaId":"6FB8930F-C6D8-40B9-8D08-751F5B47229B"},{"vulnerable":false,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*","matchCriteriaId":"A5C59B80-279B-45B3-9CC1-5A263681025B"},{"vulnerable":false,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"893D9D88-43C4-4F9F-A364-0585DE6FA9E9"},{"vulnerable":false,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*","matchCriteriaId":"D59F9859-7344-43F0-9348-E57FABB9E431"},{"vulnerable":false,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*","matchCriteriaId":"D2D05BAB-AB3B-466E-8301-01A41644DE77"},{"vulnerable":false,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"D34E2925-DE2A-437F-B349-BD7103F4C37E"},{"vulnerable":false,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*","matchCriteriaId":"0A4EC87D-EF83-48C5-B516-A6A482D9F525"},{"vulnerable":false,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*","matchCriteriaId":"935F28E3-9799-4EF6-AB83-62E9C214DD0D"}]}]}],"references":[{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_47.00.jsp","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/10725","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/858990","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9502","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15826","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_47.00.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/10725","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/858990","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15826","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1756","sourceIdentifier":"cve@mitre.org","published":"2004-04-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejects it, which allows remote attackers to spoof other users or servers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*","matchCriteriaId":"FBDF3AC0-0680-4EEE-898C-47D194667BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*","matchCriteriaId":"8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6828CE4B-91E8-4688-977F-DC7BC21131C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*","matchCriteriaId":"BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*","matchCriteriaId":"6FB8930F-C6D8-40B9-8D08-751F5B47229B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"893D9D88-43C4-4F9F-A364-0585DE6FA9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*","matchCriteriaId":"D59F9859-7344-43F0-9348-E57FABB9E431"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"D34E2925-DE2A-437F-B349-BD7103F4C37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*","matchCriteriaId":"0A4EC87D-EF83-48C5-B516-A6A482D9F525"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*","matchCriteriaId":"935F28E3-9799-4EF6-AB83-62E9C214DD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*","matchCriteriaId":"ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*","matchCriteriaId":"A3DFE048-905E-4890-809D-F6BCEF7F83C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*","matchCriteriaId":"F7560131-A6AC-4BBB-AA2D-C7C63AB51226"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"D18E22CC-A0FC-4BC7-AD39-2645F57486C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*","matchCriteriaId":"893C2387-03E3-4F8E-9029-BC64C64239EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"D00633D1-4B38-48D9-B5CD-E8D66EA90599"}]}]}],"references":[{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_54.00.jsp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11358","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009765","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/566390","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10132","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15862","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_54.00.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009765","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/566390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/10132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15862","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1757","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic Server and Express 8.1, SP1 and earlier, stores the administrator password in cleartext in config.xml, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*","matchCriteriaId":"05AFBE78-C611-4EA2-8B00-5F8B61696CBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*","matchCriteriaId":"AC5439C1-D06F-44C6-94F5-2BD8598A506C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*","matchCriteriaId":"C3B7752C-B297-480A-B3FC-948EA081670C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"E40C38EC-ECA4-4F0C-8468-16191CDB9997"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*","matchCriteriaId":"63017BF8-D681-45EC-9C31-09D029F1126D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"C4FD8871-680E-40F9-85AB-417B5195D4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*","matchCriteriaId":"8E0B1791-974A-4967-8CF9-33BE8183200B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*","matchCriteriaId":"696F52AE-FEB9-4090-872E-FDFD969F5604"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*","matchCriteriaId":"2B4BC3F5-BFE8-4834-B427-B6260D5B7A85"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*","matchCriteriaId":"7B12A8B1-F78E-46B3-8872-4C6484345477"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*","matchCriteriaId":"DCED03B6-7565-4F53-8D85-F3391BF66988"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*","matchCriteriaId":"D2FE768F-363B-49BC-8410-739B164FB32E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*","matchCriteriaId":"CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*","matchCriteriaId":"B70F0353-635F-465B-A7E5-AF2D017AB008"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*","matchCriteriaId":"D3DA28D0-18CC-4F99-AABB-EC7863CBD455"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*","matchCriteriaId":"6B091903-943F-4822-9F24-9D109B2D76A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*","matchCriteriaId":"CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*","matchCriteriaId":"FBDF3AC0-0680-4EEE-898C-47D194667BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*","matchCriteriaId":"8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6828CE4B-91E8-4688-977F-DC7BC21131C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*","matchCriteriaId":"BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*","matchCriteriaId":"9CD2BB36-AC0B-48E9-91E1-A4465896E87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*","matchCriteriaId":"6FB8930F-C6D8-40B9-8D08-751F5B47229B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*","matchCriteriaId":"A5C59B80-279B-45B3-9CC1-5A263681025B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"893D9D88-43C4-4F9F-A364-0585DE6FA9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*","matchCriteriaId":"D59F9859-7344-43F0-9348-E57FABB9E431"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*","matchCriteriaId":"D2D05BAB-AB3B-466E-8301-01A41644DE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"D34E2925-DE2A-437F-B349-BD7103F4C37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*","matchCriteriaId":"0A4EC87D-EF83-48C5-B516-A6A482D9F525"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*","matchCriteriaId":"935F28E3-9799-4EF6-AB83-62E9C214DD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*","matchCriteriaId":"16E3F943-D920-4C0A-8545-5CF7D792011F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*","matchCriteriaId":"6BBA04D4-BA2E-4495-85DE-38918A878012"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*","matchCriteriaId":"6C444DA3-69E3-4465-9173-85966B1162A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*","matchCriteriaId":"ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*","matchCriteriaId":"A3DFE048-905E-4890-809D-F6BCEF7F83C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*","matchCriteriaId":"F7560131-A6AC-4BBB-AA2D-C7C63AB51226"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"D18E22CC-A0FC-4BC7-AD39-2645F57486C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*","matchCriteriaId":"893C2387-03E3-4F8E-9029-BC64C64239EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"D00633D1-4B38-48D9-B5CD-E8D66EA90599"}]}]}],"references":[{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_50.00.jsp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10728","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/350350","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9501","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14957","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_50.00.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/350350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14957","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1758","sourceIdentifier":"cve@mitre.org","published":"2004-04-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in config.xml, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*","matchCriteriaId":"05AFBE78-C611-4EA2-8B00-5F8B61696CBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*","matchCriteriaId":"AC5439C1-D06F-44C6-94F5-2BD8598A506C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*","matchCriteriaId":"C3B7752C-B297-480A-B3FC-948EA081670C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"E40C38EC-ECA4-4F0C-8468-16191CDB9997"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*","matchCriteriaId":"63017BF8-D681-45EC-9C31-09D029F1126D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*","matchCriteriaId":"71892EC0-E6B1-4214-AC53-06489F711829"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"C4FD8871-680E-40F9-85AB-417B5195D4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*","matchCriteriaId":"8E0B1791-974A-4967-8CF9-33BE8183200B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*","matchCriteriaId":"696F52AE-FEB9-4090-872E-FDFD969F5604"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*","matchCriteriaId":"7B12A8B1-F78E-46B3-8872-4C6484345477"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*","matchCriteriaId":"DCED03B6-7565-4F53-8D85-F3391BF66988"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*","matchCriteriaId":"CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*","matchCriteriaId":"B70F0353-635F-465B-A7E5-AF2D017AB008"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*","matchCriteriaId":"6B091903-943F-4822-9F24-9D109B2D76A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*","matchCriteriaId":"FBDF3AC0-0680-4EEE-898C-47D194667BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*","matchCriteriaId":"8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6828CE4B-91E8-4688-977F-DC7BC21131C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*","matchCriteriaId":"BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*","matchCriteriaId":"6FB8930F-C6D8-40B9-8D08-751F5B47229B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"893D9D88-43C4-4F9F-A364-0585DE6FA9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*","matchCriteriaId":"D59F9859-7344-43F0-9348-E57FABB9E431"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"D34E2925-DE2A-437F-B349-BD7103F4C37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*","matchCriteriaId":"0A4EC87D-EF83-48C5-B516-A6A482D9F525"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*","matchCriteriaId":"935F28E3-9799-4EF6-AB83-62E9C214DD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*","matchCriteriaId":"ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*","matchCriteriaId":"A3DFE048-905E-4890-809D-F6BCEF7F83C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*","matchCriteriaId":"F7560131-A6AC-4BBB-AA2D-C7C63AB51226"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"D18E22CC-A0FC-4BC7-AD39-2645F57486C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*","matchCriteriaId":"893C2387-03E3-4F8E-9029-BC64C64239EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"D00633D1-4B38-48D9-B5CD-E8D66EA90599"}]}]}],"references":[{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_53.00.jsp","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11357","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009764","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/920238","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/5297","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10131","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15860","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_53.00.jsp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/920238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/5297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1759","sourceIdentifier":"cve@mitre.org","published":"2004-01-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated using port scanning."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:emergency_responder:1.1:*:*:*:*:*:*:*","matchCriteriaId":"10AFE8CE-EA67-4BC4-93BC-7D5D61D5A7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ip_call_center_express_enhanced:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D08D0AA7-669D-4632-BB67-6994CB670466"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ip_call_center_express_standard:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B6CBEC2E-2706-485A-A5A7-3BB25B5C4BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ip_interactive_voice_response:3.0:*:*:*:*:*:*:*","matchCriteriaId":"89E40B81-A536-45DE-BEFB-1EB6F030B647"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:personal_assistant:1.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"D2B8308C-7C36-48E1-97BC-282908B9A38D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:personal_assistant:1.3\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"29AF8C73-C10F-4873-941B-26C832D854EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:personal_assistant:1.3\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"8CE1C413-0678-4E9A-AC7F-105538D3C56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:personal_assistant:1.3\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"F4ADC051-C35B-4C68-B751-B8A2434A6E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:personal_assistant:1.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"131ABD48-89ED-45B9-865B-20AF3631BA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:personal_assistant:1.4\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"0BC18EEF-1DA5-402A-9C22-BCF287F2D501"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director_agent:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7E033E9D-604D-4829-B95F-E3D095419BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director_agent:3.11:*:*:*:*:*:*:*","matchCriteriaId":"F501C60E-4B48-4F10-84B5-F29FB5BAEF74"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"14BF1392-C6E2-4946-9B9E-A64BFE7E8057"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EA117831-013A-4B62-90EA-9F87D0DBACF3"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"C08E2D6A-1B4C-4BDA-8FF7-8D61A393460E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:3.1:*:*:*:*:*:*:*","matchCriteriaId":"AF7E0B10-11E0-44B7-A450-AA5AB058C6C5"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:3.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"C9C25529-9048-46E8-8A59-61CAD59C2C40"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:3.1\\(3a\\):*:*:*:*:*:*:*","matchCriteriaId":"70ADFE52-9C89-4C29-AC74-7F510326F810"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:3.2:*:*:*:*:*:*:*","matchCriteriaId":"54CEBAD7-7BDD-44DE-A591-C7EFD4E3F67E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*","matchCriteriaId":"9306CD67-C43D-46F7-B76B-1FA0ACC6135E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:3.3\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"F3D9BE35-E2AA-42A4-BECB-1BD33F2D9F2F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A008ACB8-54DD-4C49-A35D-3FA7D3CBF38F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:internet_service_node:*:*:*:*:*:*:*:*","matchCriteriaId":"02122172-DBC4-445A-9BB6-E33B6F5B9F77"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:conference_connection:1.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"35D53AA4-4E6D-4586-A84A-634C68C0C967"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:conference_connection:1.2:*:*:*:*:*:*:*","matchCriteriaId":"38CC94AA-9702-4A7E-82C5-DE06FB7D6631"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:mcs-7815-1000:*:*:*:*:*:*:*:*","matchCriteriaId":"A1F0C52A-A68B-4E9B-934A-D33E8B3123E5"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:mcs-7815i-2.0:*:*:*:*:*:*:*:*","matchCriteriaId":"672D30B8-47CE-46D0-97CB-9320B4B4FC2B"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:mcs-7835i-2.4:*:*:*:*:*:*:*:*","matchCriteriaId":"5E40E5D2-DEF9-4A28-8092-AC0B2EC0399F"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:mcs-7835i-3.0:*:*:*:*:*:*:*:*","matchCriteriaId":"F1C555A8-5208-4FE2-822B-11AFB5E8B9CF"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:x330:8654:*:*:*:*:*:*:*","matchCriteriaId":"18E307F0-1987-402C-AF67-884DA8872CC9"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:x330:8674:*:*:*:*:*:*:*","matchCriteriaId":"1E4EC292-CC2D-4B6F-94A6-59185406C182"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:x340:*:*:*:*:*:*:*:*","matchCriteriaId":"4B72E43B-99E9-435D-87EA-1B196A63DA45"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:x342:*:*:*:*:*:*:*:*","matchCriteriaId":"853911A3-E740-4F80-8464-7A23A59B2474"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:x345:*:*:*:*:*:*:*:*","matchCriteriaId":"C00D0835-3880-4A3A-8559-C79EB4ADB25D"}]}]}],"references":[{"url":"http://secunia.com/advisories/10696","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-066.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/721092","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3691","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9469","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008814","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14901","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-066.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/721092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3691","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9469","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1760","sourceIdentifier":"cve@mitre.org","published":"2004-01-21T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:emergency_responder:1.1:*:*:*:*:*:*:*","matchCriteriaId":"10AFE8CE-EA67-4BC4-93BC-7D5D61D5A7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ip_call_center_express_enhanced:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D08D0AA7-669D-4632-BB67-6994CB670466"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ip_call_center_express_standard:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B6CBEC2E-2706-485A-A5A7-3BB25B5C4BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:ip_interactive_voice_response:3.0:*:*:*:*:*:*:*","matchCriteriaId":"89E40B81-A536-45DE-BEFB-1EB6F030B647"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:personal_assistant:1.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"D2B8308C-7C36-48E1-97BC-282908B9A38D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:personal_assistant:1.3\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"29AF8C73-C10F-4873-941B-26C832D854EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:personal_assistant:1.3\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"8CE1C413-0678-4E9A-AC7F-105538D3C56E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:personal_assistant:1.3\\(4\\):*:*:*:*:*:*:*","matchCriteriaId":"F4ADC051-C35B-4C68-B751-B8A2434A6E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:personal_assistant:1.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"131ABD48-89ED-45B9-865B-20AF3631BA6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:personal_assistant:1.4\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"0BC18EEF-1DA5-402A-9C22-BCF287F2D501"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director_agent:2.2:*:*:*:*:*:*:*","matchCriteriaId":"7E033E9D-604D-4829-B95F-E3D095419BB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:director_agent:3.11:*:*:*:*:*:*:*","matchCriteriaId":"F501C60E-4B48-4F10-84B5-F29FB5BAEF74"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:1.0:*:*:*:*:*:*:*","matchCriteriaId":"14BF1392-C6E2-4946-9B9E-A64BFE7E8057"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"EA117831-013A-4B62-90EA-9F87D0DBACF3"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:3.0:*:*:*:*:*:*:*","matchCriteriaId":"C08E2D6A-1B4C-4BDA-8FF7-8D61A393460E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:3.1:*:*:*:*:*:*:*","matchCriteriaId":"AF7E0B10-11E0-44B7-A450-AA5AB058C6C5"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:3.1\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"C9C25529-9048-46E8-8A59-61CAD59C2C40"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:3.1\\(3a\\):*:*:*:*:*:*:*","matchCriteriaId":"70ADFE52-9C89-4C29-AC74-7F510326F810"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:3.2:*:*:*:*:*:*:*","matchCriteriaId":"54CEBAD7-7BDD-44DE-A591-C7EFD4E3F67E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:3.3:*:*:*:*:*:*:*","matchCriteriaId":"9306CD67-C43D-46F7-B76B-1FA0ACC6135E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:3.3\\(3\\):*:*:*:*:*:*:*","matchCriteriaId":"F3D9BE35-E2AA-42A4-BECB-1BD33F2D9F2F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:call_manager:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A008ACB8-54DD-4C49-A35D-3FA7D3CBF38F"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:internet_service_node:*:*:*:*:*:*:*:*","matchCriteriaId":"02122172-DBC4-445A-9BB6-E33B6F5B9F77"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:conference_connection:1.1\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"35D53AA4-4E6D-4586-A84A-634C68C0C967"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:conference_connection:1.2:*:*:*:*:*:*:*","matchCriteriaId":"38CC94AA-9702-4A7E-82C5-DE06FB7D6631"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:mcs-7815-1000:*:*:*:*:*:*:*:*","matchCriteriaId":"A1F0C52A-A68B-4E9B-934A-D33E8B3123E5"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:mcs-7815i-2.0:*:*:*:*:*:*:*:*","matchCriteriaId":"672D30B8-47CE-46D0-97CB-9320B4B4FC2B"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:mcs-7835i-2.4:*:*:*:*:*:*:*:*","matchCriteriaId":"5E40E5D2-DEF9-4A28-8092-AC0B2EC0399F"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:mcs-7835i-3.0:*:*:*:*:*:*:*:*","matchCriteriaId":"F1C555A8-5208-4FE2-822B-11AFB5E8B9CF"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:x330:8654:*:*:*:*:*:*:*","matchCriteriaId":"18E307F0-1987-402C-AF67-884DA8872CC9"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:x330:8674:*:*:*:*:*:*:*","matchCriteriaId":"1E4EC292-CC2D-4B6F-94A6-59185406C182"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:x340:*:*:*:*:*:*:*:*","matchCriteriaId":"4B72E43B-99E9-435D-87EA-1B196A63DA45"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:x342:*:*:*:*:*:*:*:*","matchCriteriaId":"853911A3-E740-4F80-8464-7A23A59B2474"},{"vulnerable":true,"criteria":"cpe:2.3:h:ibm:x345:*:*:*:*:*:*:*:*","matchCriteriaId":"C00D0835-3880-4A3A-8559-C79EB4ADB25D"}]}]}],"references":[{"url":"http://secunia.com/advisories/10696","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-066.shtml","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/602734","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3692","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9468","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008814","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14900","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-066.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/602734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3692","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9468","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14900","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1761","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) via a malformed color filter file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.13:*:*:*:*:*:*:*","matchCriteriaId":"3240376B-44CB-4BF3-9EA6-05841FE70AF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.14:*:*:*:*:*:*:*","matchCriteriaId":"D1329DA0-3B95-4BCB-9A2C-4C5F882B9208"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.15:*:*:*:*:*:*:*","matchCriteriaId":"11A61FEA-1917-4C50-A25D-0E0FDD4FEC26"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.16:*:*:*:*:*:*:*","matchCriteriaId":"2E737F77-ABE6-4E3E-9156-4FAF841E8314"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.17a:*:*:*:*:*:*:*","matchCriteriaId":"C25FB130-5D15-47EB-97B6-F368EFF958BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.18:*:*:*:*:*:*:*","matchCriteriaId":"9DC35478-9276-4732-9F0D-13CA958C617C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.19:*:*:*:*:*:*:*","matchCriteriaId":"77000951-EF3E-41D8-8545-497BA3E5C5E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.8.20:*:*:*:*:*:*:*","matchCriteriaId":"934E636C-5EC3-436C-990F-D9434776CEAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"73117E69-715B-4779-A5D8-218E15122A66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"CB461B6B-B731-4732-AAD0-191BE50189D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"19961880-D38A-4785-A7C5-879A061119BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"831705D2-C4DE-475F-B908-8859064AFB38"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"A4622585-20E2-46E9-B773-74729FF22EEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"E86ADCB6-0940-4CB9-85F1-A7694210FB66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"042B6289-D2E2-4369-BB40-EA6EE7025D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"C93D7B7E-F5F9-44A2-A87B-4A16634DEDAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"F0A48938-30B8-4403-B08A-177FFCB9054B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"C9A33AA4-CABF-4B6B-8688-8C1BD36D6649"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"67B81EFD-27C1-411C-AFF3-E5340627E3BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.11:*:*:*:*:*:*:*","matchCriteriaId":"680934CF-7F9B-41E4-AA03-ECD96F477AB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"6F1F3D3E-A6D6-4C1A-8BC6-5579C19A7A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"3BCF3AFF-ED4D-40F6-A2DD-04C0A6D3BD64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.14:*:*:*:*:*:*:*","matchCriteriaId":"DBCCE368-64E6-4CEC-B068-9B8BA2527289"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.15:*:*:*:*:*:*:*","matchCriteriaId":"CF5374A4-5194-45FD-895D-B04FDC7E853C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.9.16:*:*:*:*:*:*:*","matchCriteriaId":"4038BC6D-DE51-4F1C-A25C-CD7FC6CE8CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.0:*:*:*:*:*:*:*","matchCriteriaId":"CC7666DE-0AC1-483C-B96B-E57AC04094CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.0a:*:*:*:*:*:*:*","matchCriteriaId":"F3E2F07E-DE69-4458-90F3-8F1B5035C3E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"136FF83B-2B03-4E5F-95C1-84195BE8392A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ethereal_group:ethereal:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"898E6919-542F-4A31-8CC0-C3C4CE0F9FCF"}]}]}],"references":[{"url":"http://secunia.com/advisories/11185","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00013.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.kb.cert.org/vuls/id/695486","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-136.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15572","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10013","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ethereal.com/appnotes/enpa-sa-00013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.kb.cert.org/vuls/id/695486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-136.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15572","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10013","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1762","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in F-Secure Anti-Virus (FSAV) 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FASV."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.50_hotfix_1:*:linux:*:*:*:*:*","matchCriteriaId":"8C7F4E22-8609-4111-A588-BBA6CFBE3EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.50_hotfix_2:*:linux:*:*:*:*:*","matchCriteriaId":"0AB5C071-A13A-4E32-9F40-E41B47D053BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.51_hotfix_2:*:linux:*:*:*:*:*","matchCriteriaId":"DF853D24-E54D-4B0C-B78B-B1EBF29A3481"}]}]}],"references":[{"url":"http://secunia.com/advisories/11089","source":"cve@mitre.org"},{"url":"http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-linux-hotfixes.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/415734","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15432","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-linux-hotfixes.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/415734","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15432","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1763","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 (build 91) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long project name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:haht_commerce:hahtsite_scenario_server:5.1:*:*:*:*:*:*:*","matchCriteriaId":"2259AA4F-3B73-40E7-B26C-C05B729A1118"},{"vulnerable":true,"criteria":"cpe:2.3:a:haht_commerce:hahtsite_scenario_server:5.1_patch_1:*:*:*:*:*:*:*","matchCriteriaId":"C4D19D19-3B35-41FC-BF99-6CFDC50342CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:haht_commerce:hahtsite_scenario_server:5.1_patch_2:*:*:*:*:*:*:*","matchCriteriaId":"FF6C5E94-A78F-4691-86B4-AB424CDC9AF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:haht_commerce:hahtsite_scenario_server:5.1_patch_3:*:*:*:*:*:*:*","matchCriteriaId":"27793485-EC09-4C37-9CB1-695C6164B28C"},{"vulnerable":true,"criteria":"cpe:2.3:a:haht_commerce:hahtsite_scenario_server:5.1_patch_4:*:*:*:*:*:*:*","matchCriteriaId":"6D4BA2C9-270A-4442-8CB7-C3C0B47A9030"},{"vulnerable":true,"criteria":"cpe:2.3:a:haht_commerce:hahtsite_scenario_server:5.1_patch_5:*:*:*:*:*:*:*","matchCriteriaId":"AE9DAFC0-150A-4A17-993B-BD42C50A6943"},{"vulnerable":true,"criteria":"cpe:2.3:a:haht_commerce:hahtsite_scenario_server:5.1_patch_6:*:*:*:*:*:*:*","matchCriteriaId":"186BCC81-9B42-4266-99C1-01777E99806E"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=108091662105032&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11288","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/705958","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.protego.dk/advisories/200405.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10033","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15717","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=108091662105032&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.kb.cert.org/vuls/id/705958","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.protego.dk/advisories/200405.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15717","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1764","sourceIdentifier":"cve@mitre.org","published":"2004-01-14T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*","matchCriteriaId":"F038B325-A982-43FB-9146-E103CCFB5C41"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/o-057.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/406406","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/6237","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14828","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5789","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-057.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/406406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/advisories/6237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14828","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5789","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1765","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mod_security:mod_security:1.7.4:*:*:*:*:*:*:*","matchCriteriaId":"B6309864-94CD-4CE5-8F6C-2F9C4B376313"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107945597331370&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11138","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/779438","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.modsecurity.org/","source":"cve@mitre.org"},{"url":"http://www.s-quadra.com/advisories/Adv-20040315.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9885","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15489","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107945597331370&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kb.cert.org/vuls/id/779438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.modsecurity.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s-quadra.com/advisories/Adv-20040315.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15489","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1766","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices running ScreenOS 5.0, which allows remote attackers to obtain sensitive information via sniffing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:juniper:netscreen-security_manager_2004:*:*:*:*:*:*:*:*","matchCriteriaId":"93615469-EB7E-432E-883C-6E46768A71DC"}]}]}],"references":[{"url":"http://secunia.com/advisories/10675","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.juniper.net/support/security/alerts/58290.txt","source":"cve@mitre.org"},{"url":"http://www.kb.cert.org/vuls/id/927630","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/CRDY-5VEU8N","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.netscreen.com/services/security/alerts/1_19_04_58290.jsp","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3613","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9455","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14886","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.juniper.net/support/security/alerts/58290.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kb.cert.org/vuls/id/927630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/CRDY-5VEU8N","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.netscreen.com/services/security/alerts/1_19_04_58290.jsp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9455","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14886","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1767","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57479-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/702526","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9477","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14917","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4532","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57479-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/702526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4532","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1768","sourceIdentifier":"cve@mitre.org","published":"2004-12-17T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The character converters in the Spamhunter and Language ID modules for Symantec Brightmail AntiSpam 6.0.1 before patch 132 allow remote attackers to cause a denial of service (crash) via messages with the ISO-8859-10 character set, which is not recognized by the converters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:brightmail_antispam:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EAD87DB3-45C2-4091-A83B-25E427563C70"}]}]}],"references":[{"url":"ftp://ftp.symantec.com/public/english_us_canada/products/sba/sba_60x/updates/p132_notes.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/13489","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/697598","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/12459","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18530","source":"cve@mitre.org"},{"url":"ftp://ftp.symantec.com/public/english_us_canada/products/sba/sba_60x/updates/p132_notes.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/13489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/697598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/12459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18530","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1769","sourceIdentifier":"cve@mitre.org","published":"2004-03-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"Allow cPanel users to reset their password via email\" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E5B33AE8-75A8-4454-A1A3-33F4034015FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:5.3:*:*:*:*:*:*:*","matchCriteriaId":"E4394768-37BE-4FC5-A65A-28C0295A33B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.0:*:*:*:*:*:*:*","matchCriteriaId":"DC52A018-43E8-4D86-A84C-81064B6ACD74"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.2:*:*:*:*:*:*:*","matchCriteriaId":"2FC66D8D-01B8-4312-A311-ACAB43699071"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.4:*:*:*:*:*:*:*","matchCriteriaId":"E892FB52-DB84-422F-ABB6-29AB95726138"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1FC5C591-69F3-411F-A53A-72D17687CA2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"92D81000-1A7C-4465-9EE2-E651AED09F82"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.4.2_stable_48:*:*:*:*:*:*:*","matchCriteriaId":"E4B555B5-E66F-4E37-A5BC-E04CBDFA4F8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09258895-32E6-49AC-8C96-D2838A0C8E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:8.0:*:*:*:*:*:*:*","matchCriteriaId":"3B4F9F98-08A2-430B-BC96-B30DCA165F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:9.0:*:*:*:*:*:*:*","matchCriteriaId":"32D546C9-674B-4683-9EC5-18156CE04B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:9.1:*:*:*:*:*:*:*","matchCriteriaId":"1E915DEA-1BA9-429D-97D5-CA3D37C969B5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107904890724201&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11111","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/831534","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/357064/2004-03-08/2004-03-14/0","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9848","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15443","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107904890724201&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/831534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/357064/2004-03-08/2004-03-14/0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15443","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1770","sourceIdentifier":"cve@mitre.org","published":"2004-03-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E5B33AE8-75A8-4454-A1A3-33F4034015FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:5.3:*:*:*:*:*:*:*","matchCriteriaId":"E4394768-37BE-4FC5-A65A-28C0295A33B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.0:*:*:*:*:*:*:*","matchCriteriaId":"DC52A018-43E8-4D86-A84C-81064B6ACD74"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.2:*:*:*:*:*:*:*","matchCriteriaId":"2FC66D8D-01B8-4312-A311-ACAB43699071"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.4:*:*:*:*:*:*:*","matchCriteriaId":"E892FB52-DB84-422F-ABB6-29AB95726138"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1FC5C591-69F3-411F-A53A-72D17687CA2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"92D81000-1A7C-4465-9EE2-E651AED09F82"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.4.2_stable_48:*:*:*:*:*:*:*","matchCriteriaId":"E4B555B5-E66F-4E37-A5BC-E04CBDFA4F8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09258895-32E6-49AC-8C96-D2838A0C8E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:8.0:*:*:*:*:*:*:*","matchCriteriaId":"3B4F9F98-08A2-430B-BC96-B30DCA165F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:9.0:*:*:*:*:*:*:*","matchCriteriaId":"32D546C9-674B-4683-9EC5-18156CE04B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:9.1:*:*:*:*:*:*:*","matchCriteriaId":"1E915DEA-1BA9-429D-97D5-CA3D37C969B5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107911581732035&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11124","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/831534","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9855","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15486","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107911581732035&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/831534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/9855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1771","sourceIdentifier":"cve@mitre.org","published":"2004-11-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Scalable OGo (SOGo) 1.0 allows remote authenticated users to bypass intended permissions and view private appointments of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_group:scalable_ogo:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5E1BAA72-0351-488A-850C-51765DF392D8"}]}]}],"references":[{"url":"http://bugzilla.opengroupware.org/bugzilla/show_bug.cgi?id=1060","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1013553","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/14675","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19820","source":"cve@mitre.org"},{"url":"http://bugzilla.opengroupware.org/bugzilla/show_bug.cgi?id=1060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1013553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/14675","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19820","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1772","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:sharutils:4.2:*:*:*:*:*:*:*","matchCriteriaId":"48361665-C825-4AD9-9347-CF6D1E4C9515"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:sharutils:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5DAD86FF-979F-4203-93A7-DE7ADDBC7764"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108137386310299&w=2","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-377.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/359639","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/10066","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2155","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15759","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11722","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108137386310299&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-377.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/359639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/10066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11722","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1773","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:sharutils:4.2:*:*:*:*:*:*:*","matchCriteriaId":"48361665-C825-4AD9-9347-CF6D1E4C9515"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:sharutils:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5DAD86FF-979F-4203-93A7-DE7ADDBC7764"}]}]}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-200410-01.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-377.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11298","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2155","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11093","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200410-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-377.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2155","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11093","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1774","sourceIdentifier":"cve@mitre.org","published":"2004-08-31T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C1B82E1-D1AD-46F2-8B95-117F38563FC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:enterprise_10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0C033CC3-1840-49A1-AB6E-3EC8CE1F0BEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:personal_10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2C84E349-48A8-4800-A300-AACEC8659656"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle10g:standard_10.1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C8975840-9843-4034-BBED-B31A9BA16DF0"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/025984.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.appsecinc.com/resources/alerts/oracle/2004-0001/","source":"cve@mitre.org"},{"url":"http://www.frsirt.com/exploits/20050413.OracleExploit.sql.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/securitynews/5CP010KE0W.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13145","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20078","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/025984.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.appsecinc.com/resources/alerts/oracle/2004-0001/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.frsirt.com/exploits/20050413.OracleExploit.sql.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/securitynews/5CP010KE0W.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20078","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1775","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device configuration via the read-write community string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0da:*:*:*:*:*:*:*","matchCriteriaId":"12434A88-88C6-4749-981F-E2B4D725F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0db:*:*:*:*:*:*:*","matchCriteriaId":"4F7CF26C-AEAA-42D7-8136-56E77E73DCB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0dc:*:*:*:*:*:*:*","matchCriteriaId":"1A4864A2-D6BB-4E2A-9AA4-519EE0732D16"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0s:*:*:*:*:*:*:*","matchCriteriaId":"2C398460-3F38-4AA7-A4B1-FD8A01588DB5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*","matchCriteriaId":"793F494D-F6BD-4B23-92BE-83B9DD9D4A5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0sl:*:*:*:*:*:*:*","matchCriteriaId":"2B6B0C2F-2FBE-4422-AD30-305100C595CB"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0st:*:*:*:*:*:*:*","matchCriteriaId":"DBEA01D2-B985-4575-AF00-144CE2E3024D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*","matchCriteriaId":"CA7F94E8-86FC-456B-A7BB-57953F67F754"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xa:*:*:*:*:*:*:*","matchCriteriaId":"1050ACB3-E5B2-4710-910B-F3DF4B49907F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xb:*:*:*:*:*:*:*","matchCriteriaId":"5ABE71F9-17D4-47C4-A762-18CC8716E477"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xc:*:*:*:*:*:*:*","matchCriteriaId":"7977DA9F-41DE-4482-B0CD-896EEEFB5689"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xd:*:*:*:*:*:*:*","matchCriteriaId":"6D0A8D1D-ED94-4A2E-ACC5-0408C2C9FCFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xe:*:*:*:*:*:*:*","matchCriteriaId":"1ADAB898-7728-4C14-B69A-7B8B06AFC894"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xf:*:*:*:*:*:*:*","matchCriteriaId":"DDBE69A0-85B1-423B-88FB-CDA80E9186EE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xg:*:*:*:*:*:*:*","matchCriteriaId":"C14C28A4-91C1-4AE0-8A14-8E98A569F7B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xh:*:*:*:*:*:*:*","matchCriteriaId":"54424787-34AC-410D-985F-511ADB2BB144"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xi:*:*:*:*:*:*:*","matchCriteriaId":"70F54F0C-AC91-4CB7-9FEB-257F03547864"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xj:*:*:*:*:*:*:*","matchCriteriaId":"B6A0D017-F26F-4429-891E-C7E1C66B6588"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xk:*:*:*:*:*:*:*","matchCriteriaId":"26FA075D-4A9E-44EE-90CF-23947C9040EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xl:*:*:*:*:*:*:*","matchCriteriaId":"9A3DFAEC-4534-4A8D-9886-0723F57C7A63"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xm:*:*:*:*:*:*:*","matchCriteriaId":"E5451772-87D4-42E2-8F48-D137670DA3E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xn:*:*:*:*:*:*:*","matchCriteriaId":"D162976F-87A3-42BF-8C9F-A981B14F4673"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xp:*:*:*:*:*:*:*","matchCriteriaId":"E2606209-91BE-4BEB-A163-0D3873A033FA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xq:*:*:*:*:*:*:*","matchCriteriaId":"43581A57-418A-4A35-ACF2-1380A8DA8A82"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*","matchCriteriaId":"AC17E231-9256-4600-A33B-238E7E83CF85"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xs:*:*:*:*:*:*:*","matchCriteriaId":"7A6D5468-BB6A-4665-964F-D8F636359CCD"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xu:*:*:*:*:*:*:*","matchCriteriaId":"4D0082D5-CE3E-433A-84E9-1311C8B7899A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xv:*:*:*:*:*:*:*","matchCriteriaId":"00EB78A4-B386-4FCB-A21F-BD2B2EFC9616"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.0xw:*:*:*:*:*:*:*","matchCriteriaId":"7ED30640-AABE-4CA2-8B45-509270748BBE"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*","matchCriteriaId":"1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1aa:*:*:*:*:*:*:*","matchCriteriaId":"BA6FFE33-2891-48E5-9D0C-C52F88B2D76C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*","matchCriteriaId":"FDEF6AED-4477-4AAC-9759-1996B77DFEE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1da:*:*:*:*:*:*:*","matchCriteriaId":"C9427851-B0DC-4CE6-8BFA-60619D1DC87C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1db:*:*:*:*:*:*:*","matchCriteriaId":"6D07DD94-0925-4FEE-9565-5F36B9AAF448"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1dc:*:*:*:*:*:*:*","matchCriteriaId":"BC3A67F5-05C6-4097-A88E-0A0F165C12EA"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*","matchCriteriaId":"7126E176-D739-4102-8F10-1EEB8C6A219D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ea:*:*:*:*:*:*:*","matchCriteriaId":"E90C0554-1A50-4341-AB07-80AA854673D5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*","matchCriteriaId":"46FF39C5-CC37-4573-BB18-36254D38509B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ex:*:*:*:*:*:*:*","matchCriteriaId":"F4A85892-C3AB-4920-A949-A71BD0332D62"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*","matchCriteriaId":"752C3C6B-910D-4153-A162-DF255F60306B"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xa:*:*:*:*:*:*:*","matchCriteriaId":"C1BBE2FF-5DAE-447A-9C3D-3F48B24AECA2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xb:*:*:*:*:*:*:*","matchCriteriaId":"297FAD97-60C0-473D-A18D-03657B81B7E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xc:*:*:*:*:*:*:*","matchCriteriaId":"2AD4A33B-B13E-40C6-B47F-A406ACC6664F"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xd:*:*:*:*:*:*:*","matchCriteriaId":"0E488E6E-87F0-4292-B97B-31087FDB4655"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xe:*:*:*:*:*:*:*","matchCriteriaId":"0D199CB1-A2A3-4678-9503-C5B61281755C"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xf:*:*:*:*:*:*:*","matchCriteriaId":"D5D743DF-838A-4E7A-A4FC-BB5EB7D93CFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xg:*:*:*:*:*:*:*","matchCriteriaId":"19952DC6-1186-4754-BB1E-BA1D78A19C96"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xh:*:*:*:*:*:*:*","matchCriteriaId":"441CB9D6-5EDB-457B-B59E-D48B01AEAF5D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xi:*:*:*:*:*:*:*","matchCriteriaId":"28097F62-B51F-4A3B-BB31-6FA67E8C8B5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xk:*:*:*:*:*:*:*","matchCriteriaId":"8A11AF3F-C82F-4431-9CF1-84FDAD388D04"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xl:*:*:*:*:*:*:*","matchCriteriaId":"3B674647-4438-4450-9DCA-25184D4E2682"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xm:*:*:*:*:*:*:*","matchCriteriaId":"86E5CC41-1344-4A65-A653-8012ACE2CF2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xp:*:*:*:*:*:*:*","matchCriteriaId":"71FB7128-CF11-4903-97D7-418403A03CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xq:*:*:*:*:*:*:*","matchCriteriaId":"63EFB20A-78E2-4BA1-B87C-BB74E8982D99"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xr:*:*:*:*:*:*:*","matchCriteriaId":"3A273401-9394-4BC3-879C-DE3EFC09B3F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xs:*:*:*:*:*:*:*","matchCriteriaId":"6DABF911-FCDF-4095-A95D-4BB73628FCA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xt:*:*:*:*:*:*:*","matchCriteriaId":"77886493-C30E-439E-BBB4-3D34A8938378"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xu:*:*:*:*:*:*:*","matchCriteriaId":"7813F511-CF6D-487F-9D1C-7A6CF85AD724"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xv:*:*:*:*:*:*:*","matchCriteriaId":"677DC4B6-8B3D-4A0D-9934-743FD7494DF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xw:*:*:*:*:*:*:*","matchCriteriaId":"E272881F-0804-4190-A21D-3D0B9A774F13"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xx:*:*:*:*:*:*:*","matchCriteriaId":"B12B39FE-3E7B-4D96-8CD4-0D57C50A786A"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xy:*:*:*:*:*:*:*","matchCriteriaId":"F084DA16-24CB-41D1-92B7-C6E0499AAD10"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1xz:*:*:*:*:*:*:*","matchCriteriaId":"BA979D75-F60E-45F8-B99C-1402DC8CFCDC"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1ya:*:*:*:*:*:*:*","matchCriteriaId":"194F0AB1-92E6-4CE3-A5A1-904BF75F05D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yb:*:*:*:*:*:*:*","matchCriteriaId":"884753D4-3AF0-4723-9D51-26BA7B4CA533"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yc:*:*:*:*:*:*:*","matchCriteriaId":"DAF3601D-DF44-4A10-A424-8E97C65A36A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios:12.1yd:*:*:*:*:*:*:*","matchCriteriaId":"BC38BD6C-9823-4D2A-8BE2-60AABE3C4932"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:5.5:*:*:*:*:*:*:*","matchCriteriaId":"9E8A2EE7-8C86-44F0-899C-FD98E08C6E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:catos:6.1:*:*:*:*:*:*:*","matchCriteriaId":"06F049B3-FBE6-4951-896E-B8AE2D7BFBAB"}]}]}],"references":[{"url":"http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/645400","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5030","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6179","source":"cve@mitre.org"},{"url":"http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/645400","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/5030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6179","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1777","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A \"range check error\" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service (application crash) via long command line arguments or a long callto:// URL, a different vulnerability than CVE-2004-1114."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:*:*:*:*:*:*:*:*","versionEndIncluding":"0.98.0.27","matchCriteriaId":"06B8DD53-6499-4A7A-A240-21E59490F260"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype_technologies:skype:0.98.0.04:*:*:*:*:*:*:*","matchCriteriaId":"69649CEB-554F-4A0C-BD3A-DF3D90AE0BCF"}]}]}],"references":[{"url":"http://lists.virus.org/bugtraq-0406/msg00221.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1010490","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/11860","source":"cve@mitre.org"},{"url":"http://www.skype.com/security/ssa-2004-01.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.virus.org/bugtraq-0406/msg00221.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1010490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/11860","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.skype.com/security/ssa-2004-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-1778","sourceIdentifier":"cve@mitre.org","published":"2004-12-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Skype 0.92.0.12 and 1.0.0.1 for Linux, and possibly other versions, creates the /usr/share/skype/lang directory with world-writable permissions, which allows local users to modify language files and possibly conduct social engineering or other attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-276"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:skype:skype:0.92.0.12:*:*:*:*:*:*:*","matchCriteriaId":"7F48FDA5-1522-476F-BF29-32D5C41A02D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:skype:skype:1.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2A28B919-9FC1-4247-94A6-CC4DCB0786B8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110374568916303&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110868557905786&w=2","source":"cve@mitre.org","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/12081","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18644","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=110374568916303&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110868557905786&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/12081","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1779","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in board.php for ThWboard before beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the lastvisited parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thwboard:thwboard_beta:2.8:*:*:*:*:*:*:*","matchCriteriaId":"A6E43C5E-50E8-4918-84D3-E95ED5B5EC7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:thwboard:thwboard_beta:2.81:*:*:*:*:*:*:*","matchCriteriaId":"B1E1F7B2-9DED-4DFE-87DA-E74889210949"},{"vulnerable":true,"criteria":"cpe:2.3:a:thwboard:thwboard_beta:2.82:*:*:*:*:*:*:*","matchCriteriaId":"20849476-B04B-4CE5-A160-A590A10AC8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:thwboard:thwboard_beta:2.83:*:*:*:*:*:*:*","matchCriteriaId":"69331034-5691-4D1E-9579-EA22F4D1EBF5"}]}]}],"references":[{"url":"http://cvs.sourceforge.net/viewcvs.py/thwb/thwb/board.php?r1=1.11&r2=1.12","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/10546","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1008617","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=207893","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3330","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9367","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14143","source":"cve@mitre.org"},{"url":"http://cvs.sourceforge.net/viewcvs.py/thwb/thwb/board.php?r1=1.11&r2=1.12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/10546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1008617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=207893","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14143","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1780","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:info_touch:surfnet:1.31:*:*:*:*:*:*:*","matchCriteriaId":"699021CC-2876-441B-BB56-A22EDA6CB434"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/9347","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-1781","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMD_CREDITCARD_CHARGE command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:info_touch:surfnet:1.31:*:*:*:*:*:*:*","matchCriteriaId":"699021CC-2876-441B-BB56-A22EDA6CB434"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/9348","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9348","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-1782","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_maciejak:athena_web_registration:*:*:*:*:*:*:*:*","matchCriteriaId":"DF18B700-E449-49F4-9E42-014E82E2F55D"}]}]}],"references":[{"url":"http://www.osvdb.org/16861","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9349","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/16861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-1783","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary files via a /.. (slash dot dot)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:net2soft:flash_ftp_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"C15CCD3A-CD4F-4BB5-96C9-52F281291919"}]}]}],"references":[{"url":"http://secunia.com/advisories/10522","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1008588","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securiteam.com/windowsntfocus/5FP051FBPQ.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9350","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1008588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securiteam.com/windowsntfocus/5FP051FBPQ.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9350","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1784","sourceIdentifier":"cve@mitre.org","published":"2004-01-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcam_corp:webcam_watchdog:1.0:*:*:*:*:*:*:*","matchCriteriaId":"14D06A97-7651-4FA4-9E81-1E5AD04F1182"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcam_corp:webcam_watchdog:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A8B070E1-AAFC-452A-961B-24DE62C5CE3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:webcam_corp:webcam_watchdog:3.63:*:*:*:*:*:*:*","matchCriteriaId":"9C34AD36-1BAB-4926-B971-23E0ECA9C270"}]}]}],"references":[{"url":"http://secunia.com/advisories/10527","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.elitehaven.net/webcamwatchdog.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3312","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/348818","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9351","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.webcamsoft.com/en/watchdog_h.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14131","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.elitehaven.net/webcamwatchdog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/348818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.webcamsoft.com/en/watchdog_h.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14131","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1785","sourceIdentifier":"cve@mitre.org","published":"2004-01-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the $this->chosen_month variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7AC7F0E6-7DA6-41E3-9F73-4FFF699195C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EAA35A95-B8FD-4ED8-95E0-409E50BF13AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D4066556-F0CE-4E8B-B88D-C3BA03D98D95"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"5E25D5B0-082C-41AF-A3BA-5B35E54BCCAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.2:*:*:*:*:*:*:*","matchCriteriaId":"AB93242B-85AD-451E-BC0A-D8561C292430"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_board:1.3:*:*:*:*:*:*:*","matchCriteriaId":"52954D4B-72E9-434C-991A-7B3D6C71183C"}]}]}],"references":[{"url":"http://forums.invisionpower.com/index.php?act=ST&f=1&t=108786","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10530","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3319","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/348821","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9353","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008589","source":"cve@mitre.org"},{"url":"http://forums.invisionpower.com/index.php?act=ST&f=1&t=108786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/348821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1008589","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1786","sourceIdentifier":"cve@mitre.org","published":"2004-01-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensitive information via a direct request to 8275.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iatek:portalapp:*:*:*:*:*:*:*:*","matchCriteriaId":"374DCC52-41E7-414F-B1B5-4AE6297F9D99"}]}]}],"references":[{"url":"http://securitytracker.com/id?1008627","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9354","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14169","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9354","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1787","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postcalendar:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"ED96A5F7-5E29-44A5-9B8D-1856086A8925"}]}]}],"references":[{"url":"http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2537","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/10554","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1008621","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/3336","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9372","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14111","source":"cve@mitre.org"},{"url":"http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2537","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/10554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1008621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/3336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14111","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1788","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to main.mdb."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asp-nuke:asp-nuke:1.0:*:*:*:*:*:*:*","matchCriteriaId":"A9C9E849-C39C-468D-8E26-8346E86BA618"},{"vulnerable":true,"criteria":"cpe:2.3:a:asp-nuke:asp-nuke:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A185BBE7-44BC-4C84-AF1F-5A8B32E6987F"},{"vulnerable":true,"criteria":"cpe:2.3:a:asp-nuke:asp-nuke:1.3:*:*:*:*:*:*:*","matchCriteriaId":"B8319626-5DE0-4311-8D52-0B7EC8BEBEB5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/9355","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-1789","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to inject arbitrary web script or HTML via the rpAuth_1 page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zywall10:3.20_wa0:*:*:*:*:*:*:*","matchCriteriaId":"5CBA592E-E73E-45A5-914A-74DA508D39AF"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zywall10:3.20_wa1:*:*:*:*:*:*:*","matchCriteriaId":"11B8D73C-32EB-406E-824A-E0ED0F404626"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zywall10:3.24_wa0:*:*:*:*:*:*:*","matchCriteriaId":"0BBC4ED4-20BC-4C33-BD0C-54DA9BA952FE"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zywall10:3.24_wa1:*:*:*:*:*:*:*","matchCriteriaId":"291E76EE-EA74-4CBD-92B0-F3EAA8275303"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zywall10:3.24_wa2:*:*:*:*:*:*:*","matchCriteriaId":"93030A93-D89C-4446-B415-3DF810640ED2"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zywall10:3.50_wa1:*:*:*:*:*:*:*","matchCriteriaId":"C5B89821-8942-4C94-8CB5-2C1B67349939"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zywall10:3.50_wa2:*:*:*:*:*:*:*","matchCriteriaId":"54EA8272-CB22-4A04-84F8-4B1D4973584A"},{"vulnerable":true,"criteria":"cpe:2.3:h:zyxel:zywall10:4.07:*:*:*:*:*:*:*","matchCriteriaId":"5A46C472-BE85-4427-AEF1-4AF2E856E639"}]}]}],"references":[{"url":"http://secunia.com/advisories/10574","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008644","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/12793","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3443","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/349085","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9373","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14163","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/12793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/349085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14163","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1790","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the web management interface in Edimax AR-6004 ADSL Routers allows remote attackers to inject arbitrary web script or HTML via the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:edimax:full_rate_adsl_router:ar_6004:*:*:*:*:*:*:*","matchCriteriaId":"F82213C7-510D-4C71-834C-7946355CB223"}]}]}],"references":[{"url":"http://secunia.com/advisories/10576","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1008643","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/3435","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/349089","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9374","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14165","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1008643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/3435","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/349089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1791","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login text for the management interface, which allows remote attackers to gain access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:edimax:full_rate_adsl_router:ar_6004:*:*:*:*:*:*:*","matchCriteriaId":"F82213C7-510D-4C71-834C-7946355CB223"}]}]}],"references":[{"url":"http://securitytracker.com/id?1008643","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/3511","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/349089","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1008643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/3511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/349089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-1792","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a long packet with two CRLF sequences to the service management port (TCP 8000)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:0.7:*:*:*:*:*:*:*","matchCriteriaId":"E7FDF1B8-D809-4754-A1FD-47FDF1B326FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BD380FF6-7B90-4C90-BB70-CE8805C7489F"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6D49143E-CFC3-4DAC-94F5-3F3815ACD4CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.2:*:*:*:*:*:*:*","matchCriteriaId":"BE2C82A2-19BE-4D91-AF31-304B7F2B272E"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.3:*:*:*:*:*:*:*","matchCriteriaId":"2D6B60C5-8E8C-4C74-BE99-032A8789B072"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.4:*:*:*:*:*:*:*","matchCriteriaId":"06A15716-AB17-451E-8D97-9ECB8D876A88"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.5:*:*:*:*:*:*:*","matchCriteriaId":"960DDE9D-899A-484B-9E97-D055A979D09E"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EA29F16F-2309-4163-9222-B3C271BB4A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.6:*:*:*:*:*:*:*","matchCriteriaId":"584FDC75-966A-430C-A66A-20663D6B40EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.7:*:*:*:*:*:*:*","matchCriteriaId":"4A0CF842-4467-4038-82F6-3279B8E368A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.8:*:*:*:*:*:*:*","matchCriteriaId":"0DC4F756-61FC-42E0-BE20-B99E3B80C22F"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.9:*:*:*:*:*:*:*","matchCriteriaId":"BD96EBC3-73FE-42EF-A226-47D91FD86C0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:2.0:*:*:*:*:*:*:*","matchCriteriaId":"84006785-B3BA-422E-B17A-88DA798C523E"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:2.1:*:*:*:*:*:*:*","matchCriteriaId":"9FFF023F-5708-4E67-AC61-F1AB8BD8E721"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:2.2:*:*:*:*:*:*:*","matchCriteriaId":"ACE7674D-EC7C-4D9C-99CD-CE6565A1BC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D0A95AF-1506-473B-A8AD-F73314BDB750"}]}]}],"references":[{"url":"http://secunia.com/advisories/10521","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1008581","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.elitehaven.net/switchoff.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/348693","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9339","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14123","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1008581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.elitehaven.net/switchoff.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/348693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14123","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1793","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:0.7:*:*:*:*:*:*:*","matchCriteriaId":"E7FDF1B8-D809-4754-A1FD-47FDF1B326FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BD380FF6-7B90-4C90-BB70-CE8805C7489F"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6D49143E-CFC3-4DAC-94F5-3F3815ACD4CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.2:*:*:*:*:*:*:*","matchCriteriaId":"BE2C82A2-19BE-4D91-AF31-304B7F2B272E"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.3:*:*:*:*:*:*:*","matchCriteriaId":"2D6B60C5-8E8C-4C74-BE99-032A8789B072"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.4:*:*:*:*:*:*:*","matchCriteriaId":"06A15716-AB17-451E-8D97-9ECB8D876A88"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.5:*:*:*:*:*:*:*","matchCriteriaId":"960DDE9D-899A-484B-9E97-D055A979D09E"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"EA29F16F-2309-4163-9222-B3C271BB4A81"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.6:*:*:*:*:*:*:*","matchCriteriaId":"584FDC75-966A-430C-A66A-20663D6B40EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.7:*:*:*:*:*:*:*","matchCriteriaId":"4A0CF842-4467-4038-82F6-3279B8E368A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.8:*:*:*:*:*:*:*","matchCriteriaId":"0DC4F756-61FC-42E0-BE20-B99E3B80C22F"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:1.9:*:*:*:*:*:*:*","matchCriteriaId":"BD96EBC3-73FE-42EF-A226-47D91FD86C0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:2.0:*:*:*:*:*:*:*","matchCriteriaId":"84006785-B3BA-422E-B17A-88DA798C523E"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:2.1:*:*:*:*:*:*:*","matchCriteriaId":"9FFF023F-5708-4E67-AC61-F1AB8BD8E721"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:2.2:*:*:*:*:*:*:*","matchCriteriaId":"ACE7674D-EC7C-4D9C-99CD-CE6565A1BC76"},{"vulnerable":true,"criteria":"cpe:2.3:a:yatsoft:switch_off:2.3:*:*:*:*:*:*:*","matchCriteriaId":"1D0A95AF-1506-473B-A8AD-F73314BDB750"}]}]}],"references":[{"url":"http://secunia.com/advisories/10521","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1008581","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.elitehaven.net/switchoff.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/3309","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/348693","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9340","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14124","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1008581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.elitehaven.net/switchoff.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/3309","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/348693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14124","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1794","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the VCard4J Toolkit allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vcard4j:vcard4j:0.1:*:*:*:*:*:*:*","matchCriteriaId":"07A2AA57-753D-4182-B055-9397764DFABB"},{"vulnerable":true,"criteria":"cpe:2.3:a:vcard4j:vcard4j:0.2:*:*:*:*:*:*:*","matchCriteriaId":"8EBBF829-908D-4749-8DAD-058D148D5911"},{"vulnerable":true,"criteria":"cpe:2.3:a:vcard4j:vcard4j:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BA5872F1-05B8-48E0-AFE1-22B8B7905B66"},{"vulnerable":true,"criteria":"cpe:2.3:a:vcard4j:vcard4j:1.1:*:*:*:*:*:*:*","matchCriteriaId":"87B69473-E4FA-4631-A130-C93962AC2577"},{"vulnerable":true,"criteria":"cpe:2.3:a:vcard4j:vcard4j:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"77A633D9-0383-4727-9354-9B2DFF12E876"},{"vulnerable":true,"criteria":"cpe:2.3:a:vcard4j:vcard4j:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8FA81FDE-A61F-4D53-AFFA-6156EF95E674"},{"vulnerable":true,"criteria":"cpe:2.3:a:vcard4j:vcard4j:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"AE4D9E71-CCA3-46DF-A172-B9AB7A5A815A"}]}]}],"references":[{"url":"http://securitytracker.com/id?1008582","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0006.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9343","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14120","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008582","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14120","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1795","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:info_touch:surfnet:1.31:*:*:*:*:*:*:*","matchCriteriaId":"699021CC-2876-441B-BB56-A22EDA6CB434"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/9346","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9346","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1796","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote attackers to execute arbitrary PHP code via the (1) config[header] parameter to hotnews-engine.inc.php3 or (2) config[incdir] parameter to hnmain.inc.php3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hotnews:hotnews:0.5.3:*:*:*:*:*:*:*","matchCriteriaId":"37AC677C-004E-46EE-B948-2D4DCD2E9584"},{"vulnerable":true,"criteria":"cpe:2.3:a:hotnews:hotnews:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"5E029825-20BA-4A55-9141-93C2CF26276B"},{"vulnerable":true,"criteria":"cpe:2.3:a:hotnews:hotnews:0.6.0_pre:*:*:*:*:*:*:*","matchCriteriaId":"B27BEEFE-9A33-47AE-8062-3A1746ED9A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:hotnews:hotnews:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D7012E7E-0A8C-4D7D-AA2C-32773BCB5110"},{"vulnerable":true,"criteria":"cpe:2.3:a:hotnews:hotnews:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"CCB055A9-64FD-46ED-B7C9-2624F4BC83BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hotnews:hotnews:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"3EB3CB53-6475-47A6-B6EF-3BEE5C2F203C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hotnews:hotnews:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"0E44C607-0467-4E3C-AE71-D2FC1ABE1ACD"}]}]}],"references":[{"url":"http://secunia.com/advisories/10551","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1008608","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=342594","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/3332","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3405","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/348840","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/9357","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14140","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1008608","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=342594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/3332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3405","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/348840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/9357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1797","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php for FreznoShop 1.3.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:freznoshop:freznoshop:1.0:*:*:*:*:*:*:*","matchCriteriaId":"B77C68CF-5822-4FA5-A02C-0CCC8F9FBE42"},{"vulnerable":false,"criteria":"cpe:2.3:a:freznoshop:freznoshop:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"6C2F2023-D52D-4A10-B215-F3B848A37599"},{"vulnerable":false,"criteria":"cpe:2.3:a:freznoshop:freznoshop:1.2:*:*:*:*:*:*:*","matchCriteriaId":"61533A25-B5F3-4759-8C61-428F3601DB31"},{"vulnerable":false,"criteria":"cpe:2.3:a:freznoshop:freznoshop:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A0281130-BDB1-498A-A67E-1C02725D53B9"},{"vulnerable":false,"criteria":"cpe:2.3:a:freznoshop:freznoshop:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8C10A838-753B-4442-83BD-58517E1537EF"},{"vulnerable":false,"criteria":"cpe:2.3:a:freznoshop:freznoshop:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"34163919-D5B1-419B-B216-79F04480AF3F"},{"vulnerable":false,"criteria":"cpe:2.3:a:freznoshop:freznoshop:1.3.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"031F5351-3D49-4B83-A1BD-7A7BB1D3D2D4"}]}]}],"references":[{"url":"http://secunia.com/advisories/10547","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://securitytracker.com/id?1008606","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.freznoshop.com/changelog_en.htm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3335","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9359","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14147","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://securitytracker.com/id?1008606","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.freznoshop.com/changelog_en.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14147","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1798","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the \"My Computer\" zone via a Synchronized Multimedia Integration Language (SMIL) presentation with a \"file:javascript:\" URL, which is executed in the security context of the previously loaded URL, a different vulnerability than CVE-2003-0726."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_enterprise_desktop:6.0.11.774:*:*:*:*:*:*:*","matchCriteriaId":"27DDB6F2-9EAF-4A77-BB3B-D3989E1D9458"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CF6535A6-6647-4E60-B5AA-24DFC06360AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.10.505:*:*:*:*:*:*:*","matchCriteriaId":"B04AEBE0-0160-4EA0-A177-BB66B2A842CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.11.818:*:*:*:*:*:*:*","matchCriteriaId":"0C6BB6A9-B0CE-4C04-8481-53B7CB195264"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.11.830:*:*:*:*:*:*:*","matchCriteriaId":"41688192-70B7-4C35-AE4F-FE116104137A"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.11.841:*:*:*:*:*:*:*","matchCriteriaId":"FA11D9CD-113B-4977-B150-D6500552222A"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.11.853:*:*:*:*:*:*:*","matchCriteriaId":"BF391DD1-2912-49BF-BC9F-B9FA3771737F"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:6.0.11.868:*:*:*:*:*:*:*","matchCriteriaId":"3908DB26-D8C4-4368-A1B6-C067085CE4B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:8.0:*:*:*:*:*:*:*","matchCriteriaId":"4E6051B4-1B15-44C0-B2CD-5504E68C60F2"}]}]}],"references":[{"url":"http://secunia.com/advisories/9584","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008647","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/3826","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/archive/1/349086","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/9378","source":"cve@mitre.org","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14168","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/9584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/3826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/archive/1/349086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/9378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1799","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote attackers to bypass intended packet filters via spoofed packets to other interfaces."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.0:*:*:*:*:*:*:*","matchCriteriaId":"60DA30A1-3360-46BC-85B7-008D535F95BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.1:*:*:*:*:*:*:*","matchCriteriaId":"DA33E7E2-DE7B-411E-8991-718DA0988C51"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1957B3C0-7F25-469B-BC3F-7B09260837ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=107331321302113&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/19105","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9362","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=107331321302113&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/19105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9362","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1800","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote attackers to gain access via a crafted URL and a certain cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sysbotz:simpledata:4.0:*:*:*:*:*:*:*","matchCriteriaId":"FAD075C0-AF75-4CD7-8259-A191D9E6C1D6"},{"vulnerable":false,"criteria":"cpe:2.3:a:sysbotz:simpledata:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"52CBFDCE-5CC0-4617-9683-1F57FD74EC84"}]}]}],"references":[{"url":"http://secunia.com/advisories/10595","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008695","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9380","source":"cve@mitre.org"},{"url":"http://www.sysbotz.com/press/sdupdate402.htm","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14206","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9380","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sysbotz.com/press/sdupdate402.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14206","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1801","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in PWebServer 0.3.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pwebserver:pwebserver_web_server:0.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F5A20273-673E-4B56-894C-5790D064F8BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:pwebserver:pwebserver_web_server:0.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7FDBBF23-0BE6-47CB-8CED-9B8C8E3BB270"},{"vulnerable":true,"criteria":"cpe:2.3:a:pwebserver:pwebserver_web_server:0.3.3:*:*:*:*:*:*:*","matchCriteriaId":"45AC802A-7D9D-4885-A2B9-859A1595A5FD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107876388211413&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11057","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.autistici.org/fdonato/advisory/PWebServer0.3.3-adv.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9817","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15404","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107876388211413&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.autistici.org/fdonato/advisory/PWebServer0.3.3-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15404","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1802","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Chat Anywhere 2.72 and earlier allows remote attackers to hide their IP address by using %00 before the nickname, which causes the IP address to be displayed as $IP$ on the administration web page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:lionmax_software:chat_anywhere:*:*:*:*:*:*:*:*","versionEndIncluding":"2.72","matchCriteriaId":"EE9806B1-AB8E-46A3-876D-811DE9BEF2C9"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/chatany-ghost-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=107885946220895&w=2","source":"cve@mitre.org"},{"url":"http://www.lionmax.com/chatanywhere.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9823","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15416","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/chatany-ghost-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=107885946220895&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.lionmax.com/chatanywhere.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15416","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1804","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wMCam server 2.1.348 allows remote attackers to cause a denial of service (no new connections) via multiple malformed HTTP requests without the GET command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invicta:wmcam_server:2.1.348:*:*:*:*:*:*:*","matchCriteriaId":"D809FC06-83B2-41A8-A448-CE7F70344869"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107894337524376&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9839","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15431","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107894337524376&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15431","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1805","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in class names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_engine:226f:*:*:*:*:*:*:*","matchCriteriaId":"A99F5526-E641-464B-83A3-A9AF27AC287D"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_engine:433:*:*:*:*:*:*:*","matchCriteriaId":"BBC39AE7-3145-4095-A471-C1668CAB8F97"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_engine:436:*:*:*:*:*:*:*","matchCriteriaId":"93D14650-A8AC-4CBB-9968-0EF215623DE9"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/unrfs-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=107893764406905&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107902755204583&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11108","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9840","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15430","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/unrfs-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=107893764406905&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107902755204583&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15430","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1806","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL commands via the (1) category_id, (2) product_id, or (3) feature_id parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dogpatch_software:cfwebstore:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1AC45000-BF3B-44B4-A85E-D469A894ED45"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107911090901744&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11112","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009403","source":"cve@mitre.org"},{"url":"http://www.cfwebstore.com/whatsnewdetail.cfm?WhatsNew__WhatsNewID=43","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4229","source":"cve@mitre.org"},{"url":"http://www.s-quadra.com/advisories/Adv-20040312.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9854","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15447","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107911090901744&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cfwebstore.com/whatsnewdetail.cfm?WhatsNew__WhatsNewID=43","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s-quadra.com/advisories/Adv-20040312.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9854","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15447","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1807","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to inject arbitrary web script or HTML via the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dogpatch_software:cfwebstore:5.0:*:*:*:*:*:*:*","matchCriteriaId":"1AC45000-BF3B-44B4-A85E-D469A894ED45"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107911090901744&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11112","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009403","source":"cve@mitre.org"},{"url":"http://www.cfwebstore.com/whatsnewdetail.cfm?WhatsNew__WhatsNewID=43","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4230","source":"cve@mitre.org"},{"url":"http://www.s-quadra.com/advisories/Adv-20040312.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9856","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15454","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107911090901744&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11112","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cfwebstore.com/whatsnewdetail.cfm?WhatsNew__WhatsNewID=43","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s-quadra.com/advisories/Adv-20040312.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9856","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15454","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1808","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Extcompose in metamail does not verify the output file before writing to it, which allows local users to overwrite arbitrary files via a symlink attack."}],"vendorComments":[{"organization":"Red Hat","comment":"The Red Hat Security Response Team rated this issue as having low security impact. This issue affected Red Hat Enterprise Linux 2.1 but due to the low severity will not be fixed.  metamail was not shipped in Red Hat Enterprise Linux 3, 4, or 5.","lastModified":"2009-06-01T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:metamail_corporation:metamail:2.7:*:*:*:*:*:*:*","matchCriteriaId":"9FB66F00-DC88-4FB0-83D9-B643EC09B37E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107910934926062&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9850","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15460","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107910934926062&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9850","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15460","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1809","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in phpBB 2.0.6d and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) postdays parameter to viewtopic.php or (2) topicdays parameter to viewforum.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C74C78D-EEE0-48DF-9721-2A43B996EBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"054EFBD3-2252-4173-B37A-B8CA0218CE0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"00EB368F-5471-42E3-BBBE-EF9E623A7259"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F65406CF-59F1-48DC-8ABC-501F210A8B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03AC5144-140D-48E9-87FD-96F2E248D4E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A8F12660-10A7-4B66-94B0-954C9CD7D36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*","matchCriteriaId":"D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*","matchCriteriaId":"1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"639E102D-2BD2-42FF-999A-02135A3E5647"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"AA7F5CF1-4610-47D0-A6DD-DCB55645245D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"FB898F63-F327-44B1-B6A2-889E490E583F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"894A26BD-2D8B-4DE7-BEE3-940A0498DB74"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107920498205324&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11121","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/4257","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4259","source":"cve@mitre.org"},{"url":"http://www.phpbb.com/support/documents.php?mode=changelog#206","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9865","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9866","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15464","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107920498205324&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/4257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpbb.com/support/documents.php?mode=changelog#206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9866","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15464","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1810","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Javascript engine in Opera 7.23 allows remote attackers to cause a denial of service (crash) by creating a new Array object with a large size value, then writing into that array."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"7.23","matchCriteriaId":"6CD44652-8496-49A4-882A-CD4897831A56"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107936810909082&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/9869","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15413","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=107936810909082&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://www.securityfocus.com/bid/9869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1811","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise the trusted certificates by uploading their own certificates."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:ssl_http_server:5.0:*:*:*:*:*:*:*","matchCriteriaId":"596CCE5A-F7BA-4CB2-AEAA-BA73C253C536"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:ssl_http_server:5.92:*:*:*:*:*:*:*","matchCriteriaId":"4EDA01D1-51C3-4BC8-8606-196CF0A6D40C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0057.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107936784030214&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11126","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-100.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.immunitysec.com/downloads/hp_http.sxw.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/6448","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9859","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.tru64.org/stories.php?story=04/03/12/0204078","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15466","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0057.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107936784030214&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ciac.org/ciac/bulletins/o-100.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.immunitysec.com/downloads/hp_http.sxw.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/6448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.tru64.org/stories.php?story=04/03/12/0204078","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15466","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1812","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Agent Common Services (1) cam.exe and (2) awservices.exe in Unicenter TNG 2.4 allow remote attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_tng:2.4:*:*:*:*:*:*:*","matchCriteriaId":"D2C5704D-3337-4351-872B-AF987DC39BC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_tng:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"6EFF2305-24CF-48F7-841E-63400CF25B48"}]}]}],"references":[{"url":"ftp://ftp.ca.com/CAproducts/unicenter/CCS31/nt/qi52764/QI52764.DB0","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107936784030214&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11131","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/VulnWatch/2004-03/0008.html","source":"cve@mitre.org"},{"url":"http://www.immunitysec.com/downloads/awservices.sxw.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9863","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15472","source":"cve@mitre.org"},{"url":"ftp://ftp.ca.com/CAproducts/unicenter/CCS31/nt/qi52764/QI52764.DB0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107936784030214&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.derkeiler.com/Mailing-Lists/VulnWatch/2004-03/0008.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.immunitysec.com/downloads/awservices.sxw.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15472","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1813","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication via an HTTP request to home.asp with a trailing slash (/)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:vocaltec:vgw4_8_telephony_gateway:8.0:*:*:*:*:*:*:*","matchCriteriaId":"BC435052-4836-4B33-B977-E10CB51AB44A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107936739131657&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9876","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15476","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107936739131657&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15476","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1814","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to read protected files via .. (dot dot) sequences in an HTTP request, as demonstrated using home.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:vocaltec:vgw4_8_telephony_gateway:8.0:*:*:*:*:*:*:*","matchCriteriaId":"BC435052-4836-4B33-B977-E10CB51AB44A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107936739131657&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9876","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15476","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107936739131657&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9876","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15476","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1815","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B79C39FD-D9A0-4CA4-BF37-D94D9F20E4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:*:*:*:*:*:*","matchCriteriaId":"B2C65BE0-32FA-4D51-AA2B-E7D630470D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4361030D-230A-45CD-AC84-9603DADC75BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"7C101B23-DD69-4020-A252-A808925DB093"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:sp1a:*:*:*:*:*:*","matchCriteriaId":"7490205B-E8CF-4088-8FD7-3CEE672E2A10"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0_build_61650:*:*:*:*:*:*:*","matchCriteriaId":"75E7B136-FAC8-4105-825F-6CC31A76E64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_application_server:7.0:*:platform:*:*:*:*:*","matchCriteriaId":"0F6B3BC6-9A4B-40E7-A540-9BCFC3D02E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_application_server:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"9760BDBA-E5FD-4AFF-ACB8-4C8B55CC3A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_application_server:7.0:ur1:platform:*:*:*:*:*","matchCriteriaId":"37553E5D-7B68-40C4-B970-FA0D02B7D3D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_application_server:7.0:ur1:standard:*:*:*:*:*","matchCriteriaId":"3D089210-2135-4D41-92AD-51FB97AB343E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_application_server:7.0:ur2:platform:*:*:*:*:*","matchCriteriaId":"C2C8EF3B-1A44-4D15-B2BE-FC970281760C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:one_application_server:7.0:ur2:standard:*:*:*:*:*","matchCriteriaId":"E3597345-9D0B-492B-99BC-1C992EBF7CD5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107936690702515&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11132","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-04.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9877","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15473","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107936690702515&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-04.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15473","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1816","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B79C39FD-D9A0-4CA4-BF37-D94D9F20E4C1"},{"vulnerable":false,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:*:*:*:*:*:*","matchCriteriaId":"B2C65BE0-32FA-4D51-AA2B-E7D630470D19"},{"vulnerable":false,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4361030D-230A-45CD-AC84-9603DADC75BC"},{"vulnerable":false,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"7C101B23-DD69-4020-A252-A808925DB093"},{"vulnerable":false,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:sp1a:*:*:*:*:*:*","matchCriteriaId":"7490205B-E8CF-4088-8FD7-3CEE672E2A10"},{"vulnerable":false,"criteria":"cpe:2.3:a:macromedia:jrun:4.0_build_61650:*:*:*:*:*:*:*","matchCriteriaId":"75E7B136-FAC8-4105-825F-6CC31A76E64B"},{"vulnerable":false,"criteria":"cpe:2.3:a:sun:one_application_server:7.0:*:platform:*:*:*:*:*","matchCriteriaId":"0F6B3BC6-9A4B-40E7-A540-9BCFC3D02E66"},{"vulnerable":false,"criteria":"cpe:2.3:a:sun:one_application_server:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"9760BDBA-E5FD-4AFF-ACB8-4C8B55CC3A61"},{"vulnerable":false,"criteria":"cpe:2.3:a:sun:one_application_server:7.0:ur1:platform:*:*:*:*:*","matchCriteriaId":"37553E5D-7B68-40C4-B970-FA0D02B7D3D9"},{"vulnerable":false,"criteria":"cpe:2.3:a:sun:one_application_server:7.0:ur1:standard:*:*:*:*:*","matchCriteriaId":"3D089210-2135-4D41-92AD-51FB97AB343E"},{"vulnerable":false,"criteria":"cpe:2.3:a:sun:one_application_server:7.0:ur2:platform:*:*:*:*:*","matchCriteriaId":"C2C8EF3B-1A44-4D15-B2BE-FC970281760C"},{"vulnerable":false,"criteria":"cpe:2.3:a:sun:one_application_server:7.0:ur2:standard:*:*:*:*:*","matchCriteriaId":"E3597345-9D0B-492B-99BC-1C992EBF7CD5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107936690702515&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11130","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57517-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201713-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9877","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15473","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107936690702515&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57517-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201713-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15473","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1817","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in modules.php in Php-Nuke 7.1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) Your Name field, (2) e-mail field, (3) nicname field, (4) fname parameter, (5) ratenum parameter, or (6) search field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107937752811633&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11135","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9879","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15491","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107937752811633&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15491","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1818","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in nmimage.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary script as other users by injecting arbitrary script into the z parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:warpspeed:4nalbum_module:0.92:*:*:*:*:*:*:*","matchCriteriaId":"39E0E522-62DB-4741-9027-6AEB58FF415C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107937780222514&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11134","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4293","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9881","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15497","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107937780222514&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1819","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to obtain sensitive information via a direct request to displaycategory.php, which reveals the path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:warpspeed:4nalbum_module:0.92:*:*:*:*:*:*:*","matchCriteriaId":"39E0E522-62DB-4741-9027-6AEB58FF415C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107937780222514&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11134","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4291","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9881","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15493","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107937780222514&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4291","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15493","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1820","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary PHP code by modifying the basepath parameter to reference a URL on a remote web server that contains fileFunctions.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:warpspeed:4nalbum_module:0.92:*:*:*:*:*:*:*","matchCriteriaId":"39E0E522-62DB-4741-9027-6AEB58FF415C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107937780222514&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11134","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4292","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9881","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15496","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107937780222514&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4292","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15496","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1821","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or perform unauthorized database operations via the gid parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:warpspeed:4nalbum_module:0.92:*:*:*:*:*:*:*","matchCriteriaId":"39E0E522-62DB-4741-9027-6AEB58FF415C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107937780222514&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11134","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4294","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9881","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15498","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107937780222514&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11134","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15498","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1822","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_REFERER parameter to login.php, (2) HTTP_REFERER parameter to register.php, or (3) target parameter to profile.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.1:*:*:*:*:*:*:*","matchCriteriaId":"32D7E47E-10F5-4F50-8940-951B2C0011CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"16042FAE-7370-425C-8810-4F9363B7CAA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.1.1_pre:*:*:*:*:*:*:*","matchCriteriaId":"B4A25A6F-62CA-4C76-9D4C-821B1E15FB1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.1.1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"6247DB0C-37B6-44EF-8B92-8CFCDA537039"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.1.1a:*:*:*:*:*:*:*","matchCriteriaId":"4C46298C-2492-4102-A264-E2A1D45AD423"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1A2AD59F-42DF-407A-8FCA-E6E0067A2B3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2:*:*:*:*:*:*:*","matchCriteriaId":"17E1044B-2101-4719-8749-17DD22F46055"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"B7E17261-A010-4929-99E5-A2511F205B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A461E2EB-9964-44DE-9C25-562D239201F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.3a:*:*:*:*:*:*:*","matchCriteriaId":"9CB6A4EC-D351-4EF8-8C6A-294A47DDCCC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.3b:*:*:*:*:*:*:*","matchCriteriaId":"2B10230A-7D72-418E-8A29-E9F20762C43A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"368C8142-836A-4FDB-9CD8-385FE06B9A62"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"1470761E-DA6E-4D2A-B226-1ED782FB3654"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"FEB3ED23-821D-42FA-A24F-F2EDDA43D7B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.7:*:*:*:*:*:*:*","matchCriteriaId":"88BA8736-5998-42E0-81E4-76E3669F8112"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DC9811C9-EE92-4115-B81F-7A3030390BD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.3.1:*:*:*:*:*:*:*","matchCriteriaId":"5A196AD2-7E48-40F4-923E-437FA76C97D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.3.1a:*:*:*:*:*:*:*","matchCriteriaId":"91D147F0-FF83-4FF4-AEF1-71366E874876"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.3.2:*:*:*:*:*:*:*","matchCriteriaId":"C6D87C46-D9EC-418B-9C8C-71E7149C72D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.3.2a:*:*:*:*:*:*:*","matchCriteriaId":"A7F6BE0A-7E2F-457D-B4BA-6BAE1B44E7D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.3.2b3:*:*:*:*:*:*:*","matchCriteriaId":"C990B390-4768-41B0-BB8B-A56C2524623F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4:*:*:*:*:*:*:*","matchCriteriaId":"6650BE9D-5F4B-4B22-BD7E-ABCC067D5455"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1B8E0CA9-F6D4-4DD3-A3EA-F3A40965261B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"7F67B233-3087-43E6-94F2-5DF39FAA36B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"7725AEF3-1C47-46B4-A35E-97152A84E731"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"F3F6C52C-F602-4C2A-8C8F-4A19DA41186F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"45F290E5-6508-4F62-8572-31B33750D341"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"6D941B5F-B704-4596-8739-BFE34225DBA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.3_beta:*:*:*:*:*:*:*","matchCriteriaId":"9A31EA2D-2B01-4928-9B3E-9D666FD2758B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107939479713136&w=2","source":"cve@mitre.org"},{"url":"http://phorum.org/changelog.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11157","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009433","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4333","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4334","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4335","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9882","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15494","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107939479713136&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://phorum.org/changelog.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11157","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4335","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15494","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1823","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0 can4 allows remote attackers to inject arbitrary web script or HTML via the (1) page parameter to showthread.php or (2) order parameter to forumdisplay.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D66CAB0A-2A0A-47EF-A328-C341CCC1BA76"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.0_can4:*:*:*:*:*:*:*","matchCriteriaId":"0E9FE483-4367-47E7-9D09-043955998C8C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107945556112453&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11142","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009440","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4310","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4311","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9888","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9889","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15495","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107945556112453&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4310","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4311","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1824","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web script or HTML via the what parameter to memberlist.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A81E1505-5F99-4DA8-AC0F-28F3E6F819C6"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"818806B0-37B1-4CC2-A955-E711EC000203"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0394B9E0-FD26-4D5E-91D5-B8334B517DD3"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.0_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"08DCDE86-03BD-4A61-9F3A-5EB05912A2D6"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.0_beta_3:*:*:*:*:*:*:*","matchCriteriaId":"CCC9227A-1F12-4E93-AEA7-C44D6A6F4177"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"306C6BDF-C687-4B63-998B-B520DF1D1B1B"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DF18ED7C-80BB-4A78-8809-9AAE817876A4"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA385E01-7FA0-4CC3-ADFE-0B3184A9093D"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1D731A35-E0DB-4F40-A981-C38229A2EB1E"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4053C8E5-5510-4814-A46E-89B81266C29D"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"8E6753AB-DFCF-4D40-8267-645810F7967E"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"4B2B3772-A566-4A51-8B51-68E78C86CB08"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DAFBBAA9-BD46-44E3-9618-D87384E959A2"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.9_can:*:*:*:*:*:*:*","matchCriteriaId":"747A57AD-A345-4F5B-AD82-0F7E08C2240E"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"04E0702A-9235-45BE-82A8-BFD57A0DCC9E"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BD0914B4-24A9-438F-9B44-A6809D755168"},{"vulnerable":false,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D29DB4E2-C87F-4D45-BA8A-B38835FCAD44"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0276.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107945556112453&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11142","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009440","source":"cve@mitre.org"},{"url":"http://www.iss.net/security_center/static/10679.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4312","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/6226","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9887","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15495","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2002-11/0276.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107945556112453&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009440","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.iss.net/security_center/static/10679.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/6226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1825","sourceIdentifier":"cve@mitre.org","published":"2004-03-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) return or (2) mos_change_template parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_open_source:4.5_1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"10581A23-A065-49F5-A4EA-F38E61AC7A5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_open_source:4.5_1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4C73DDAE-BD05-4337-BABF-A9C615362375"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107945576020593&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11140","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4308","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4665","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9890","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15499","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107945576020593&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1826","sourceIdentifier":"cve@mitre.org","published":"2004-03-16T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_open_source_4.5:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A270E6AA-BE5A-4FEF-BCE9-A8EFBAA35586"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_open_source_4.5:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"FA1F78A2-CC22-445A-915A-452994BF2A43"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_open_source_4.5:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"65FCB376-05D3-456C-A9DE-6455B15E034B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_open_source_4.5:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F85711E7-3A5E-47B6-9BF1-42D9154C9084"},{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_open_source_4.5:1.0.3beta:*:*:*:*:*:*:*","matchCriteriaId":"3E76909B-C1D6-45F1-8FAD-2C85DE0DC21E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107945576020593&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11140","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4307","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9891","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15500","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107945576020593&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11140","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4307","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15500","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1827","sourceIdentifier":"cve@mitre.org","published":"2004-03-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:simple_machines_smf:1.0_b:*:*:*:*:*:*:*","matchCriteriaId":"8830E37C-4F04-43B3-AEA8-B52681ABAD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1.5.1:*:second_edition:*:*:*:*:*","matchCriteriaId":"81CD19BD-CF9C-4699-B167-686635A539A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3:*:*:*:*:*:*:*","matchCriteriaId":"29C236ED-4AD6-427F-B077-0E918FC47986"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107936800226430&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107948064923981&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11128","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009427","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9873","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15488","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107936800226430&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107948064923981&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15488","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1828","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:belchior_foundry:vcard:2.8:*:*:*:*:*:*:*","matchCriteriaId":"7693E8D3-2240-4939-B98F-59EC9326542D"},{"vulnerable":true,"criteria":"cpe:2.3:a:belchior_foundry:vcard:2.9:*:*:*:*:*:*:*","matchCriteriaId":"7189E766-AFA4-4302-92CB-05A67E3BCDFF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107957312531199&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9910","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15522","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107957312531199&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9910","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15522","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1829","sourceIdentifier":"cve@mitre.org","published":"2004-03-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in error.php in Gijza.net Error Manager 2.1 for PHP-Nuke 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) pagetitle or (2) error parameters, or (3) certain parameters in the error log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:error_manager:php-nuke_module:2.1:*:*:*:*:*:*:*","matchCriteriaId":"F10A6CED-EDF7-4D5F-B639-3B34345899E7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107963064317560&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11164","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4384","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9911","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15529","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15530","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107963064317560&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15530","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1830","sourceIdentifier":"cve@mitre.org","published":"2004-03-18T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information via an invalid (1) language, (2) newlang, or (3) lang parameter, which leaks the pathname in a PHP error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107963064317560&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11164","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4386","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9911","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15524","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107963064317560&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15524","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1831","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Chrome 1.2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large length value, which leads to a null dereference or out-of-bounds read."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:techland:chrome:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1BC94216-A9C7-496C-B796-23BC1CAD056C"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/chrome-boom-adv.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107964719614657&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9898","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15535","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/chrome-boom-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107964719614657&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15535","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1832","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the GUI admin service in Mac OS X Server 10.3 allows remote attackers to cause a denial of service (crash and restart) via a large amount of data to TCP port 660."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107965605008575&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107971225327629&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9914","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15533","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107965605008575&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107971225327629&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9914","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15533","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1833","sourceIdentifier":"cve@mitre.org","published":"2004-03-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E61E2866-38F1-45C0-8B5D-A07CA430BDDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:5.0:*:*:*:*:*:*:*","matchCriteriaId":"0D2666FC-B03C-47A5-BA04-A08DC28C7C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:6.0:*:*:*:*:*:*:*","matchCriteriaId":"5FE98699-E21E-4D1C-BD43-F7F62D9AE7BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:6.4:*:*:*:*:*:*:*","matchCriteriaId":"42F1460E-CA94-4D7D-9799-F763221DBF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9547CEC2-B180-4BFF-A5FF-DE8D2ABB8986"},{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D724271B-3747-4C65-BC90-D0F7B89F996B"},{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5B705544-E282-4791-B4F9-0865D57E2747"}]}]}],"references":[{"url":"http://secunia.com/advisories/11172","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009500","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=80&type=vulnerabilities&flashstatus=true","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4381","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9929","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15546","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=80&type=vulnerabilities&flashstatus=true","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9929","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1834","sourceIdentifier":"cve@mitre.org","published":"2004-03-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard disk, which could allow local users to gain sensitive information."}],"vendorComments":[{"organization":"Apache","comment":"Fixed in Apache HTTP Server 2.0.53:\nhttp://httpd.apache.org/security/vulnerabilities_20.html","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"163A6EF6-7D3F-4B1F-9E03-A8C86562CC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"154566FB-0D1A-4DC2-AFE6-49DE93850951"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*","matchCriteriaId":"EB477AFB-EA39-4892-B772-586CF6D2D235"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*","matchCriteriaId":"5C4962BB-0E61-4788-B582-21F05CD33AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*","matchCriteriaId":"B35906CD-038E-4243-8A95-F0A3A43F06F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*","matchCriteriaId":"B940BB85-03F5-46D7-8DC9-2E1E228D3D98"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*","matchCriteriaId":"82139FFA-2779-4732-AFA5-4E6E19775899"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*","matchCriteriaId":"B7F717E6-BACD-4C8A-A9C5-516ADA6FEE6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*","matchCriteriaId":"08AB120B-2FEC-4EB3-9777-135D81E809AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*","matchCriteriaId":"1C7FF669-12E0-4A73-BBA7-250D109148C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*","matchCriteriaId":"5AB7B1F1-7202-445D-9F96-135DC0AFB1E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*","matchCriteriaId":"BCB7EE53-187E-40A9-9865-0F3EDA2B5A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*","matchCriteriaId":"9D06AE8A-9BA8-4AA8-ACEA-326CD001E879"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:*","matchCriteriaId":"2FC1A04B-0466-48AD-89F3-1F2EF1DEBE6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:*","matchCriteriaId":"19F34D08-430E-4331-A27D-667149425176"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.45:*:*:*:*:*:*:*","matchCriteriaId":"248BDF2C-3E78-49D1-BD9C-60C09A441724"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.46:*:*:*:*:*:*:*","matchCriteriaId":"BB0FDE3D-1509-4375-8703-0D174D70B22E"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.47:*:*:*:*:*:*:*","matchCriteriaId":"AFE732B5-00C9-4443-97E0-1DF21475C26B"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.48:*:*:*:*:*:*:*","matchCriteriaId":"C79C41D3-6894-4F2D-B8F8-82AB4780A824"},{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:2.0.49:*:*:*:*:*:*:*","matchCriteriaId":"449A5647-CEA6-4314-9DB8-D086F388E1C7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107981737322495&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11176","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/19072","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009509","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4446","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-562.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9933","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/0789","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15547","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11133","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107981737322495&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/19072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009509","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-102198-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-562.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9933","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/0789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11133","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1835","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the (1) img, (2) cat, (3) sort_key, (4) order_key, (5) user, or (6) album parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_gallery:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9CA45453-5C5F-4730-9343-01CAF0F84705"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107997906500032&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11194","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1009512","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/4472","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9944","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15566","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107997906500032&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1009512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/4472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1836","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Invision Power Top Site List 1.1 RC 2 and earlier allows remote attackers to execute arbitrary SQL via the id parameter of the comments action."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_top_site_list:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E0C120F3-ED77-410E-BDAA-39552E8C6C2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_top_site_list:1.1:*:*:*:*:*:*:*","matchCriteriaId":"15D55143-EE29-49FA-905C-B96458B92FCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_top_site_list:1.1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"E690BD86-78E8-4229-9B9E-02D5CAC68F57"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107997924117652&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11187","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009511","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9945","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15568","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107997924117652&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15568","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1837","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Mod_survey 3.0.x before 3.0.16-pre2 and 3.2.x before 3.2.0-pre4 allows remote attackers to inject arbitrary web script or HTML via the certain survey fields or error messages for malformed query strings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"84C6F7CF-379B-494B-9FAB-DD06AF256BB6"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"19337D40-5CBA-4AC8-95E9-86A53EFD457D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A19D7A2A-DE99-4D2B-83E4-D8644E0EB8B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D510D744-56AE-41A2-81F6-B65E8D04DE09"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DCAA6EF6-F954-4730-A8E5-43E765516487"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F47AB63B-4F41-4A8E-9F21-969F73189E27"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"F87C7282-28D7-4E49-BFC2-CC1B116CF0B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E3DA2438-B41C-4C57-9FB3-9C256E519585"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.10:*:*:*:*:*:*:*","matchCriteriaId":"FD3C22CE-2DBC-40C4-A613-0BE42286972D"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.11:*:*:*:*:*:*:*","matchCriteriaId":"9545D2F5-7274-464A-AB87-5AA1D629F9B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.12:*:*:*:*:*:*:*","matchCriteriaId":"A929CF9B-F812-4154-8C22-528C33EE1AF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.13:*:*:*:*:*:*:*","matchCriteriaId":"3DD9517C-0C0C-4FEA-98A7-69E7F5B9E22A"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8F48DEB2-B56A-4B5C-918E-598DBC366BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.14d:*:*:*:*:*:*:*","matchCriteriaId":"6154B066-7B2C-493A-93BE-3D201AF9AA55"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.14e:*:*:*:*:*:*:*","matchCriteriaId":"C49FE1AD-1307-43A6-A51B-2BBA554A0C37"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.15:*:*:*:*:*:*:*","matchCriteriaId":"157456DF-C949-4FF1-9591-551CCA4B35F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.15_pre1:*:*:*:*:*:*:*","matchCriteriaId":"FB02B770-A5A7-44D0-AB7B-F00F0E16CE95"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.15_pre2:*:*:*:*:*:*:*","matchCriteriaId":"4A8E252D-FC02-4FA3-B7DD-008A4FF4BFB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.15_pre3:*:*:*:*:*:*:*","matchCriteriaId":"5FAA978A-968C-487E-8EBB-C86AF5C0CA14"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.15_pre4:*:*:*:*:*:*:*","matchCriteriaId":"04B5B370-1301-41AD-903F-46803862C93F"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.15_pre5:*:*:*:*:*:*:*","matchCriteriaId":"5A19AD91-9325-4488-94A5-F675B2233333"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.15_pre6:*:*:*:*:*:*:*","matchCriteriaId":"A93FBDF3-3D4E-4BE0-BFE3-9348F15FA466"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.0.16_pre1:*:*:*:*:*:*:*","matchCriteriaId":"9235168E-C402-4D15-94E6-7A8D00DE6EE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.2.0_pre1:*:*:*:*:*:*:*","matchCriteriaId":"FBD084A2-B2C8-448A-9BEF-0104C035BBFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.2.0_pre2:*:*:*:*:*:*:*","matchCriteriaId":"1133B635-79A2-4554-A857-61A25FD0B143"},{"vulnerable":true,"criteria":"cpe:2.3:a:joel_palmius:mod_survey:3.2.0_pre3:*:*:*:*:*:*:*","matchCriteriaId":"41BDAF43-3675-4DBF-86D4-0EDA392A1CD0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107997967421972&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009516","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9941","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15582","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107997967421972&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9941","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15582","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1838","sourceIdentifier":"cve@mitre.org","published":"2004-03-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in xweb 1.0 allows remote attackers to download arbitrary files via a .. (dot dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xweb:xweb:1.0:*:*:*:*:*:*:*","matchCriteriaId":"13D9E3A3-B3DB-4E3F-9677-D28B31DE41A5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107997946623770&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11186","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009514","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.autistici.org/fdonato/advisory/xweb1.0-adv.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4460","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9937","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15567","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107997946623770&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11186","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009514","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.autistici.org/fdonato/advisory/xweb1.0-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4460","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9937","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15567","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1839","sourceIdentifier":"cve@mitre.org","published":"2004-03-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MS Analysis module 2.0 for PHP-Nuke allows remote attackers to obtain sensitive information via a direct request to (1) browsers.php, (2) mstrack.php, or (3) title.php, which reveal the full path in a PHP error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108006319730976&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9946","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108006319730976&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-1840","sourceIdentifier":"cve@mitre.org","published":"2004-03-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the (1) screen parameter to modules.php, (2) module_name parameter to title.php, (3) sortby parameter to modules.php, or (4) overview parameter to modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108006319730976&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9947","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15575","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108006319730976&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9947","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15575","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1841","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL via the referer field in an HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ms_analysis:website_traffic_analyzer:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D6876928-1DC3-47D7-AB86-E5E7D4DCBEC6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108006319730976&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9948","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15576","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108006319730976&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9948","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15576","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1842","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a URL to admin.php."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:*","versionStartIncluding":"6.0","versionEndIncluding":"7.1","matchCriteriaId":"275B70ED-0416-40AC-B06F-9FF91FE14BB8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108006309112075&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11195","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9895","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15596","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=108006309112075&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11195","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1843","sourceIdentifier":"cve@mitre.org","published":"2004-03-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter to (1) resend.asp or (2) news_view.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:expinion.net:member_management_system:2.1:*:*:*:*:*:*:*","matchCriteriaId":"AC14D64C-3070-4C74-B6A0-B71445EE3BCB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107999697625786&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11179","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009508","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9931","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15551","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107999697625786&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15551","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1844","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary web script or HTML via (1) the err parameter to error.asp or (2) register.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:expinion.net:member_management_system:2.1:*:*:*:*:*:*:*","matchCriteriaId":"AC14D64C-3070-4C74-B6A0-B71445EE3BCB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107999697625786&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11179","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1009508","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9932","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15552","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107999697625786&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1009508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9932","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15552","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1845","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to comment_add.asp, (2) search parameter to search.asp, or (3) n parameter to category_news_headline.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:expinion.net:news_manager_lite:2.5:*:*:*:*:*:*:*","matchCriteriaId":"2156A922-1E26-4B86-B9D8-7C0BDF519EBD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107999733503496&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11180","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1009507","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4492","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/4493","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/4494","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9935","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15548","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107999733503496&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1009507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/4493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/4494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1846","sourceIdentifier":"cve@mitre.org","published":"2004-03-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the (1) ID parameter to more.asp, (2) ID parameter to category_news.asp, or (3) filter parameter to news_sort.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:expinion.net:news_manager_lite:2.5:*:*:*:*:*:*:*","matchCriteriaId":"2156A922-1E26-4B86-B9D8-7C0BDF519EBD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107999733503496&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11180","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009507","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4495","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/4496","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/4497","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9935","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15549","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107999733503496&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11180","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4495","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/4496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/4497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1847","sourceIdentifier":"cve@mitre.org","published":"2004-03-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN parameter in the NEWS_LOGIN cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:expinion.net:news_manager_lite:2.5:*:*:*:*:*:*:*","matchCriteriaId":"2156A922-1E26-4B86-B9D8-7C0BDF519EBD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107999733503496&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11180","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009507","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9935","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15550","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107999733503496&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15550","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1848","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ipswitch WS_FTP Server 4.0.2 allows remote attackers to cause a denial of service (disk consumption) and bypass file size restrictions via a REST command with a large size argument, followed by a STOR of a smaller file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-399"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp_server:3.0_1:*:*:*:*:*:*:*","matchCriteriaId":"9B30C60A-2716-4464-A9CD-2649DC763037"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp_server:4.01:*:*:*:*:*:*:*","matchCriteriaId":"44A4DEB6-8E4B-4DAD-911C-DCC26D4C9DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A886D80F-D72C-4BDF-A65F-27CA82348C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4A0D7240-62C8-4003-A840-98E818709D9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BA99A58B-F751-4C04-B41B-CBE94998AA42"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"51D8225C-A74A-451E-9589-F1E00E4728D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3C3438AF-FCF1-4D77-83D5-27B9989F0683"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"843B6647-BF92-46D1-ADEE-92088D9AD1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A4B80A25-3860-4CF5-B8ED-5370EBB42455"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F7B58011-9D3B-432C-93B1-47938F7E2D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"50BE9ECB-4799-48BD-B3BE-7EE27FE3AA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CEBC59D2-405D-4374-812A-A3AEE0D6D594"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"755C3FB5-5D5B-4732-86F9-68A6612BC819"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"968C0544-A2F5-4FA6-A4B8-89113EE95B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E33B458B-F945-4D1A-81B7-F07CCC183C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D9D662A9-5D1B-465E-A4B1-A4C86BA207C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FBA7690C-8ADA-462E-B671-4D4CB243A483"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:3.4:*:*:*:*:*:*:*","matchCriteriaId":"29B11EAC-796C-43E4-A150-F3FE3F19A058"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A71B59A7-9467-4729-9A24-D5291C059E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4C1D0E89-C64F-4027-BF44-8F7159A5AE21"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108006717731989&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11206","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://securitytracker.com/id?1009529","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/4542","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9953","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15560","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41831","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108006717731989&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://securitytracker.com/id?1009529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/4542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15560","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41831","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1849","sourceIdentifier":"cve@mitre.org","published":"2004-03-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to dodelautores.html or (2) handle parameter to addhandle.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:9.1:*:*:*:*:*:*:*","matchCriteriaId":"1E915DEA-1BA9-429D-97D5-CA3D37C969B5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108006627005371&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009541","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4529","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4530","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9965","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15517","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108006627005371&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009541","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4529","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9965","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15517","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1850","sourceIdentifier":"cve@mitre.org","published":"2004-03-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Rage 1.01 and earlier allows remote attackers to cause a denial of service (infinite loop) via a TCP packet with the port and IP address set to zero."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fluidgames:the_rage:1.0_1:*:*:*:*:*:*:*","matchCriteriaId":"598C7D06-A920-40C1-B307-4A63F60C2BE4"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/ragefreeze-adv.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108006680013576&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009540","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9961","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15584","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/ragefreeze-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108006680013576&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009540","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15584","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1851","sourceIdentifier":"cve@mitre.org","published":"2004-03-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dameware Mini Remote Control 4.1.0.0 uses insufficiently random data to create the encryption key, which makes it easier for remote attackers to obtain sensitive information via brute force guessing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dameware_development:mini_remote_control_server:4.1_.0.0:*:*:*:*:*:*:*","matchCriteriaId":"EDFCB0A0-A373-4934-9947-86E73BC67EC8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108016344224973&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11205","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009557","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4547","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9957","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15587","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108016344224973&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15587","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1852","sourceIdentifier":"cve@mitre.org","published":"2004-03-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-319"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:dameware_mini_remote_control:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndExcluding":"3.74","matchCriteriaId":"E7EC239C-1358-4A4F-A7D6-34B715B241D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:dameware_mini_remote_control:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"4.2","matchCriteriaId":"49B9CA37-16F3-4847-9DA5-14BB582582F7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108016344224973&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11205","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009557","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.dameware.com/support/security/bulletin.asp?ID=SB3","source":"cve@mitre.org","tags":["Product","Vendor Advisory"]},{"url":"http://www.osvdb.org/4547","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9959","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15586","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=108016344224973&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.dameware.com/support/security/bulletin.asp?ID=SB3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product","Vendor Advisory"]},{"url":"http://www.osvdb.org/4547","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1853","sourceIdentifier":"cve@mitre.org","published":"2004-03-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Terminator 3: War of the Machines 1.0 allows remote attackers to cause a denial of service via a long ServerInfo variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:atari:terminator_3_war_of_the_machines:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0D9A7154-6848-4CAC-9C5C-378C8356437E"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/t3cbof-adv.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108016076221855&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11182","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009498","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4447","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9918","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15542","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/t3cbof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108016076221855&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009498","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9918","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1854","sourceIdentifier":"cve@mitre.org","published":"2004-03-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the logging function in Picophone 1.63 and earlier allows remote attackers to execute arbitrary code via a large packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:picophone:internet_telephone:1.63:*:*:*:*:*:*:*","matchCriteriaId":"5297BA04-7358-4646-BC00-96AF7E0F1238"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/picobof-adv.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108016032220647&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11209","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009551","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4550","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9969","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15595","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/picobof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108016032220647&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9969","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15595","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1855","sourceIdentifier":"cve@mitre.org","published":"2004-03-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dark Age of Camelot before 1.68 live patch does not sign the RSA public key, which could allow remote malicious servers to gain sensitive information via a man-in-the-middle attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mythic_entertainment:dark_age_of_camelot:1.60:*:*:*:*:*:*:*","matchCriteriaId":"7C99B335-A388-4E94-9B53-6D2F48018423"},{"vulnerable":true,"criteria":"cpe:2.3:a:mythic_entertainment:dark_age_of_camelot:1.61:*:*:*:*:*:*:*","matchCriteriaId":"86BE4087-D2CD-4C7E-9E5E-CEC9842B7D22"},{"vulnerable":true,"criteria":"cpe:2.3:a:mythic_entertainment:dark_age_of_camelot:1.62:*:*:*:*:*:*:*","matchCriteriaId":"5B3BABA9-6479-44E3-B570-848AA5E4E8D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mythic_entertainment:dark_age_of_camelot:1.63:*:*:*:*:*:*:*","matchCriteriaId":"B03EF1DC-5A36-4BE5-AB48-1F1EA9C6D9DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mythic_entertainment:dark_age_of_camelot:1.65:*:*:*:*:*:*:*","matchCriteriaId":"4E1FC1DD-930A-41BF-B6F0-90109EE218AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mythic_entertainment:dark_age_of_camelot:1.66:*:*:*:*:*:*:*","matchCriteriaId":"7CE94C49-348E-4B36-9673-65F1B1194A79"},{"vulnerable":true,"criteria":"cpe:2.3:a:mythic_entertainment:dark_age_of_camelot:1.67:*:*:*:*:*:*:*","matchCriteriaId":"25AB2DB4-BF5E-4E48-A185-B73F178A1373"},{"vulnerable":true,"criteria":"cpe:2.3:a:mythic_entertainment:dark_age_of_camelot:1.68:*:*:*:*:*:*:*","matchCriteriaId":"C9599E9F-FE41-4083-9F9F-1FC9BC599667"}]}]}],"references":[{"url":"http://capnbry.net/daoc/advisory20040323/","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.netsys.com/pipermail/full-disclosure/2004-March/019212.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108016932816707&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9960","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15597","source":"cve@mitre.org"},{"url":"http://capnbry.net/daoc/advisory20040323/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://lists.netsys.com/pipermail/full-disclosure/2004-March/019212.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108016932816707&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15597","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1856","sourceIdentifier":"cve@mitre.org","published":"2004-03-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer directory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:web_jetadmin:7.5.2546:*:*:*:*:*:*:*","matchCriteriaId":"B7DF22AC-9CA9-461E-9FFA-A4F0CA608112"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108016019623003&w=2","source":"cve@mitre.org"},{"url":"http://sh0dan.org/files/hpjadmadv.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/6492","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9971","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15605","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108016019623003&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sh0dan.org/files/hpjadmadv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/advisories/6492","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9971","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15605","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1857","sourceIdentifier":"cve@mitre.org","published":"2004-03-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a .. (dot dot) in the setinclude parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:web_jetadmin:7.5.2546:*:*:*:*:*:*:*","matchCriteriaId":"B7DF22AC-9CA9-461E-9FFA-A4F0CA608112"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108016019623003&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/6492","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9972","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15606","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108016019623003&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/6492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15606","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1858","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP Web Jetadmin 7.5.2546 allows remote attackers to cause a denial of service (crash) via a malformed request, possibly due to a stricmp() error from an invalid use of the \"$\" character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:hp:web_jetadmin:7.5.2546:*:*:*:*:*:*:*","matchCriteriaId":"B7DF22AC-9CA9-461E-9FFA-A4F0CA608112"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108016019623003&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/advisories/6492","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108016019623003&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/advisories/6492","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1859","sourceIdentifier":"cve@mitre.org","published":"2004-03-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Trend Micro Interscan Web Viruswall in InterScan VirusWall 3.5x allows remote attackers to read arbitrary files via a .. (dot dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall_for_windows_nt:3.4:*:*:*:*:*:*:*","matchCriteriaId":"2F81C82F-4997-4D4E-981B-F1601A8AD281"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall_for_windows_nt:3.5:*:*:*:*:*:*:*","matchCriteriaId":"ED3120FB-140A-458B-8926-7FE3593331FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall_for_windows_nt:3.6:*:*:*:*:*:*:*","matchCriteriaId":"B9239FE6-7FE3-4013-8E73-DE648F24EFEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall_for_windows_nt:3.51:*:*:*:*:*:*:*","matchCriteriaId":"12023885-3D72-4CE4-B60F-F91EEE0C9153"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall_for_windows_nt:3.52:*:*:*:*:*:*:*","matchCriteriaId":"0B132F48-3C0D-4DC9-9255-BB2D1CEBF855"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:interscan_viruswall_for_windows_nt:3.52_build1466:*:*:*:*:*:*:*","matchCriteriaId":"772DC29B-9C2C-4446-9352-6707E6B6F08F"}]}]}],"references":[{"url":"http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionID=19257","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108014604529316&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11215","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009550","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/4549","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9966","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15590","source":"cve@mitre.org"},{"url":"http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionID=19257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108014604529316&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009550","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/4549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9966","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15590","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1860","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to cause a denial of service (server disconnect) and possibly execute arbitrary code via a large filter on a column when using SmartView Tracker."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_forum:xmb:1.8_sp3:*:*:*:*:*:*:*","matchCriteriaId":"DCB6F1E0-B54E-4D45-901C-9E2992C98BBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_forum:xmb:1.9_beta:*:*:*:*:*:*:*","matchCriteriaId":"BC06BDA0-F6D1-4B0D-B807-40B5A3F36B52"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108023281112510&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009490","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4412","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9870","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15539","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108023281112510&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15539","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1861","sourceIdentifier":"cve@mitre.org","published":"2004-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Invision NetSupport School Pro uses a weak encryption algorithm to encrypt passwords, which allows local users to obtain passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netsupport:netsupport_school:7.0:*:*:*:*:*:*:*","matchCriteriaId":"7E19D59D-8450-4603-9EF7-0DD8726AC43E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netsupport:netsupport_school:7.0_1:*:*:*:*:*:*:*","matchCriteriaId":"4D6A3820-EBD7-4825-AFE2-B1F93E4D9CB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netsupport:netsupport_school:7.5:*:*:*:*:*:*:*","matchCriteriaId":"1425F185-D9EC-4742-B95A-D3139C6CF7CB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108032304932321&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9981","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15621","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108032304932321&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1862","sourceIdentifier":"cve@mitre.org","published":"2004-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Extreme Messageboard (XMB) 1.8 SP3 and 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the (1) xmbuser parameter to xmb.php, (2) folder parameter to u2u.php, (3) viewmost, replymost, or latest parameter to stats.php, (4) message or icons parameter to post.php, (5) threadlist, pagelinks, forumlist, navigation, or (6) forumdisplay parameter to forumdisplay.php."}],"vendorComments":[{"organization":"XMB","comment":"As noted in https://docs.xmbforum2.com/index.php?title=Security_Issue_History XMB version 1.9.10 or later must be installed to prevent attacks described by this CVE. All earlier versions of XMB are vulnerable until upgraded. Upgrades are available at https://www.xmbforum2.com/","lastModified":"2020-09-09T10:03:51.437"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_forum:xmb:1.8_sp3:*:*:*:*:*:*:*","matchCriteriaId":"DCB6F1E0-B54E-4D45-901C-9E2992C98BBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_forum:xmb:1.9_beta:*:*:*:*:*:*:*","matchCriteriaId":"BC06BDA0-F6D1-4B0D-B807-40B5A3F36B52"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108032355905265&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/14983","source":"cve@mitre.org"},{"url":"http://osvdb.org/14985","source":"cve@mitre.org"},{"url":"http://osvdb.org/14986","source":"cve@mitre.org"},{"url":"http://osvdb.org/14987","source":"cve@mitre.org"},{"url":"http://osvdb.org/14988","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11230","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9983","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15654","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108032355905265&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/14983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/14985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/14986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/14987","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/14988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15654","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1863","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allow remote attackers to inject arbitrary web script or HTML via (1) the u2uheader parameter in editprofile.php, the restrict parameter in (2) member.php, (3) misc.php, and (4) today.php, and (5) an arbitrary parameter in phpinfo.php."}],"vendorComments":[{"organization":"XMB","comment":"XMB versions 1.9.8 SP2 and later were checked and are not vulnerable. Upgrades are available at https://www.xmbforum2.com/","lastModified":"2021-04-23T12:36:30.260"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_forum:xmb:1.8_sp3:*:*:*:*:*:*:*","matchCriteriaId":"DCB6F1E0-B54E-4D45-901C-9E2992C98BBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_forum:xmb:1.9_beta:*:*:*:*:*:*:*","matchCriteriaId":"BC06BDA0-F6D1-4B0D-B807-40B5A3F36B52"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108032355905265&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/14982","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/14989","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/14991","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/16884","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9983","source":"cve@mitre.org"},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15654","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108032355905265&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/14982","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/14989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/14991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/16884","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15654","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1864","sourceIdentifier":"cve@mitre.org","published":"2004-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to (1) member.php, (2) misc.php, or (3) today.php."}],"vendorComments":[{"organization":"XMB","comment":"XMB versions 1.9.8 SP2 and later were checked and are not vulnerable. Upgrades are available at https://www.xmbforum2.com/","lastModified":"2021-04-23T12:36:12.510"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_forum:xmb:1.8_sp3:*:*:*:*:*:*:*","matchCriteriaId":"DCB6F1E0-B54E-4D45-901C-9E2992C98BBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_forum:xmb:1.9_beta:*:*:*:*:*:*:*","matchCriteriaId":"BC06BDA0-F6D1-4B0D-B807-40B5A3F36B52"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108032355905265&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009561","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/16886","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9983","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15655","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108032355905265&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/16886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15655","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1865","sourceIdentifier":"cve@mitre.org","published":"2004-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name ($blogname).  NOTE: if administrators are normally allowed to add HTML by other means, e.g. through Smarty templates, then this issue would not give any additional privileges, and thus would not be considered a vulnerability."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":4.8,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.7,"impactScore":2.7}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bblog:bblog:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"036F0D9D-A054-4490-A4D7-40B08CEAD6F4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108034226717745&w=2","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1009564","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/10510","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/13397","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15635","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=108034226717745&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1009564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/10510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/13397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1866","sourceIdentifier":"cve@mitre.org","published":"2004-03-26T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nstxd in Nstx 1.1 beta3 and earlier allows remote attackers to cause a denial of service (crash) via a large packet, which triggers a null dereference."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nstx:ip_over_dns_utility:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1CA4623F-81A3-4A59-811F-38CED754F91B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nstx:ip_over_dns_utility:1.1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"C0FBD463-23AD-44BD-86C8-747B90D000A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nstx:ip_over_dns_utility:1.1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"CDE875D3-53A0-4779-A5FF-1B9D7DA96E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:nstx:ip_over_dns_utility:1.1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"2950B8DF-26B1-4405-A8CF-DEB9E69AC63E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108034249916453&w=2","source":"cve@mitre.org"},{"url":"http://nstx.dereference.de/nstx/nstx-1.1-beta4.tgz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009567","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9989","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15638","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108034249916453&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://nstx.dereference.de/nstx/nstx-1.1-beta4.tgz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15638","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1867","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in guest.cgi in Fresh Guest Book allows remote attackers to inject arbitrary web script or HTML via the Name field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:web_fresh:fresh_guest_book:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6C301BFA-02B0-4AFB-9940-F55A0972B507"},{"vulnerable":true,"criteria":"cpe:2.3:a:web_fresh:fresh_guest_book:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5C4CDCF3-576C-4236-ABB1-ED60DC3EFF9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:web_fresh:fresh_guest_book:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E42319A1-DB17-46A3-A801-805F969D3465"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108057935827431&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9995","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15649","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108057935827431&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9995","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15649","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1868","sourceIdentifier":"cve@mitre.org","published":"2004-03-25T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in WinSig.exe in eSignal 7.5 and 7.6 allows remote attackers to execute arbitrary code via a long STREAMQUOTE tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:esignal:esignal:7.5:*:*:*:*:*:*:*","matchCriteriaId":"CA021784-7CC0-4BAD-8EB8-5B12B2700FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:esignal:esignal:7.6:*:*:*:*:*:*:*","matchCriteriaId":"F3C9BF1F-FE8E-479A-97E4-D8C1548F1D18"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0056.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=108025234317408&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11222","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://viziblesoft.com/insect/advisories/vz012004-esignal7.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9978","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15624","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=108025234317408&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11222","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://viziblesoft.com/insect/advisories/vz012004-esignal7.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9978","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15624","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1869","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Etherlords I 1.07 and earlier and Etherlords II 1.03 and earlier allows remote attackers to cause a denial of service (crash) by sending a packet that specifies the size for the next packet, then sending a larger packet than specified, which causes Etherlords to read unallocated memory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nival_interactive:etherlords:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D59BCFBA-DC21-453A-ADE8-325CD67FE5F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nival_interactive:etherlords:1.0_1:*:*:*:*:*:*:*","matchCriteriaId":"BE87F175-4251-4E30-BA75-38AEC9D34B97"},{"vulnerable":true,"criteria":"cpe:2.3:a:nival_interactive:etherlords:1.0_2:*:*:*:*:*:*:*","matchCriteriaId":"DB474505-03B4-4BBD-8CD7-61AA5F864C8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nival_interactive:etherlords:1.0_3:*:*:*:*:*:*:*","matchCriteriaId":"DAD18605-88B9-42F8-874D-529D1EE70D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:nival_interactive:etherlords:1.0_4:*:*:*:*:*:*:*","matchCriteriaId":"F23484E0-E2D8-4443-A156-637EA48CEEDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nival_interactive:etherlords:1.0_5:*:*:*:*:*:*:*","matchCriteriaId":"4CE85CDC-F78B-4F5B-B183-39405057CC90"},{"vulnerable":true,"criteria":"cpe:2.3:a:nival_interactive:etherlords:1.0_6:*:*:*:*:*:*:*","matchCriteriaId":"BE17064B-3C8C-4348-A8D4-D73FCD38DCF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nival_interactive:etherlords:1.0_7:*:*:*:*:*:*:*","matchCriteriaId":"AA6C7A86-CD4C-4321-AFDE-ADA93DF48872"},{"vulnerable":true,"criteria":"cpe:2.3:a:nival_interactive:etherlords_ii:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1EE000F8-0BBE-433C-A7A9-C7290DFB9EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:nival_interactive:etherlords_ii:1.0_1:*:*:*:*:*:*:*","matchCriteriaId":"2DE7F83D-258F-4B54-8B87-A95E37882041"},{"vulnerable":true,"criteria":"cpe:2.3:a:nival_interactive:etherlords_ii:1.0_2:*:*:*:*:*:*:*","matchCriteriaId":"E6F2959D-1B82-4CEA-A116-D8B912E21C4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nival_interactive:etherlords_ii:1.0_3:*:*:*:*:*:*:*","matchCriteriaId":"6EA50402-8745-4940-BDB8-5D97648F2036"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/ethboom-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=108024309814423&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9979","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15618","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15619","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/ethboom-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=108024309814423&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15619","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1870","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the (1) photo parameter to addfav.php, (2) photo parameter to comments.php, (3) credit parameter to comments.php, (4) cat parameter to index.php, (5) ppuser parameter to showgallery.php, (6) cat parameter to showgallery.php, (7) cat parameter to uploadphoto.php, (8) albumid parameter to useralbums.php, or (9) albumid parameter to useralbums.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:3.1:*:*:*:*:*:*:*","matchCriteriaId":"C2C8CE03-944A-480E-9349-9143A74ADCBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:3.2:*:*:*:*:*:*:*","matchCriteriaId":"762D922E-387C-41D6-BA4B-9D97692B7570"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:3.3:*:*:*:*:*:*:*","matchCriteriaId":"8D07B06C-3872-4D39-95FA-C0FAEBD9C2DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C36E11FE-5E1F-4BF9-A223-64B74984C5DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:4.1:*:*:*:*:*:*:*","matchCriteriaId":"5D19ECFF-EAE7-4FCB-BE21-B0C08FF65AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:4.6:*:*:*:*:*:*:*","matchCriteriaId":"8F04E77C-C9ED-4CAE-964C-6AB395BFEBE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"E8DEC786-BC61-44F7-8B93-3ECDA07C0772"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108057790723123&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11241","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009571","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9994","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15642","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108057790723123&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15642","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1871","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ppuser, (2) password, (3) stype, (4) perpage, (5) sort, (6) page, (7) si, or (8) cat parameters to showmembers.php, or the (9) photo name, (10) photo description, (11) album name, or (12) album description fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:3.1:*:*:*:*:*:*:*","matchCriteriaId":"C2C8CE03-944A-480E-9349-9143A74ADCBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:3.2:*:*:*:*:*:*:*","matchCriteriaId":"762D922E-387C-41D6-BA4B-9D97692B7570"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:3.3:*:*:*:*:*:*:*","matchCriteriaId":"8D07B06C-3872-4D39-95FA-C0FAEBD9C2DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:4.0:*:*:*:*:*:*:*","matchCriteriaId":"C36E11FE-5E1F-4BF9-A223-64B74984C5DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:4.1:*:*:*:*:*:*:*","matchCriteriaId":"5D19ECFF-EAE7-4FCB-BE21-B0C08FF65AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:4.6:*:*:*:*:*:*:*","matchCriteriaId":"8F04E77C-C9ED-4CAE-964C-6AB395BFEBE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:photopost:photopost_php_pro:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"E8DEC786-BC61-44F7-8B93-3ECDA07C0772"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108057790723123&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11241","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009571","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/03282004.php","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9994","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15643","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108057790723123&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11241","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009571","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.gulftech.org/03282004.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15643","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1872","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebCT Campus Edition 4.1.1.5 allows remote attackers to inject arbitrary web script or HTML via the @import URL function in a CSS style tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webct:webct:campus_3.8:*:*:*:*:*:*:*","matchCriteriaId":"E413F5FF-E66D-4961-9EB6-5A64E28595B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:webct:webct:campus_3.8.4:*:*:*:*:*:*:*","matchCriteriaId":"522A3185-01D8-4B64-846B-56C5195D7852"},{"vulnerable":true,"criteria":"cpe:2.3:a:webct:webct:campus_4.0:*:*:*:*:*:*:*","matchCriteriaId":"D24B63A5-5ECE-434A-AAC0-A60255F0D051"},{"vulnerable":true,"criteria":"cpe:2.3:a:webct:webct:campus_4.1:*:*:*:*:*:*:*","matchCriteriaId":"2F3CC81C-36D9-4606-B325-B7F186FE1C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webct:webct:campus_4.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A989FFBE-F828-4439-AC01-77037E295EDD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108057915916365&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11242","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9999","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15652","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108057915916365&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15652","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1873","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote attackers to gain privileges via the catcode parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alan_ward:a-cart:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1D3E41BE-9DB6-464E-8655-8294777F6B01"},{"vulnerable":true,"criteria":"cpe:2.3:a:alan_ward:a-cart:2.0:*:pro:*:*:*:*:*","matchCriteriaId":"B7DD91A0-23A9-4FD0-881A-7FAD9E8E1647"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108057887008983&w=2","source":"cve@mitre.org"},{"url":"http://s-a-p.ca/index.php?page=OurAdvisories&id=27","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/11236","source":"cve@mitre.org"},{"url":"http://www.aria-security.com/forum/showthread.php?t=31","source":"cve@mitre.org"},{"url":"http://www.aria-security.com/forum/showthread.php?t=32","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/451594/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/452005/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/452006/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/452023/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9997","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15661","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108057887008983&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://s-a-p.ca/index.php?page=OurAdvisories&id=27","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://secunia.com/advisories/11236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.aria-security.com/forum/showthread.php?t=31","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.aria-security.com/forum/showthread.php?t=32","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/451594/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/452005/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/452006/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/452023/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15661","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1874","sourceIdentifier":"cve@mitre.org","published":"2004-03-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in (1) deliver.asp and (2) billing.asp in A-CART Pro and A-CART 2.0 allow remote attackers to inject arbitrary web script or HTML via the user information forms."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alan_ward:a-cart:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1D3E41BE-9DB6-464E-8655-8294777F6B01"},{"vulnerable":true,"criteria":"cpe:2.3:a:alan_ward:a-cart:2.0:*:pro:*:*:*:*:*","matchCriteriaId":"B7DD91A0-23A9-4FD0-881A-7FAD9E8E1647"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108057887008983&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11236","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9997","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15660","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108057887008983&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15660","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1875","sourceIdentifier":"cve@mitre.org","published":"2004-03-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to testfile.html, (2) file parameter to erredit.html, (3) dns parameter to dnslook.html, (4) account parameter to ignorelist.html, (5) account parameter to showlog.html, (6) db parameter to repairdb.html, (7) login parameter to doaddftp.html (8) account parameter to editmsg.htm, or (9) ip parameter to del.html.  NOTE: the dnslook.html vector was later reported to exist in cPanel 10."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:9.1.0_r85:*:*:*:*:*:*:*","matchCriteriaId":"4D9DDCBE-8A9C-44FC-8A24-47933CE057F2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108066561608676&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11244","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22984","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.aria-security.com/forum/showthread.php?t=30","source":"cve@mitre.org"},{"url":"http://www.cirt.net/advisories/cpanel_xss.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4208","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4209","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4210","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4211","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4212","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4213","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4214","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4215","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4243","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10002","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/21142","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/4658","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15671","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108066561608676&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.aria-security.com/forum/showthread.php?t=30","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cirt.net/advisories/cpanel_xss.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4208","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4212","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/21142","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4658","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15671","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1876","sourceIdentifier":"cve@mitre.org","published":"2004-03-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The \"%f\" feature in the VirusEvent directive in Clam AntiVirus daemon (clamd) before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.51:*:*:*:*:*:*:*","matchCriteriaId":"BB72ED94-7832-43CF-81CF-27F88CAC6E91"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.52:*:*:*:*:*:*:*","matchCriteriaId":"2C48C927-2D02-4B7E-82C3-0BBF29AAB24A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.53:*:*:*:*:*:*:*","matchCriteriaId":"802BFF6B-5D9F-49AE-B96A-86A85E0F1034"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.54:*:*:*:*:*:*:*","matchCriteriaId":"5F7B2943-BC22-4735-8AA5-AADBEA685FAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.60:*:*:*:*:*:*:*","matchCriteriaId":"C6257524-7FC5-40CA-9BDA-82B8565C5BEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*","matchCriteriaId":"395AACCC-C20A-4BC1-BF62-D40FF71B7360"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*","matchCriteriaId":"0F52C121-B8B8-43A8-AFAB-E85474021919"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.68:*:*:*:*:*:*:*","matchCriteriaId":"659B4C39-0F0F-40C5-9B7E-0D00330611F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.68.1:*:*:*:*:*:*:*","matchCriteriaId":"7793F3D5-E93C-46C8-ADCA-EF60BF4EC3C4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108066864608615&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11253","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-03.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10007","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15692","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108066864608615&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10007","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15692","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1877","sourceIdentifier":"cve@mitre.org","published":"2004-03-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CC62E1B2-6964-4459-A1EF-A6A087C2960F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.1s:*:*:*:*:*:*:*","matchCriteriaId":"6A6F28FD-6EAD-4EDD-B9A1-0B120D0F0919"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C0160E00-D722-40CE-976C-77CB91C1B94D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E59B89D9-AAF9-40CB-931C-EB4958491B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C64888FB-133F-4930-8368-1BD2A4FB11A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"87DEB7BD-FB71-4C22-A0FF-89923B263DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BAAD1A33-4333-4AFB-8D49-1274AE345BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"852BF209-3C6F-403B-920D-50C46D37515B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"54FCC402-401B-4830-8181-78E49E1F1F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8B72A661-9EAA-4B9B-8865-17C8A29871BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7485BFF1-6863-4165-BE36-D656F39CF5EF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108067040722235&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10009","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15676","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108067040722235&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15676","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1878","sourceIdentifier":"cve@mitre.org","published":"2004-03-30T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LINBOX LIN:BOX allows remote attackers to bypass authentication, obtain sensitive information, or gain access via a direct request to admin/user.pl preceded by // (double leading slash)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linbit_technologies:linbox_officeserver:*:*:*:*:*:*:*:*","matchCriteriaId":"D7850DF8-A431-4B35-9A4E-E4D0A35DDB1C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108067245401673&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11264","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10010","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.websec.org/adv/linbit.txt.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15677","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108067245401673&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10010","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.websec.org/adv/linbit.txt.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15677","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1879","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows allows remote attackers to inject arbitrary web script or HTML via forum messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpkit:phpkit:1.6.03:*:*:*:*:*:*:*","matchCriteriaId":"DD305C66-3B8B-468E-945A-DFEE09E6FB8F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108067894822358&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10013","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15681","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108067894822358&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15681","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1880","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service (memory consumption)."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. These issues did not affect the versions of OpenLDAP as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.\n","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.0:*:*:*:*:*:*:*","matchCriteriaId":"086DC60F-F530-4515-8F3D-87F30DB9B322"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"1D538927-82D5-476E-9C85-2E9297316D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"2A904832-A6D6-45D4-B07C-79ED1FE47A80"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"1BB554A4-EEC2-4E17-9F32-27A580B9E389"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"423F9D3A-6AA7-4D64-B872-2C867EEFC3DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"34A5D9A5-FB1D-4ACF-846A-4DB73196122C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"41400CE6-FA51-435C-93F7-B31FE42F18AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6022ABEB-6825-4A5F-9884-74F94C2387F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"D2F15789-334D-460D-B5B3-FCC71087D107"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1CC52235-72DA-4EF4-870A-AF25181DB56C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B7064C52-1211-42B8-BF1F-C22D800AED07"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1CD95826-E44A-48C6-BAAB-77A905CAE6B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"FEEA6BB6-41FC-4F15-A95F-9B052F062454"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"E90766C1-6DBD-435C-85E1-920DAFA26D67"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"8CD13DAE-9588-4540-9183-FB80C507F985"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"526366F3-52F0-4816-A356-8F39B718C048"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"AC07AD0D-5DF9-41A4-8592-CEFF1842355D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.8:*:*:*:*:*:*:*","matchCriteriaId":"30017C56-42A9-4AF9-B5B3-7357E424F837"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.9:*:*:*:*:*:*:*","matchCriteriaId":"C8A51F38-3F5A-4F6D-93EE-776B5C2FF48F"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.10:*:*:*:*:*:*:*","matchCriteriaId":"8DBEC27E-3220-42CE-B6CC-675F387CB506"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.11:*:*:*:*:*:*:*","matchCriteriaId":"E641DFFB-CBAF-4DCF-944F-443CFF836A53"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.12:*:*:*:*:*:*:*","matchCriteriaId":"A552E270-5C9C-40DC-B23D-97C8D995B8FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:1.2.13:*:*:*:*:*:*:*","matchCriteriaId":"53DF812C-E1F8-46D3-A072-3FBE696ADC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"149EBFB7-B58F-4557-8E46-6DF88BB5E57E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"03D75A36-41C4-464F-8DC4-42C841ABC087"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1C3EE919-D05C-4625-85FE-132F6F2B932C"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"20D99A58-8D7E-4586-A9BF-1DD2A1DBB8D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DEBA0118-545E-4D7B-B819-34D157B2BA6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"67826609-F4CA-42CB-A5D0-B4503DDE2C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"61676BBD-95B8-44C9-BD66-79F00381BF86"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"719A9B1D-8E32-461F-BCD4-F72C6AD3E63E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"BFD73969-39F8-4849-AF6A-15ACDC2E4537"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"DB8C1DD2-865A-4CF2-8137-3C40C01C9EAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.10:*:*:*:*:*:*:*","matchCriteriaId":"EE38B045-2224-43D1-8618-0885505865C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.11:*:*:*:*:*:*:*","matchCriteriaId":"5D26DAC5-EDBD-42D8-A877-1E6EA666D72B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.12:*:*:*:*:*:*:*","matchCriteriaId":"67B0A2B6-C560-4AE0-BC79-3C7BC9163EE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.13:*:*:*:*:*:*:*","matchCriteriaId":"566406CE-368A-4799-A112-E5DFC5B333D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.14:*:*:*:*:*:*:*","matchCriteriaId":"E5CCC734-C15B-4D2B-BF83-F214F807C44E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.15:*:*:*:*:*:*:*","matchCriteriaId":"64796893-A90D-4B7D-BDBC-0087B57AF7E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.16:*:*:*:*:*:*:*","matchCriteriaId":"39914C6A-F4DB-43CC-B2B6-097365E55D34"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.17:*:*:*:*:*:*:*","matchCriteriaId":"5BFDD8F7-AAFD-453F-99A4-F9C0424EA791"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.18:*:*:*:*:*:*:*","matchCriteriaId":"0BFEEAA6-0B50-4644-A183-F5FEE7BD7EEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.19:*:*:*:*:*:*:*","matchCriteriaId":"920FC1DB-95E2-4367-BF20-77D75BD7617D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.20:*:*:*:*:*:*:*","matchCriteriaId":"28E643F8-005A-4170-8275-8E4AB5C25209"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.21:*:*:*:*:*:*:*","matchCriteriaId":"C8A34C63-C17D-4026-B409-AA9A56529B87"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.22:*:*:*:*:*:*:*","matchCriteriaId":"4EA863B0-A6AB-44BD-84E8-B6C885EFFE10"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.23:*:*:*:*:*:*:*","matchCriteriaId":"24BFAEC7-6256-4B8F-83F5-60FBD1571936"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.24:*:*:*:*:*:*:*","matchCriteriaId":"83227371-ACC3-4217-BFF9-0A3AAADD50DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.25:*:*:*:*:*:*:*","matchCriteriaId":"734B8101-BEAC-40AB-81EA-2516CA20BC93"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.26:*:*:*:*:*:*:*","matchCriteriaId":"F0BD5253-FBC9-4384-8FC3-4E384582BE91"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.0.27:*:*:*:*:*:*:*","matchCriteriaId":"AA73658A-8834-4EC2-8D8F-3A7D1C834669"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"06BCE98E-546C-4852-BAE2-CF525A778B48"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"94284C78-255E-43B7-A33E-FBC25BABEA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4B298BAA-5584-4193-A3DB-31FBB0BD12B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"90604A40-A1F5-4F23-9B8C-472E8C794B59"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"1418EC80-2F42-4C1B-BA38-CA5BDEF83F4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"9BC65FE9-348D-4468-A1EF-2AC5C673DB07"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.8:*:*:*:*:*:*:*","matchCriteriaId":"B3A400A0-B9D7-4CB2-82EA-49A599C2B30B"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"65587514-46AB-4D70-B7C2-FBED7F78D13D"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"7951BAAB-CB06-4F19-891A-E07E2B3C8701"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.11:*:*:*:*:*:*:*","matchCriteriaId":"82EC30A1-4150-44DC-89F7-5A64B8CC4A84"},{"vulnerable":true,"criteria":"cpe:2.3:a:openldap:openldap:2.1.12:*:*:*:*:*:*:*","matchCriteriaId":"9DF04D97-A561-427B-9891-A1423B86F164"}]}]}],"references":[{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000685","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/9203","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/17000","source":"cve@mitre.org"},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/9203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/17000","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1881","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execute arbitrary SQL commands via the strItems parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cactusoft:cactushop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"0E99801B-63E4-49AE-AD36-825F07EB9FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cactusoft:cactushop:5.1:*:*:*:*:*:*:*","matchCriteriaId":"EBA691EE-BE15-4CB3-AEE0-780A80791049"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108075059013762&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11272","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009601","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/4785","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4786","source":"cve@mitre.org"},{"url":"http://www.s-quadra.com/advisories/Adv-20040331.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10019","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15686","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108075059013762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/4785","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s-quadra.com/advisories/Adv-20040331.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10019","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15686","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1882","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in popuplargeimage.asp in CactuShop 5.x allows remote attackers to inject arbitrary web script or HTML via the strImageTag parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cactusoft:cactushop:5.0:*:*:*:*:*:*:*","matchCriteriaId":"0E99801B-63E4-49AE-AD36-825F07EB9FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cactusoft:cactushop:5.1:*:*:*:*:*:*:*","matchCriteriaId":"EBA691EE-BE15-4CB3-AEE0-780A80791049"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/019566.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=108075059013762&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11272","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009601","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4787","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10020","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15687","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/019566.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=108075059013762&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009601","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10020","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15687","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1883","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 (1) allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or (2) may allow remote FTP administrators to execute arbitrary code by causing a long hostname or username to be inserted into a reply to a STAT command while a file is being transferred."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4C1D0E89-C64F-4027-BF44-8F7159A5AE21"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108006553222397&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11206","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/358361","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9953","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15561","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108006553222397&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/358361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15561","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1884","sourceIdentifier":"cve@mitre.org","published":"2004-03-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp_pro:6.0:*:*:*:*:*:*:*","matchCriteriaId":"69C53D89-E5B6-4734-8CDC-D81C1975640B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp_pro:7.5:*:*:*:*:*:*:*","matchCriteriaId":"BC6CA6D1-772C-4D26-8786-A837B6A7DEC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp_pro:8.0_2:*:*:*:*:*:*:*","matchCriteriaId":"EC2F765A-DB53-4DD9-8E63-B819D7506B71"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp_pro:8.0_3:*:*:*:*:*:*:*","matchCriteriaId":"2D40A899-6605-4AA0-A415-99E0792238EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp_server:3.0_1:*:*:*:*:*:*:*","matchCriteriaId":"9B30C60A-2716-4464-A9CD-2649DC763037"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:ws_ftp_server:4.01:*:*:*:*:*:*:*","matchCriteriaId":"44A4DEB6-8E4B-4DAD-911C-DCC26D4C9DCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A886D80F-D72C-4BDF-A65F-27CA82348C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4A0D7240-62C8-4003-A840-98E818709D9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BA99A58B-F751-4C04-B41B-CBE94998AA42"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"51D8225C-A74A-451E-9589-F1E00E4728D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3C3438AF-FCF1-4D77-83D5-27B9989F0683"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"843B6647-BF92-46D1-ADEE-92088D9AD1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A4B80A25-3860-4CF5-B8ED-5370EBB42455"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F7B58011-9D3B-432C-93B1-47938F7E2D43"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"50BE9ECB-4799-48BD-B3BE-7EE27FE3AA40"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"CEBC59D2-405D-4374-812A-A3AEE0D6D594"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"755C3FB5-5D5B-4732-86F9-68A6612BC819"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:3.1:*:*:*:*:*:*:*","matchCriteriaId":"968C0544-A2F5-4FA6-A4B8-89113EE95B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E33B458B-F945-4D1A-81B7-F07CCC183C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D9D662A9-5D1B-465E-A4B1-A4C86BA207C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FBA7690C-8ADA-462E-B671-4D4CB243A483"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:3.4:*:*:*:*:*:*:*","matchCriteriaId":"29B11EAC-796C-43E4-A150-F3FE3F19A058"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A71B59A7-9467-4729-9A24-D5291C059E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4C1D0E89-C64F-4027-BF44-8F7159A5AE21"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108006581418116&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11206","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9953","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15558","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108006581418116&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1885","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ipswitch WS_FTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options that are handled by iftpmgr.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:progress:ws_ftp_server:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4C1D0E89-C64F-4027-BF44-8F7159A5AE21"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108006581418116&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11206","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/9953","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15558","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108006581418116&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/9953","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15558","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1886","sourceIdentifier":"cve@mitre.org","published":"2004-03-23T05:00:00.000","lastModified":"2023-11-07T01:56:58.833","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-1848.  Reason: This candidate is a duplicate of CVE-2004-1848.  Notes: All CVE users should reference CVE-2004-1848 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-1887","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ada Image Server (ImgSvr) 0.4 allows remote attackers to view directories or download files via an HTTP request with a trailing %00 (null)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ada:imgsvr:0.4:*:*:*:*:*:*:*","matchCriteriaId":"5103B23A-3CDD-42B8-AB8E-2EAA19D97C0C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108083813528255&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11277","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=230023","source":"cve@mitre.org"},{"url":"http://www.autistici.org/fdonato/advisory/imgSvr0.4-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10026","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10027","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15706","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108083813528255&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=230023","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.autistici.org/fdonato/advisory/imgSvr0.4-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10027","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15706","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1888","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aborior:encore_web_forum:*:*:*:*:*:*:*:*","matchCriteriaId":"5E7B5443-236B-479F-ACE9-56376646060F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108100973820868&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/16831","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/437813/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/437978/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10040","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1009652","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15725","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108100973820868&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/16831","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/437813/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/437978/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10040","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1009652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1889","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (hang) via a link failure with Microsoft Windows."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20:*:*:*:*:*:*:*","matchCriteriaId":"1EFCB9A7-9121-4FAE-B6FA-96C3A023ACEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20f:*:*:*:*:*:*:*","matchCriteriaId":"B90188D6-6C57-45C2-B266-50D65B4D33E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20m:*:*:*:*:*:*:*","matchCriteriaId":"39DD839E-159B-43FD-A1E6-A22EE658BEE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21:*:*:*:*:*:*:*","matchCriteriaId":"E2C1514F-A4DD-462C-9955-2AD8CF5B7F14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21f:*:*:*:*:*:*:*","matchCriteriaId":"CE9CF799-3B52-4694-A706-37FA08EC9ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21m:*:*:*:*:*:*:*","matchCriteriaId":"4E5A5AD7-F8AD-448F-8125-ACB0E7BA0A4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.22:*:*:*:*:*:*:*","matchCriteriaId":"C63CC83D-BF18-42BF-A5DF-3516508B072F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.23:*:*:*:*:*:*:*","matchCriteriaId":"D61194B2-4636-44BC-87A7-B8B29D0E17F6"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10037","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15722","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15722","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1890","sourceIdentifier":"cve@mitre.org","published":"2004-04-02T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (hang) via the PORT mode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.20:*:*:*:*:*:*:*","matchCriteriaId":"1EFCB9A7-9121-4FAE-B6FA-96C3A023ACEF"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.20f:*:*:*:*:*:*:*","matchCriteriaId":"B90188D6-6C57-45C2-B266-50D65B4D33E4"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.20m:*:*:*:*:*:*:*","matchCriteriaId":"39DD839E-159B-43FD-A1E6-A22EE658BEE0"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.21:*:*:*:*:*:*:*","matchCriteriaId":"E2C1514F-A4DD-462C-9955-2AD8CF5B7F14"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.21f:*:*:*:*:*:*:*","matchCriteriaId":"CE9CF799-3B52-4694-A706-37FA08EC9ABF"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.21m:*:*:*:*:*:*:*","matchCriteriaId":"4E5A5AD7-F8AD-448F-8125-ACB0E7BA0A4B"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.22:*:*:*:*:*:*:*","matchCriteriaId":"C63CC83D-BF18-42BF-A5DF-3516508B072F"},{"vulnerable":false,"criteria":"cpe:2.3:o:sgi:irix:6.5.23:*:*:*:*:*:*:*","matchCriteriaId":"D61194B2-4636-44BC-87A7-B8B29D0E17F6"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10037","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15723","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15723","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1891","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The ftp_syslog function in ftpd in SGI IRIX 6.5.20 \"doesn't work with anonymous FTP,\" which has an unknown impact, possibly preventing the actions of anonymous users from being logged."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20:*:*:*:*:*:*:*","matchCriteriaId":"1EFCB9A7-9121-4FAE-B6FA-96C3A023ACEF"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1892","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, allows remote attackers to execute arbitrary code via a long string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emule:emule:0.42d:*:*:*:*:*:*:*","matchCriteriaId":"8D5BACD5-E653-4872-97F7-2F2DCEF7DBF5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108100987429960&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11289","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.emule-project.net/home/perl/news.cgi?l=1&cat_id=22","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10039","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15730","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108100987429960&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.emule-project.net/home/perl/news.cgi?l=1&cat_id=22","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1893","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dreamweaver MX, when \"Using Driver On Testing Server\" or \"Using DSN on Testing Server\" is selected, uploads the mmhttpdb.asp script to the web site but does not require authentication, which allows remote attackers to obtain sensitive information and possibly execute arbitrary SQL commands via a direct request to mmhttpdb.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:macromedia:dreamweaver:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9E8C9E95-ACFC-49CD-BD6E-5D5D269F257F"},{"vulnerable":false,"criteria":"cpe:2.3:a:macromedia:dreamweaver:6.1:*:*:*:*:*:*:*","matchCriteriaId":"29664269-770C-4E39-95B8-E754A5E7C17E"},{"vulnerable":false,"criteria":"cpe:2.3:a:macromedia:dreamweaver:2004:*:*:*:*:*:*:*","matchCriteriaId":"F7E6E1EA-1A14-4B64-9E8C-BCC629F98346"},{"vulnerable":false,"criteria":"cpe:2.3:a:macromedia:dreamweaver_ultradev:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D966A980-57F2-4FBB-A86C-EB93C8AE4A85"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108102481929451&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11284","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-05.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.nextgenss.com/advisories/dreamweaver.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10036","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15721","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108102481929451&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-05.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.nextgenss.com/advisories/dreamweaver.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10036","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15721","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1894","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TEXutil in ConTEXt, when executed with the --silent option, allows local users to overwrite arbitrary files via a symlink attack on texutil.log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:pragma_ade:context:*:*:*:*:*:*:*:*","matchCriteriaId":"33EC0986-CA9F-4B50-B112-B1CF62A3F7F1"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019777.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=108118755923319&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009661","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10042","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15728","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019777.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=108118755923319&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15728","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1895","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"YaST Online Update (YOU) in SuSE 8.2 and 9.0 allows local users to overwrite arbitrary files via a symlink attack on you-$USER/cookies."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0058.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108118395519164&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11300","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009668","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4985","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10047","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15731","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0058.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108118395519164&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009668","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4985","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10047","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15731","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1896","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.6},"baseSeverity":"HIGH","exploitabilityScore":4.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:2.91:*:*:*:*:*:*:*","matchCriteriaId":"2CEA7967-D737-4B46-9382-A391DF832219"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.0:*:*:*:*:*:*:*","matchCriteriaId":"AF89B4A2-37A6-4702-A057-7B70C6157A3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:3.1:*:*:*:*:*:*:*","matchCriteriaId":"19C64AF2-CF9D-4052-85E9-BAFF713382F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"80F898DA-A260-4A81-8E94-DE85154B88DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"4510C850-49A0-4082-81CF-333829FE8639"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108118289208693&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11285","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009660","source":"cve@mitre.org"},{"url":"http://www.nextgenss.com/advisories/winampheap.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/4944","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10045","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15727","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108118289208693&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11285","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009660","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nextgenss.com/advisories/winampheap.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/4944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15727","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1897","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fault) by sending a Basic Authentication request without a password, which causes Monit to decrement a null pointer and perform an out-of-bounds read."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:tildeslash:monit:1.4:*:*:*:*:*:*:*","matchCriteriaId":"296DFFAB-9402-43F9-9371-65A5F2F62C27"},{"vulnerable":false,"criteria":"cpe:2.3:a:tildeslash:monit:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B48FCC46-56B1-4E2C-8605-F55631A38CBC"},{"vulnerable":false,"criteria":"cpe:2.3:a:tildeslash:monit:3.1:*:*:*:*:*:*:*","matchCriteriaId":"6F5E7AF2-1704-4316-9DC7-0ABD7D1E8549"},{"vulnerable":false,"criteria":"cpe:2.3:a:tildeslash:monit:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0EA3FD07-57E2-4A44-B9AF-33A499357704"},{"vulnerable":false,"criteria":"cpe:2.3:a:tildeslash:monit:4.0:*:*:*:*:*:*:*","matchCriteriaId":"FDFB0D31-D4CE-461C-A26E-22A46BDB3EDB"},{"vulnerable":false,"criteria":"cpe:2.3:a:tildeslash:monit:4.1:*:*:*:*:*:*:*","matchCriteriaId":"E71F5678-B71A-4CE8-9947-CF40CFB0BF16"},{"vulnerable":false,"criteria":"cpe:2.3:a:tildeslash:monit:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3F2F9801-D9DE-4C31-99EC-ABA2E564ACFD"},{"vulnerable":false,"criteria":"cpe:2.3:a:tildeslash:monit:4.2:*:*:*:*:*:*:*","matchCriteriaId":"542559A8-C439-4C27-BE43-F4C5C8EBD469"},{"vulnerable":false,"criteria":"cpe:2.3:a:tildeslash:monit:4.3_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"E20E0F76-CC67-405A-B970-3F0C30E2DC89"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108119149103696&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11304","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10051","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.tildeslash.com/monit/changes.html","source":"cve@mitre.org"},{"url":"http://www.tildeslash.com/monit/secadv_20040305.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15734","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108119149103696&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.tildeslash.com/monit/changes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tildeslash.com/monit/secadv_20040305.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15734","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1898","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:1.4:*:*:*:*:*:*:*","matchCriteriaId":"296DFFAB-9402-43F9-9371-65A5F2F62C27"},{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B48FCC46-56B1-4E2C-8605-F55631A38CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:3.1:*:*:*:*:*:*:*","matchCriteriaId":"6F5E7AF2-1704-4316-9DC7-0ABD7D1E8549"},{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0EA3FD07-57E2-4A44-B9AF-33A499357704"},{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:4.0:*:*:*:*:*:*:*","matchCriteriaId":"FDFB0D31-D4CE-461C-A26E-22A46BDB3EDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:4.1:*:*:*:*:*:*:*","matchCriteriaId":"E71F5678-B71A-4CE8-9947-CF40CFB0BF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3F2F9801-D9DE-4C31-99EC-ABA2E564ACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:4.2:*:*:*:*:*:*:*","matchCriteriaId":"542559A8-C439-4C27-BE43-F4C5C8EBD469"},{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:4.3_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"E20E0F76-CC67-405A-B970-3F0C30E2DC89"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0076.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108119149103696&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11304","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/4981","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10051","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.tildeslash.com/monit/changes.html","source":"cve@mitre.org"},{"url":"http://www.tildeslash.com/monit/secadv_20040305.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15735","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0076.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108119149103696&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/4981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.tildeslash.com/monit/changes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tildeslash.com/monit/secadv_20040305.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15735","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1899","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024 bytes."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:1.4:*:*:*:*:*:*:*","matchCriteriaId":"296DFFAB-9402-43F9-9371-65A5F2F62C27"},{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:3.0:*:*:*:*:*:*:*","matchCriteriaId":"B48FCC46-56B1-4E2C-8605-F55631A38CBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:3.1:*:*:*:*:*:*:*","matchCriteriaId":"6F5E7AF2-1704-4316-9DC7-0ABD7D1E8549"},{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:3.2:*:*:*:*:*:*:*","matchCriteriaId":"0EA3FD07-57E2-4A44-B9AF-33A499357704"},{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:4.0:*:*:*:*:*:*:*","matchCriteriaId":"FDFB0D31-D4CE-461C-A26E-22A46BDB3EDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:4.1:*:*:*:*:*:*:*","matchCriteriaId":"E71F5678-B71A-4CE8-9947-CF40CFB0BF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3F2F9801-D9DE-4C31-99EC-ABA2E564ACFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:4.2:*:*:*:*:*:*:*","matchCriteriaId":"542559A8-C439-4C27-BE43-F4C5C8EBD469"},{"vulnerable":true,"criteria":"cpe:2.3:a:tildeslash:monit:4.3_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"E20E0F76-CC67-405A-B970-3F0C30E2DC89"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0076.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108119149103696&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11304","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4979","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10051","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.tildeslash.com/monit/changes.html","source":"cve@mitre.org"},{"url":"http://www.tildeslash.com/monit/secadv_20040305.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15736","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0076.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108119149103696&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.tildeslash.com/monit/changes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tildeslash.com/monit/secadv_20040305.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15736","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1900","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the logging function in IGI 2 Covert Strike server 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in RCON commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pan_vision:i.g.i-2_covert_strike:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E78716C9-4E17-4044-82C8-2705B5B8BBB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan_vision:i.g.i-2_covert_strike:1.1:*:*:*:*:*:*:*","matchCriteriaId":"182224CC-F943-4FB9-A26A-A3E3E713212D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan_vision:i.g.i-2_covert_strike:1.2:*:*:*:*:*:*:*","matchCriteriaId":"2ABA60B0-4C9D-45FE-BFBC-8FE71A14DBA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:pan_vision:i.g.i-2_covert_strike:1.3:*:*:*:*:*:*:*","matchCriteriaId":"82B7814E-E640-4502-BA3D-B096BA419ED6"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/igi2fs-adv.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108120385811815&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11299","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009667","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4966","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10053","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15742","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/igi2fs-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108120385811815&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4966","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15742","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1901","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:portage:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.50","matchCriteriaId":"8915F692-FF29-46C5-BD10-F49593441C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:gentoo:portage:2.0.50:-:*:*:*:*:*:*","matchCriteriaId":"7B38676D-1897-414F-8443-A42988ADCCE8"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:-:*:*:*:*:*:*","matchCriteriaId":"B6CF9F0A-62A5-4152-BF8E-86C8333AAEDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc1:*:*:*:*:*:*","matchCriteriaId":"D1FD0EB4-E744-4465-AFEE-A3C807C9C993"},{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:rc2:*:*:*:*:*:*","matchCriteriaId":"1D866A7D-F0B9-4EA3-93C6-1E7C2C2A861F"}]}]}],"references":[{"url":"http://secunia.com/advisories/11305","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-200404-01.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10060","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15754","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/11305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-200404-01.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1902","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:citrix:metaframe_password_manager:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A6BA5D5B-E508-4DCF-8126-F386DFFFD71D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108127948610311&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11293","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009659","source":"cve@mitre.org"},{"url":"http://support.citrix.com/kb/entry.jspa?entryID=4062&categoryID=256","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4942","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10049","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15737","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108127948610311&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.citrix.com/kb/entry.jspa?entryID=4062&categoryID=256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15737","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1903","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in blaxxun 3D 7.0 allows remote attackers to execute arbitrary code via a long URL property inside an object tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:blaxxun:contact_3d:7.0:*:*:*:*:*:*:*","matchCriteriaId":"7B2B6834-54FB-41AA-99AB-C0CB494FAD91"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108127833002955&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10064","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15625","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108127833002955&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15625","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1904","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:panda:activescan:5.0:*:*:*:*:*:*:*","matchCriteriaId":"5AE78593-0DC5-47C1-9624-5E304A7215B9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108130573130482&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11312","source":"cve@mitre.org"},{"url":"http://theinsider.deep-ice.com/texts/advisory53.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10065","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15764","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108130573130482&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11312","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://theinsider.deep-ice.com/texts/advisory53.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15764","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1905","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service (crash) by calling the SetSitesFile function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:panda:activescan:5.0:*:*:*:*:*:*:*","matchCriteriaId":"5AE78593-0DC5-47C1-9624-5E304A7215B9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108130573130482&w=2","source":"cve@mitre.org"},{"url":"http://theinsider.deep-ice.com/texts/advisory53.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10067","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15831","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108130573130482&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://theinsider.deep-ice.com/texts/advisory53.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15831","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1906","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mcafee FreeScan allows remote attackers to cause a denial of service and possibly arbitrary code via a long string in the ScanParam property of a COM object, which may trigger a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mcafee:freescan:*:*:*:*:*:*:*:*","matchCriteriaId":"ABF3A053-29EC-4E53-9AC8-EA7AE529D0FC"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019877.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019891.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108136872711898&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11313","source":"cve@mitre.org"},{"url":"http://theinsider.deep-ice.com/texts/advisory54.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10071","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15772","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019877.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019891.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108136872711898&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://theinsider.deep-ice.com/texts/advisory54.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15772","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1907","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web Filtering functionality in Kerio Personal Firewall (KPF) 4.0.13 allows remote attackers to cause a denial of service (crash) by sending hex-encoded URLs containing \"%13%12%13\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:kerio:personal_firewall:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"E6C66920-4A4F-4335-B052-44E1F92F585B"},{"vulnerable":false,"criteria":"cpe:2.3:a:kerio:personal_firewall:4.0.7:*:*:*:*:*:*:*","matchCriteriaId":"658F01AE-C211-473C-BF70-E524E4310F20"},{"vulnerable":false,"criteria":"cpe:2.3:a:kerio:personal_firewall:4.0.8:*:*:*:*:*:*:*","matchCriteriaId":"1F769FAE-CC31-4C8B-B785-1423DFC2BA3B"},{"vulnerable":false,"criteria":"cpe:2.3:a:kerio:personal_firewall:4.0.9:*:*:*:*:*:*:*","matchCriteriaId":"CB7202BC-AD0B-41B1-B7C1-7665498C967B"},{"vulnerable":false,"criteria":"cpe:2.3:a:kerio:personal_firewall:4.0.10:*:*:*:*:*:*:*","matchCriteriaId":"38E60288-F9E6-4E7C-9B48-352277A34C85"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0061.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=108137421524251&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11331","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.cipher.org.uk/index.php?p=advisories/HEX-Kerio_Personal_Firewall_Remote_DOS_7-04-2004.advisory","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10075","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15821","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=108137421524251&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.cipher.org.uk/index.php?p=advisories/HEX-Kerio_Personal_Firewall_Remote_DOS_7-04-2004.advisory","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1908","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"McFreeScan.CoMcFreeScan.1 ActiveX object in Mcafee FreeScan allows remote attackers to obtain sensitive information via the GetSpecialFolderLocation function with certain parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:freescan:*:*:*:*:*:*:*:*","matchCriteriaId":"ABF3A053-29EC-4E53-9AC8-EA7AE529D0FC"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019877.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019891.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108136872711898&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108137545531496&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11313","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10077","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15782","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019877.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019891.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108136872711898&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108137545531496&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10077","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15782","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1909","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Claim Anti-Virus (ClamAV) 0.68 and earlier allows remote attackers to cause a denial of service (crash) via certain RAR archives, such as those generated by the Beagle/Bagle worm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.65:*:*:*:*:*:*:*","matchCriteriaId":"395AACCC-C20A-4BC1-BF62-D40FF71B7360"},{"vulnerable":true,"criteria":"cpe:2.3:a:clam_anti-virus:clamav:0.67:*:*:*:*:*:*:*","matchCriteriaId":"0F52C121-B8B8-43A8-AFAB-E85474021919"}]}]}],"references":[{"url":"http://freshmeat.net/projects/clamav/?branch_id=29355&release_id=154462","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11177","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-200404-07.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9897","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15553","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/clamav/?branch_id=29355&release_id=154462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-200404-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9897","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15553","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1910","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service (crash) via a long string to the GetPrivateProfileString function.  NOTE: this issue was originally reported as a buffer overflow, but that specific claim is disputed by the vendor, although a crash is acknowledged."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:security_check_virus_detection:*:*:*:*:*:*:*:*","matchCriteriaId":"F0BE0D0C-283C-410E-9297-2FA314734AD4"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019891.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108136901406896&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108143485021721&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10069","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15778","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019891.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108136901406896&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108143485021721&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15778","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1911","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in AzDGDatingLite 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the (1) l parameter (aka language variable) to index.php or (2) id parameter to view.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:azerbaijan_development_group:azdgdating:2.1.1:*:lite:*:*:*:*:*","matchCriteriaId":"68E6D708-7A60-4929-A146-3279B039BA3F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108144342317973&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11326","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/5018","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5019","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10084","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15796","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108144342317973&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/5018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5019","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15796","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1912","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center.php scripts in NukeCalendar 1.1.a, as used in PHP-Nuke, allow remote attackers to obtain sensitive information via a URL with an invalid argument, which reveals the full path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:8.0_final:*:*:*:*:*:*:*","matchCriteriaId":"C0E8268D-8E87-42B0-A0CD-D55DAD8F0FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:shiba-design:nukecalendar:1.1.a:*:*:*:*:*:*:*","matchCriteriaId":"3A7A3BC3-A0B9-4C86-AE1D-7FABCE6436BB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108144168932458&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10082","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15795","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108144168932458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15795","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1913","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to inject arbitrary web script or HTML via the eid parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:8.0_final:*:*:*:*:*:*:*","matchCriteriaId":"C0E8268D-8E87-42B0-A0CD-D55DAD8F0FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:shiba-design:nukecalendar:1.1.a:*:*:*:*:*:*:*","matchCriteriaId":"3A7A3BC3-A0B9-4C86-AE1D-7FABCE6436BB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108144168932458&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10082","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15798","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108144168932458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15798","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1914","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to execute arbitrary SQL commands via the eid parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:8.0_final:*:*:*:*:*:*:*","matchCriteriaId":"C0E8268D-8E87-42B0-A0CD-D55DAD8F0FA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:shiba-design:nukecalendar:1.1.a:*:*:*:*:*:*:*","matchCriteriaId":"3A7A3BC3-A0B9-4C86-AE1D-7FABCE6436BB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108144168932458&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10082","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15799","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108144168932458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15799","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1915","sourceIdentifier":"cve@mitre.org","published":"2004-04-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:0.3:*:*:*:*:*:*:*","matchCriteriaId":"462F3808-0442-4896-8B2A-85F06ABAE843"},{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:0.4:*:*:*:*:*:*:*","matchCriteriaId":"288E218A-A047-4840-B782-97458F1A2ED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:0.4.1_r1:*:*:*:*:*:*:*","matchCriteriaId":"8E9FEC04-18BF-4BF8-A596-C00EEA94A296"},{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:4.0:*:*:*:*:*:*:*","matchCriteriaId":"8E7CF06E-E96A-4DD9-AA2D-C89E3041F64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:4.1:*:*:*:*:*:*:*","matchCriteriaId":"6B587E58-BC36-4083-B1E8-0983912966F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:4.2:*:*:*:*:*:*:*","matchCriteriaId":"496A5CA3-7106-4282-AC0D-0376F7CE1AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:4.3:*:*:*:*:*:*:*","matchCriteriaId":"25E80804-3D83-4F8F-A134-9A2C6CAF2E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:4.4:*:*:*:*:*:*:*","matchCriteriaId":"9E838974-2603-4104-8979-E7EF36A851E4"}]}]}],"references":[{"url":"http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108145722229810&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11333","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200404-19.xml","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10085","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15803","source":"cve@mitre.org"},{"url":"http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108145722229810&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200404-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15803","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1916","sourceIdentifier":"cve@mitre.org","published":"2004-04-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:lcdproc:lcdproc:0.3:*:*:*:*:*:*:*","matchCriteriaId":"462F3808-0442-4896-8B2A-85F06ABAE843"},{"vulnerable":false,"criteria":"cpe:2.3:a:lcdproc:lcdproc:0.4:*:*:*:*:*:*:*","matchCriteriaId":"288E218A-A047-4840-B782-97458F1A2ED6"},{"vulnerable":false,"criteria":"cpe:2.3:a:lcdproc:lcdproc:0.4.1_r1:*:*:*:*:*:*:*","matchCriteriaId":"8E9FEC04-18BF-4BF8-A596-C00EEA94A296"},{"vulnerable":false,"criteria":"cpe:2.3:a:lcdproc:lcdproc:4.0:*:*:*:*:*:*:*","matchCriteriaId":"8E7CF06E-E96A-4DD9-AA2D-C89E3041F64B"},{"vulnerable":false,"criteria":"cpe:2.3:a:lcdproc:lcdproc:4.1:*:*:*:*:*:*:*","matchCriteriaId":"6B587E58-BC36-4083-B1E8-0983912966F0"},{"vulnerable":false,"criteria":"cpe:2.3:a:lcdproc:lcdproc:4.2:*:*:*:*:*:*:*","matchCriteriaId":"496A5CA3-7106-4282-AC0D-0376F7CE1AAC"},{"vulnerable":false,"criteria":"cpe:2.3:a:lcdproc:lcdproc:4.3:*:*:*:*:*:*:*","matchCriteriaId":"25E80804-3D83-4F8F-A134-9A2C6CAF2E66"},{"vulnerable":false,"criteria":"cpe:2.3:a:lcdproc:lcdproc:4.4:*:*:*:*:*:*:*","matchCriteriaId":"9E838974-2603-4104-8979-E7EF36A851E4"}]}]}],"references":[{"url":"http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108146376315229&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11333","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200404-19.xml","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10085","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15814","source":"cve@mitre.org"},{"url":"http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108146376315229&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200404-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15814","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1917","sourceIdentifier":"cve@mitre.org","published":"2004-04-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in test_func_func in LCDProc 0.4.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the str variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:0.3:*:*:*:*:*:*:*","matchCriteriaId":"462F3808-0442-4896-8B2A-85F06ABAE843"},{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:0.4:*:*:*:*:*:*:*","matchCriteriaId":"288E218A-A047-4840-B782-97458F1A2ED6"},{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:0.4.1_r1:*:*:*:*:*:*:*","matchCriteriaId":"8E9FEC04-18BF-4BF8-A596-C00EEA94A296"},{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:4.0:*:*:*:*:*:*:*","matchCriteriaId":"8E7CF06E-E96A-4DD9-AA2D-C89E3041F64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:4.1:*:*:*:*:*:*:*","matchCriteriaId":"6B587E58-BC36-4083-B1E8-0983912966F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:4.2:*:*:*:*:*:*:*","matchCriteriaId":"496A5CA3-7106-4282-AC0D-0376F7CE1AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:4.3:*:*:*:*:*:*:*","matchCriteriaId":"25E80804-3D83-4F8F-A134-9A2C6CAF2E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:lcdproc:lcdproc:4.4:*:*:*:*:*:*:*","matchCriteriaId":"9E838974-2603-4104-8979-E7EF36A851E4"}]}]}],"references":[{"url":"http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108146376315229&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11333","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200404-19.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10085","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15817","source":"cve@mitre.org"},{"url":"http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108146376315229&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200404-19.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15817","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1918","sourceIdentifier":"cve@mitre.org","published":"2004-04-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RSniff 1.0 allows remote attackers to cause a denial of service (connection exhaustion) via a large number of connections with a command other than AUTHENTICATE, or without any data, which prevents the socket from being closed properly."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rsniff:rsniff:1.0:*:*:*:*:*:*:*","matchCriteriaId":"63440E36-EA5F-47FA-A705-692D6CB8095E"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/rsniff-adv.txt","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108152508004665&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11339","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10093","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15823","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/rsniff-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108152508004665&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10093","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15823","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1919","sourceIdentifier":"cve@mitre.org","published":"2004-04-09T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The hash_strcmp function in hasch.c in Crackalaka 1.0.8 allows remote attackers to cause a denial of service (crash) via large malformed strings."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crackalaka:crackalaka:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"61E399BA-B52B-4CB2-9C04-07211C00D713"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108152479316967&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11340","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10092","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15824","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108152479316967&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10092","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15824","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1920","sourceIdentifier":"cve@mitre.org","published":"2004-04-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"X-Micro WLAN 11b Broadband Router 1.2.2, 1.2.2.3, 1.2.2.4, and 1.6.0.0 has a hardcoded \"super\" username and password, which could allow remote attackers to gain access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:x-micro:wlan_11b_broadband_router_firmware:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1E788362-62FA-486B-9FED-4E05927BA49C"},{"vulnerable":true,"criteria":"cpe:2.3:h:x-micro:wlan_11b_broadband_router_firmware:1.2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"23F147DC-ABCA-466D-8CFA-41551C54E18D"},{"vulnerable":true,"criteria":"cpe:2.3:h:x-micro:wlan_11b_broadband_router_firmware:1.2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3FAF51BC-2388-4B30-B86D-65BE12D50C84"},{"vulnerable":true,"criteria":"cpe:2.3:h:x-micro:wlan_11b_broadband_router_firmware:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"DE108E0D-D6F5-4115-8686-C8614A2B8BDD"},{"vulnerable":true,"criteria":"cpe:2.3:h:x-micro:wlan_11b_broadband_router_firmware:1.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7A43462E-DEE9-4AD8-B60C-D90BA79753B6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108162529229947&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11342","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10095","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15829","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108162529229947&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15829","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1921","sourceIdentifier":"cve@mitre.org","published":"2004-04-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"X-Micro WLAN 11b Broadband Router 1.6.0.1 has a hardcoded \"1502\" username and password, which could allow remote attackers to gain access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:x-micro:wlan_11b_broadband_router_firmware:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"1E788362-62FA-486B-9FED-4E05927BA49C"},{"vulnerable":true,"criteria":"cpe:2.3:h:x-micro:wlan_11b_broadband_router_firmware:1.2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"23F147DC-ABCA-466D-8CFA-41551C54E18D"},{"vulnerable":true,"criteria":"cpe:2.3:h:x-micro:wlan_11b_broadband_router_firmware:1.2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"3FAF51BC-2388-4B30-B86D-65BE12D50C84"},{"vulnerable":true,"criteria":"cpe:2.3:h:x-micro:wlan_11b_broadband_router_firmware:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"DE108E0D-D6F5-4115-8686-C8614A2B8BDD"},{"vulnerable":true,"criteria":"cpe:2.3:h:x-micro:wlan_11b_broadband_router_firmware:1.6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7A43462E-DEE9-4AD8-B60C-D90BA79753B6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108213608111111&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108223222519855&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11342","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10095","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15890","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108213608111111&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108223222519855&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10095","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15890","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1922","sourceIdentifier":"cve@mitre.org","published":"2004-04-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.5 and 6.0 allocates memory based on the memory size written in the BMP file instead of the actual BMP file size, which allows remote attackers to cause a denial of service (memory consumption) via a small BMP file with has a large memory size."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108183130827872&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108183130827872&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1923","sourceIdentifier":"cve@mitre.org","published":"2004-04-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to (1) banner_click.php, (2) categorize.php, (3) tiki-admin_include_directory.php, (4) tiki-directory_search.php, which reveal the web server path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.1","matchCriteriaId":"10BE27BB-E5CF-4136-83D0-03A2BEBC10EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"04CA9500-8F56-40DC-A6C4-F9964EFCD4F8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108180073206947&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11344","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://tikiwiki.org/tiki-read_article.php?articleId=66","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10100","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15847","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108180073206947&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tikiwiki.org/tiki-read_article.php?articleId=66","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1924","sourceIdentifier":"cve@mitre.org","published":"2004-04-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via via the (1) theme parameter to tiki-switch_theme.php, (2) find and priority parameters to messu-mailbox.php, (3) flag, priority, flagval, sort_mode, or find parameters to messu-read.php, (4) articleId parameter to tiki-read_article.php, (5) parentId parameter to tiki-browse_categories.php, (6) comments_threshold parameter to tiki-index.php (7) articleId parameter to tiki-print_article.php, (8) galleryId parameter to tiki-list_file_gallery.php, (9) galleryId parameter to tiki-upload_file.php, (10) faqId parameter to tiki-view_faq.php, (11) chartId parameter to tiki-view_chart.php, or (12) surveyId parameter to tiki-survey_stats_survey.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.1","matchCriteriaId":"10BE27BB-E5CF-4136-83D0-03A2BEBC10EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"04CA9500-8F56-40DC-A6C4-F9964EFCD4F8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108180073206947&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11344","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://tikiwiki.org/tiki-read_article.php?articleId=66","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10100","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15846","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108180073206947&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tikiwiki.org/tiki-read_article.php?articleId=66","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1925","sourceIdentifier":"cve@mitre.org","published":"2004-04-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sort_mode parameter in (1) tiki-usermenu.php, (2) tiki-list_file_gallery.php, (3) tiki-directory_ranking.php, (4) tiki-browse_categories.php, (5) tiki-index.php, (6) tiki-user_tasks.php, (7) tiki-directory_ranking.php, (8) tiki-directory_search.php, (9) tiki-file_galleries.php, (10) tiki-list_faqs.php, (11) tiki-list_trackers.php, (12) tiki-list_blogs.php, or via the offset parameter in (13) tiki-usermenu.php, (14) tiki-browse_categories.php, (15) tiki-index.php, (16) tiki-user_tasks.php, (17) tiki-list_faqs.php, (18) tiki-list_trackers.php, or (19) tiki-list_blogs.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.1","matchCriteriaId":"10BE27BB-E5CF-4136-83D0-03A2BEBC10EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"04CA9500-8F56-40DC-A6C4-F9964EFCD4F8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108180073206947&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11344","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://tikiwiki.org/tiki-read_article.php?articleId=66","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10100","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15845","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108180073206947&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://tikiwiki.org/tiki-read_article.php?articleId=66","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15845","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1926","sourceIdentifier":"cve@mitre.org","published":"2004-04-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code via the (1) Theme, (2) Country, (3) Real Name, or (4) Displayed time zone fields in a User Profile, or the (5) Name, (6) Description, (7) URL, or (8) Country fields in a Directory/Add Site operation."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.1","matchCriteriaId":"10BE27BB-E5CF-4136-83D0-03A2BEBC10EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"04CA9500-8F56-40DC-A6C4-F9964EFCD4F8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108180073206947&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11344","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://tikiwiki.org/tiki-read_article.php?articleId=66","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10100","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108180073206947&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tikiwiki.org/tiki-read_article.php?articleId=66","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-1927","sourceIdentifier":"cve@mitre.org","published":"2004-04-11T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. (dot dot) sequences in the mapfile parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.1","matchCriteriaId":"10BE27BB-E5CF-4136-83D0-03A2BEBC10EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"04CA9500-8F56-40DC-A6C4-F9964EFCD4F8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108180073206947&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11344","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://tikiwiki.org/tiki-read_article.php?articleId=66","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10100","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15848","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108180073206947&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://tikiwiki.org/tiki-read_article.php?articleId=66","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1928","sourceIdentifier":"cve@mitre.org","published":"2004-04-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wiki_up URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.8.1","matchCriteriaId":"10BE27BB-E5CF-4136-83D0-03A2BEBC10EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tiki:tikiwiki_cms\\/groupware:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"04CA9500-8F56-40DC-A6C4-F9964EFCD4F8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108180073206947&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11344","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://tikiwiki.org/tiki-read_article.php?articleId=66","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10100","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15849","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108180073206947&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11344","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://tikiwiki.org/tiki-read_article.php?articleId=66","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1929","sourceIdentifier":"cve@mitre.org","published":"2004-04-13T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code into the user parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.5:*:*:*:*:*:*:*","matchCriteriaId":"2F6E1577-6E50-49E2-B968-8C2AA924142F"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108180111826852&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11347","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10135","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=17","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15839","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108180111826852&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10135","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=17","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15839","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1930","sourceIdentifier":"cve@mitre.org","published":"2004-04-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, when themes are used, allows remote attackers to inject arbitrary web script or HTML via a base64-encoded user parameter or cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108182759214035&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11347","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10128","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=16","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15842","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108182759214035&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10128","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=16","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15842","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1932","sourceIdentifier":"cve@mitre.org","published":"2004-04-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL code and create an administrator account via base64-encoded SQL in the admin parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108180334918576&w=2","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=18","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15835","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108180334918576&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15835","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1933","sourceIdentifier":"cve@mitre.org","published":"2004-04-12T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and read unauthorized messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:citadel:ux:*:*:*:*:*:*:*:*","versionEndIncluding":"6.14","matchCriteriaId":"913B748B-0367-42BD-AC7D-F3E90CD3DBF0"},{"vulnerable":false,"criteria":"cpe:2.3:a:citadel:ux:5.90:*:*:*:*:*:*:*","matchCriteriaId":"40B4D12C-52B9-48E5-B4E7-693871C01AEA"},{"vulnerable":false,"criteria":"cpe:2.3:a:citadel:ux:5.91:*:*:*:*:*:*:*","matchCriteriaId":"A8FB4964-7A47-4C79-A9FB-449BEDF0C1D7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108180024428804&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10102","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15850","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108180024428804&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10102","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15850","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1934","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in affich.php in Gemitel 3.50 allows remote attackers to execute arbitrary PHP code via the base parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:isesam:gemitel:3.50:*:*:*:*:*:*:*","matchCriteriaId":"6035253E-A290-4219-99A6-3AC4B828B84B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108206642725505&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11393","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009824","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5396","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10156","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15887","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108206642725505&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009824","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15887","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1935","sourceIdentifier":"cve@mitre.org","published":"2004-04-15T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an e-mail attachment."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sct_corporation:campus_pipeline:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AA8F11F3-4A14-4E3B-B857-17E04E7CDDE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sct_corporation:campus_pipeline:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D8829E6F-4EAB-4744-84A2-965FE8BEB099"},{"vulnerable":true,"criteria":"cpe:2.3:a:sct_corporation:campus_pipeline:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E8C36A25-BD0F-4A8C-A8C7-CC867E0E6D49"},{"vulnerable":true,"criteria":"cpe:2.3:a:sct_corporation:campus_pipeline:2.2:*:*:*:*:*:*:*","matchCriteriaId":"CA3D5F68-33F8-4AE5-951C-894106F60406"},{"vulnerable":true,"criteria":"cpe:2.3:a:sct_corporation:campus_pipeline:3.0:*:*:*:*:*:*:*","matchCriteriaId":"6B27B752-77C2-404F-8D13-1E3B7054F065"},{"vulnerable":true,"criteria":"cpe:2.3:a:sct_corporation:campus_pipeline:3.1:*:*:*:*:*:*:*","matchCriteriaId":"D602C264-D403-4159-947E-B4914CAC560C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sct_corporation:campus_pipeline:3.2:*:*:*:*:*:*:*","matchCriteriaId":"451B7649-C483-4531-B580-F2DE916BFF64"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108207280917231&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11396","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10154","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15878","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108207280917231&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11396","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1936","sourceIdentifier":"cve@mitre.org","published":"2004-04-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ZoneAlarm Pro 4.5.538.001 and possibly other versions allows remote attackers to bypass e-mail protection via attachments whose names contain certain non-English characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.4:*:pro:*:*:*:*:*","matchCriteriaId":"161A802C-60DE-4A8E-BDBA-771C3123AEBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:2.6:*:pro:*:*:*:*:*","matchCriteriaId":"2F35E472-2E14-4F37-9D2C-BFBA543184AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:3.0:*:pro:*:*:*:*:*","matchCriteriaId":"B3FA13D7-D421-4B5D-B0ED-11BA501638CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:3.1:*:pro:*:*:*:*:*","matchCriteriaId":"C114E941-4170-4D71-96B2-1E7DF234358A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:4.0:*:plus:*:*:*:*:*","matchCriteriaId":"1A125DEF-6DE6-41FE-BD43-DA464DB14389"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:4.0:*:pro:*:*:*:*:*","matchCriteriaId":"721EFD0A-145F-440C-A9FC-D72AE6FA126A"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:4.5:*:pro:*:*:*:*:*","matchCriteriaId":"C5DE7D02-A778-47EF-9D3E-871C3EB09370"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:4.5.538.001:*:plus:*:*:*:*:*","matchCriteriaId":"80F0E511-A595-4C00-BC96-B4D97E2D7B0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:4.5.538.001:*:pro:*:*:*:*:*","matchCriteriaId":"F234D3E4-FD8B-4203-A8E4-17B15ECB0AE4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108206751931251&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108248415509417&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10148","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15884","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108206751931251&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108248415509417&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10148","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1937","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Nuked-KlaN 1.4b and 1.5b allow remote attackers to read or include arbitrary files via .. sequences in (1) the user_langue parameter to index.php or (2) the langue parameter to update.php, or modify arbitrary GLOBAL variables by causing globals.php to be loaded before conf.inc.php via (3) .. sequences in the file parameter with the page parameter set to globals, or (4) ../globals.php in the user_langue parameter, as demonstrated by modifying $nuked[prefix] in the Suggest module."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nuked-klan:nuked-klan:1.2:*:*:*:*:*:*:*","matchCriteriaId":"528BF5DD-6F61-4752-B9B4-D98DA7DC3575"},{"vulnerable":true,"criteria":"cpe:2.3:a:nuked-klan:nuked-klan:1.2_beta:*:*:*:*:*:*:*","matchCriteriaId":"3C996587-6713-407B-B834-73C5BD6D52C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nuked-klan:nuked-klan:1.3:*:*:*:*:*:*:*","matchCriteriaId":"33599EC7-49CA-4AFC-9DC2-6B7CC9CCA40F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nuked-klan:nuked-klan:1.3_beta:*:*:*:*:*:*:*","matchCriteriaId":"2F896FAC-3E50-4608-86AC-7A9984219A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:nuked-klan:nuked-klan:1.4:*:*:*:*:*:*:*","matchCriteriaId":"FF6196D1-613D-43C5-A284-A633567C508B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nuked-klan:nuked-klan:1.5:*:*:*:*:*:*:*","matchCriteriaId":"EE4445F3-266B-4950-A4D2-2BF800B236F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nuked-klan:nuked-klan:1.5_sp2:*:*:*:*:*:*:*","matchCriteriaId":"1ECB1A5C-EE38-4FB7-BD17-7F45359E5B52"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108222826225823&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11341","source":"cve@mitre.org"},{"url":"http://www.phpsecure.info/v2/tutos/frog/Nuked-KlaN.txt","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/10104","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15843","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15844","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108222826225823&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpsecure.info/v2/tutos/frog/Nuked-KlaN.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/10104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15844","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1938","sourceIdentifier":"cve@mitre.org","published":"2004-04-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded characters such as \"%2527\", which is translated to \"'\", as demonstrated using the phorum_uriauth parameter to list.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.7:*:*:*:*:*:*:*","matchCriteriaId":"FF13359B-162A-41DF-BB4F-DDD6CA2752F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"7D1AE057-A85C-49D9-981A-3314BD945D08"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108239796512897&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11407","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10173","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=19","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15894","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108239796512897&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=19","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1939","sourceIdentifier":"cve@mitre.org","published":"2004-04-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encoded slashes (%252F) in the key parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rhinosoft:zaep_antispam:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A81D8CB4-6C77-4FE0-8978-1F273F7FF853"},{"vulnerable":true,"criteria":"cpe:2.3:a:rhinosoft:zaep_antispam:2.0_.0.1:*:*:*:*:*:*:*","matchCriteriaId":"C23E27A2-9FA0-42A1-957F-8BA5AA136492"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108241507812681&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11388","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securiteam.com/windowsntfocus/5EP0I15CKK.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10139","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15858","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108241507812681&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11388","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securiteam.com/windowsntfocus/5EP0I15CKK.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10139","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15858","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1940","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a STUN response packet with a large attrLen value that causes an out-of-bounds read."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-125"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wirlab:kphone:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.1","matchCriteriaId":"7E77D622-F8C1-465D-B280-8D775E4650CD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108244325924859&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securiteam.com/unixfocus/5PP0B1FCLY.html","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://www.securityfocus.com/bid/10159","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.wirlab.net/kphone/changes-4.0.2.html","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15874","source":"cve@mitre.org","tags":["Broken Link","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=108244325924859&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.securiteam.com/unixfocus/5PP0B1FCLY.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://www.securityfocus.com/bid/10159","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://www.wirlab.net/kphone/changes-4.0.2.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1941","sourceIdentifier":"cve@mitre.org","published":"2004-04-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Fastream NETFile FTP/Web Server 6.5.1.980 allows remote attackers to cause a denial of service via a username that does not exist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:netfile_ftp_web_server:6.5.1.980:*:*:*:*:*:*:*","matchCriteriaId":"B5091040-461C-4728-AB83-BDF1DC9E837D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108239249613861&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11428","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009868","source":"cve@mitre.org"},{"url":"http://www.autistici.org/fdonato/advisory/FastreamNETFileFWServer6.5.1.980-adv.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5548","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10169","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15899","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108239249613861&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11428","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009868","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.autistici.org/fdonato/advisory/FastreamNETFileFWServer6.5.1.980-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5548","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15899","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1942","sourceIdentifier":"cve@mitre.org","published":"2004-04-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:patch_manager:113579-02:*:*:*:*:*:*:*","matchCriteriaId":"F4BFDD50-C76F-4CA3-BB85-816BC952C830"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:patch_manager:113579-03:*:*:*:*:*:*:*","matchCriteriaId":"35F846EE-A414-4E81-985B-012D3BF9A399"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:patch_manager:113579-04:*:*:*:*:*:*:*","matchCriteriaId":"B5887A12-75C4-4A22-B7F5-0D58B65C9532"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:patch_manager:113579-05:*:*:*:*:*:*:*","matchCriteriaId":"BBCC4A2A-C183-4ED3-8740-A60E34EBB811"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:patch_manager:114342-02:*:*:*:*:*:*:*","matchCriteriaId":"4BE6CDF9-2B0F-42BB-9D4B-D9403EBCDEF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:patch_manager:114342-03:*:*:*:*:*:*:*","matchCriteriaId":"08F63C33-D277-405B-934D-53E6FD297ABD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:patch_manager:114342-04:*:*:*:*:*:*:*","matchCriteriaId":"7F767F42-9115-4879-8827-52AF8D551ED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:patch_manager:114342-05:*:*:*:*:*:*:*","matchCriteriaId":"D31CE44C-8522-4AC2-A0CF-3B758B5553F7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108241638500417&w=2","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57554-1","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-144.shtml","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10261","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15908","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108241638500417&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57554-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-144.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15908","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1943","sourceIdentifier":"cve@mitre.org","published":"2004-04-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in album_portal.php in phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C74C78D-EEE0-48DF-9721-2A43B996EBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"054EFBD3-2252-4173-B37A-B8CA0218CE0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"00EB368F-5471-42E3-BBBE-EF9E623A7259"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F65406CF-59F1-48DC-8ABC-501F210A8B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03AC5144-140D-48E9-87FD-96F2E248D4E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A8F12660-10A7-4B66-94B0-954C9CD7D36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*","matchCriteriaId":"D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*","matchCriteriaId":"1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*","matchCriteriaId":"69F58020-7D60-4376-BF2B-602A24C3F4EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"3BF566D7-4537-49F6-91BF-F56D64DAE6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*","matchCriteriaId":"18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"639E102D-2BD2-42FF-999A-02135A3E5647"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"AA7F5CF1-4610-47D0-A6DD-DCB55645245D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"FB898F63-F327-44B1-B6A2-889E490E583F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"894A26BD-2D8B-4DE7-BEE3-940A0498DB74"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108244738102532&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10177","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15916","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108244738102532&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1944","sourceIdentifier":"cve@mitre.org","published":"2004-04-14T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eudora 6.1 and 6.0.3 for Windows allows remote attackers to cause a denial of service (crash) via a deeply nested multipart MIME message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F01DA3EF-92F6-470E-AE4D-4CDD2776B445"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:6.1:*:*:*:*:*:*:*","matchCriteriaId":"A72C4B66-AFEC-4035-BD72-A1133E6CCD4F"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020075.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108241694627321&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11360","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10137","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15857","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020075.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108241694627321&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15857","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1945","sourceIdentifier":"cve@mitre.org","published":"2004-04-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kinesphere_corporation:exchange_pop3:4.0:*:*:*:*:*:*:*","matchCriteriaId":"461192D9-A847-4CE5-AB13-A5E4B15D4299"},{"vulnerable":true,"criteria":"cpe:2.3:a:kinesphere_corporation:exchange_pop3:5.0:*:*:*:*:*:*:*","matchCriteriaId":"18C9DB43-7DED-4E24-87CF-0CC77DEE49CB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108247921402458&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108568462428096&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11449","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009882","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5593","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10180","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15922","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108247921402458&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108568462428096&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009882","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1946","sourceIdentifier":"cve@mitre.org","published":"2004-04-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via format string specifiers in the -C command line argument.  NOTE: it is not clear whether this issue could be exploited remotely, or if Cherokee is running at escalated privileges. Therefore it might not be a vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.4.16:*:*:*:*:*:*:*","matchCriteriaId":"206E827E-38BC-476C-90AF-65941BFB128A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108249818308672&w=2","source":"cve@mitre.org"},{"url":"http://www.nosystem.com.ar/advisories/advisory-03.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15924","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108249818308672&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nosystem.com.ar/advisories/advisory-03.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1947","sourceIdentifier":"cve@mitre.org","published":"2004-04-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:softwin:bitdefender:*:*:*:*:*:*:*:*","matchCriteriaId":"E66C8032-485B-4B96-93A6-93BC051DCE2A"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108240639427412&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108248367901616&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11427","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009862","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5549","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10174","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10175","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15911","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108240639427412&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108248367901616&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1948","sourceIdentifier":"cve@mitre.org","published":"2004-04-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information via \"ps aux,\" which displays the URL in the process list."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"4465B8F4-7724-4689-850D-E6D80139CED7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CEF0F37A-78B1-412E-95CD-E71C86FE8191"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B76BBA94-E991-442E-9112-00B75E24D9F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"46864AF6-9CC9-448D-9B37-71735C0D255D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8F4172CB-B527-4573-8F4C-0F5297377399"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1DAE9558-3CA6-4F3C-A45C-458168322E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"3340DBE8-BFA5-4A2E-8854-FFDBB5190AD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"01299616-C41D-4FEC-9616-890239760774"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"334A8F5F-9E09-4B72-9CC7-A5CA9DA4D63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"378852D8-2916-46FF-97B4-1C0D54D1BE53"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"4B531753-DA42-45D8-9EA0-57F30C3AE3BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"EA354C98-88C9-4235-B5E6-E5B11208F0DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ncftp_software:ncftp:3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"4B852FE5-8706-4404-8EA5-65B0EF127745"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108247943201685&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11438","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5595","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10182","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15919","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108247943201685&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11438","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1949","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via (1) the sif parameter to index.php in the Comments module or (2) timezoneoffset parameter to changeinfo.php in the Your_Account module."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.726:*:*:*:*:*:*:*","matchCriteriaId":"EED5E57D-A2EA-43C7-A29B-537FDE0656A2"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020154.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=108256503718978&w=2","source":"cve@mitre.org"},{"url":"http://news.postnuke.com/Article2580.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11386","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009801","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5368","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5369","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10146","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15869","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15875","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020154.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=108256503718978&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://news.postnuke.com/Article2580.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11386","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5368","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15875","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1950","sourceIdentifier":"cve@mitre.org","published":"2004-04-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C74C78D-EEE0-48DF-9721-2A43B996EBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"054EFBD3-2252-4173-B37A-B8CA0218CE0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"00EB368F-5471-42E3-BBBE-EF9E623A7259"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F65406CF-59F1-48DC-8ABC-501F210A8B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03AC5144-140D-48E9-87FD-96F2E248D4E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A8F12660-10A7-4B66-94B0-954C9CD7D36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*","matchCriteriaId":"D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*","matchCriteriaId":"1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*","matchCriteriaId":"69F58020-7D60-4376-BF2B-602A24C3F4EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"3BF566D7-4537-49F6-91BF-F56D64DAE6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*","matchCriteriaId":"18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108239864203144&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108241122908409&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11434","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10170","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15909","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108239864203144&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108241122908409&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1951","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite arbitrary files via the (1) audio.sun_audio_device or (2) dxr3.devicename options in an MRL link."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"BC5DCF4D-41B4-45D3-8F7C-6985A8B15888"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"56DE52C9-2381-483F-956D-C83503EBA664"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta1:*:*:*:*:*:*:*","matchCriteriaId":"BC260B04-C616-4A6A-9773-D535EA8A45AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta2:*:*:*:*:*:*:*","matchCriteriaId":"72DEB448-0F57-40FD-889E-6C8AC6920C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta3:*:*:*:*:*:*:*","matchCriteriaId":"DE750368-54FD-4CCD-AFF7-B26B3A4BA539"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta4:*:*:*:*:*:*:*","matchCriteriaId":"58476B06-9E48-4649-8761-B32FE01BA7C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta5:*:*:*:*:*:*:*","matchCriteriaId":"76CE8EF1-0578-4E12-A87D-832978ED484D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta6:*:*:*:*:*:*:*","matchCriteriaId":"A0DF434D-3BE2-4BCF-A6FC-397475830FDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta7:*:*:*:*:*:*:*","matchCriteriaId":"AFA95FC2-2082-4367-AD3D-0F876972E5A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta8:*:*:*:*:*:*:*","matchCriteriaId":"005EA1B5-7717-4CBD-9D21-249A5A497D51"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta9:*:*:*:*:*:*:*","matchCriteriaId":"19A33FCB-47FE-4F2E-9043-1F13805F0F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta10:*:*:*:*:*:*:*","matchCriteriaId":"AE1A9A53-860B-41CF-8BFD-4792775765E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta11:*:*:*:*:*:*:*","matchCriteriaId":"5246E535-1B8F-4BC1-AD1D-9BFA7BF28D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_beta12:*:*:*:*:*:*:*","matchCriteriaId":"C247EF56-6E67-41DA-8C49-C9310C42B8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc0a:*:*:*:*:*:*:*","matchCriteriaId":"D4E5CCDF-3472-4994-A47A-5A94D10F1C56"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"BAFC4559-D7E3-4C75-8B79-85A79067E261"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"3544B231-8C98-42D1-A2B2-E62109BDD796"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc3:*:*:*:*:*:*:*","matchCriteriaId":"3C69FEB8-DFE6-4241-9341-D8A4929F0FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc3a:*:*:*:*:*:*:*","matchCriteriaId":"99D8D224-15C4-4D15-9A04-4A1F3E1F63B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine:1_rc3b:*:*:*:*:*:*:*","matchCriteriaId":"F469DA5D-6020-4490-B671-2CEFB151C736"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"7C8F4701-C5CC-4FBA-AFF6-5AB890306AC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc3a:*:*:*:*:*:*:*","matchCriteriaId":"3295F345-26D0-4B23-848F-83CFE067EA01"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc3b:*:*:*:*:*:*:*","matchCriteriaId":"D2915303-7347-4811-B7D2-5AF367081797"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-lib:1_rc3c:*:*:*:*:*:*:*","matchCriteriaId":"6976E802-011F-44A2-B668-F9D643FC7A86"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-ui:0.9.21:*:*:*:*:*:*:*","matchCriteriaId":"61A8FD65-6A0E-4D76-BE81-002B9F3230E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-ui:0.9.22:*:*:*:*:*:*:*","matchCriteriaId":"807BDB2A-2895-448D-B28D-D09AE58EA24C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xine:xine-ui:0.9.23:*:*:*:*:*:*:*","matchCriteriaId":"590D055B-1608-411A-AA04-4F0F43496BA4"}]}]}],"references":[{"url":"http://secunia.com/advisories/11433","source":"cve@mitre.org"},{"url":"http://security.gentoo.org/glsa/glsa-200404-20.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/5594","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5739","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10193","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.372791","source":"cve@mitre.org"},{"url":"http://www.xinehq.de/index.php/security/XSA-2004-1","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.xinehq.de/index.php/security/XSA-2004-2","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15939","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200404-20.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/5594","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.372791","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.xinehq.de/index.php/security/XSA-2004-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.xinehq.de/index.php/security/XSA-2004-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15939","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1952","sourceIdentifier":"cve@mitre.org","published":"2004-04-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:advanced_guestbook:advanced_guestbook:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D30BA24F-6517-457E-870E-E71CC8D99D09"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2005-02/0138.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108258046402890&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10209","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15892","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2005-02/0138.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108258046402890&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1953","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which reveals the path in a PHP error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprofession:phprofession:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8123B964-95F1-4117-AB09-D895EE40D5E2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108258931430060&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11465","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5623","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10190","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=21","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15930","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108258931430060&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15930","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1954","sourceIdentifier":"cve@mitre.org","published":"2004-04-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary web script or HTML via the jcode parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprofession:phprofession:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8123B964-95F1-4117-AB09-D895EE40D5E2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108258931430060&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11465","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5624","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10190","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=21","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15931","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108258931430060&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15931","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1955","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via the offset parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprofession:phprofession:2.5:*:*:*:*:*:*:*","matchCriteriaId":"8123B964-95F1-4117-AB09-D895EE40D5E2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108258931430060&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11465","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5625","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10190","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=21","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15932","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108258931430060&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11465","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5625","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=21","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15932","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1956","sourceIdentifier":"cve@mitre.org","published":"2004-04-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PostNuke 0.7.2.6 allows remote attackers to gain information via a direct HTTP request to files in the (1) includes/blocks directory, (2) pnadodb directory, (3) NS-NewUser module, (4) NS-Your_Account, (5) NS-LostPassword module, or (6) NS-User module which reveals the path to the web server in a PHP error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.726:*:*:*:*:*:*:*","matchCriteriaId":"EED5E57D-A2EA-43C7-A29B-537FDE0656A2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108258902000472&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10191","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=22","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15933","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108258902000472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=22","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15933","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1957","sourceIdentifier":"cve@mitre.org","published":"2004-04-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.726 allows remote attackers to inject arbitrary web script or HTML via the (1) lid and query parameters to the Downloads module, (2) query parameter to the Web_links module, or (3) hlpfile parameter to openwindow.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.726:*:*:*:*:*:*:*","matchCriteriaId":"EED5E57D-A2EA-43C7-A29B-537FDE0656A2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108258902000472&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10191","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=22","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15934","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108258902000472&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=22","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15934","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1958","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in a UMOD (Unreal MOD) file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_engine:433:*:*:*:*:*:*:*","matchCriteriaId":"BBC39AE7-3145-4095-A471-C1668CAB8F97"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_engine:436:*:*:*:*:*:*:*","matchCriteriaId":"93D14650-A8AC-4CBB-9968-0EF215623DE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament:451b:*:*:*:*:*:*:*","matchCriteriaId":"97F32E3A-5AAA-4339-9D13-683503ED1583"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_2003:2199_macos:*:*:*:*:*:*:*","matchCriteriaId":"74616692-4F51-48F6-9359-4BB7D669B01A"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_2003:2199_win32:*:*:*:*:*:*:*","matchCriteriaId":"1971DEBD-F042-438D-B335-4D8BF3304EF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_2003:2225_macos:*:*:*:*:*:*:*","matchCriteriaId":"BA13D42B-7EF0-4D3E-94B4-6E0CDBB4DF1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:epic_games:unreal_tournament_2003:2225_win32:*:*:*:*:*:*:*","matchCriteriaId":"69B75B3F-99B7-497E-9E1E-C49520E971D1"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/umod-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=108267310519459&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10196","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15942","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/umod-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=108267310519459&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10196","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15942","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1959","sourceIdentifier":"cve@mitre.org","published":"2004-04-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"blocker_query.php in Protector System 1.15b1 for PHP-Nuke allows remote attackers to gain sensitive information via a string in the portNum parameter, which reveals the full path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:protector_system:protector_system:1.15b1:*:*:*:*:*:*:*","matchCriteriaId":"A4FB9C41-961E-432F-9951-0119F0D3D0EE"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108276299810121&w=2","source":"cve@mitre.org"},{"url":"http://protector.warcenter.se/article-53--0-0.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10206","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=25","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15963","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108276299810121&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://protector.warcenter.se/article-53--0-0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=25","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15963","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1960","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in blocker_query.php in Protector System 1.15b1 allows remote attackers to inject arbitrary web script or HTML via the (1) target or (2) portNum parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:protector_system:protector_system:1.15b1:*:*:*:*:*:*:*","matchCriteriaId":"A4FB9C41-961E-432F-9951-0119F0D3D0EE"}]}]}],"references":[{"url":"http://protector.warcenter.se/article-53--0-0.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/361300/2004-04-21/2004-04-27/0","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10206","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=25","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15965","source":"cve@mitre.org"},{"url":"http://protector.warcenter.se/article-53--0-0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/361300/2004-04-21/2004-04-27/0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=25","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1961","sourceIdentifier":"cve@mitre.org","published":"2004-04-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"blocker.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection protection and execute limited SQL commands via URL-encoded \"'\" characters (\"%27\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:protector_system:protector_system:1.15b1:*:*:*:*:*:*:*","matchCriteriaId":"A4FB9C41-961E-432F-9951-0119F0D3D0EE"}]}]}],"references":[{"url":"http://protector.warcenter.se/article-53--0-0.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/361300/2004-04-21/2004-04-27/0","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10206","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=25","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://protector.warcenter.se/article-53--0-0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/361300/2004-04-21/2004-04-27/0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=25","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-1962","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection filters by using \"/**/\" sequences in the targeted fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:protector_system:protector_system:1.15b1:*:*:*:*:*:*:*","matchCriteriaId":"A4FB9C41-961E-432F-9951-0119F0D3D0EE"}]}]}],"references":[{"url":"http://protector.warcenter.se/article-53--0-0.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/361300/2004-04-21/2004-04-27/0","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10206","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=25","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15969","source":"cve@mitre.org"},{"url":"http://protector.warcenter.se/article-53--0-0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/361300/2004-04-21/2004-04-27/0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=25","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15969","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1963","sourceIdentifier":"cve@mitre.org","published":"2004-04-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nqt.php in Network Query Tool (NQT) 1.6 allows remote attackers to obtain sensitive information via a string in the portNum parameter, which reveals the full path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:freshmeat:network_query_tool:1.6:*:*:*:*:*:*:*","matchCriteriaId":"FE091ECE-8341-4072-9FD4-1F73749F79C7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108276405108267&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11479","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=24","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15957","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108276405108267&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=24","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15957","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1964","sourceIdentifier":"cve@mitre.org","published":"2004-04-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in nqt.php in Network Query Tool (NQT) 1.6 allows remote attackers to inject arbitrary web script or HTML via the portNum parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:freshmeat:network_query_tool:1.0:*:*:*:*:*:*:*","matchCriteriaId":"96449604-EE4B-4D7D-820B-9EF64BCE331E"},{"vulnerable":true,"criteria":"cpe:2.3:a:freshmeat:network_query_tool:1.6:*:*:*:*:*:*:*","matchCriteriaId":"FE091ECE-8341-4072-9FD4-1F73749F79C7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108276405108267&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11479","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10205","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=24","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15929","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108276405108267&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10205","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=24","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1965","sourceIdentifier":"cve@mitre.org","published":"2004-04-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) redirect parameter to member.php, (2) to parameter to myhome.php (3) TID parameter to post.php, or (4) redirect parameter to index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"D0E8D8D0-D96F-411D-8611-3381C576AE1A"},{"vulnerable":false,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"2CE48C90-79EA-4333-97BF-8ABD0789D625"},{"vulnerable":false,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"D2F986CB-1C64-4ED2-A3B6-6BA69D2B13CC"},{"vulnerable":false,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"1713141D-40B0-4338-B697-3A077A080438"},{"vulnerable":false,"criteria":"cpe:2.3:a:openbb:openbb:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5F50BB6B-34DD-4AA4-9361-7EF4FFB07122"},{"vulnerable":false,"criteria":"cpe:2.3:a:openbb:openbb:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"265F9C9B-388B-49EE-9655-D9AB93B91A5E"},{"vulnerable":false,"criteria":"cpe:2.3:a:openbb:openbb:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7701BCD0-C552-4BCC-87DA-CF48B3FBD2A6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108301983206107&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11481","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009935","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10214","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15966","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108301983206107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15966","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1966","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) FID parameter in board.php, (2) sortorder, perpage, or id parameters in member.php, (3) forums parameter in search.php, or (4) PID or FID parameters in post.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"D0E8D8D0-D96F-411D-8611-3381C576AE1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"2CE48C90-79EA-4333-97BF-8ABD0789D625"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"D2F986CB-1C64-4ED2-A3B6-6BA69D2B13CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"1713141D-40B0-4338-B697-3A077A080438"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5F50BB6B-34DD-4AA4-9361-7EF4FFB07122"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"265F9C9B-388B-49EE-9655-D9AB93B91A5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"7701BCD0-C552-4BCC-87DA-CF48B3FBD2A6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108301983206107&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11481","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1009935","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10214","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15964","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108301983206107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1009935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1967","sourceIdentifier":"cve@mitre.org","published":"2004-04-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) myhome.php, (5) post.php, or (6) moderator.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary code by including the code in an image tag or a link."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"265F9C9B-388B-49EE-9655-D9AB93B91A5E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108301983206107&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11481","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009935","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15967","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=108301983206107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1968","sourceIdentifier":"cve@mitre.org","published":"2004-04-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0_.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"5B99DD8E-97FA-4CF6-8E65-1935518469A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0_.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"04060858-27CE-4D59-B6A5-3F869A1C63E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0_.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"59D23918-41C2-45EF-8C58-DBD335B05980"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0_.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"62D52921-E876-4837-9E05-B9D68FBE2D78"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0_.5:*:*:*:*:*:*:*","matchCriteriaId":"A34FCB27-59A3-4CB1-BBE5-7DCD345046F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbb:openbb:1.0_.6:*:*:*:*:*:*:*","matchCriteriaId":"CEE4D281-4076-4297-87FD-CA7F745BDDAC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108301983206107&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11481","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009935","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10217","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15970","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108301983206107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10217","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1969","sourceIdentifier":"cve@mitre.org","published":"2004-04-25T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbitrary script by uploading files that include scripting code such as Javascript."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"D0E8D8D0-D96F-411D-8611-3381C576AE1A"},{"vulnerable":false,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"2CE48C90-79EA-4333-97BF-8ABD0789D625"},{"vulnerable":false,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"D2F986CB-1C64-4ED2-A3B6-6BA69D2B13CC"},{"vulnerable":false,"criteria":"cpe:2.3:a:openbb:openbb:1.0.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"1713141D-40B0-4338-B697-3A077A080438"},{"vulnerable":false,"criteria":"cpe:2.3:a:openbb:openbb:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5F50BB6B-34DD-4AA4-9361-7EF4FFB07122"},{"vulnerable":false,"criteria":"cpe:2.3:a:openbb:openbb:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"265F9C9B-388B-49EE-9655-D9AB93B91A5E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108301983206107&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11481","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009935","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10218","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15971","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108301983206107&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1970","sourceIdentifier":"cve@mitre.org","published":"2004-04-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Samsung SmartEther SS6215S switch, and possibly other Samsung switches, allows remote attackers and local users to gain administrative access by providing the admin username followed by a password that is the maximum allowed length, then pressing the enter key after the resulting error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:smartether_ss6215s_switch:*:*:*:*:*:*:*:*","matchCriteriaId":"A5A9FB8A-AB9B-46F6-B915-210CB9DA4744"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108300407424571&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10219","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15973","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108300407424571&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15973","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1971","sourceIdentifier":"cve@mitre.org","published":"2004-04-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HTTP request with an invalid (1) catid or (2) clipid parameter, which reveals the full path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:oscar_fafian:video_gallery:0.1_beta_5:*:*:*:*:*:*:*","matchCriteriaId":"ECB5913A-C4F7-4EAD-ACB4-A888E98466E9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108308660628557&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15978","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108308660628557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1972","sourceIdentifier":"cve@mitre.org","published":"2004-04-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to execute arbitrary SQL code via the (1) clipid or (2) catid parameters in a viewclip, viewcat, or voteclip action."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108308660628557&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10215","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15979","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108308660628557&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1973","sourceIdentifier":"cve@mitre.org","published":"2004-04-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that contains a large number of / (slash) characters, which consumes resources when DiGi converts the slashes to \\ (backslash) characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digi:www_server:compieuw:*:*:*:*:*:*:*","matchCriteriaId":"98E296E9-450C-4255-8F21-C8C61C5FDC34"},{"vulnerable":true,"criteria":"cpe:2.3:a:digi:www_server:compieuw:beta1:*:*:*:*:*:*","matchCriteriaId":"B685D15A-C37A-4B77-96BB-6D920E8285C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:digi:www_server:compieuw:beta2:*:*:*:*:*:*","matchCriteriaId":"7A4C3F9D-CF01-4B4F-9026-54AF6CC84342"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108311170018203&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11490","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Apr/1009957.html","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=234261","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.autistici.org/fdonato/advisory/DiGiWwwServerC1-adv.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5702","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10228","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15987","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108311170018203&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Apr/1009957.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=234261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.autistici.org/fdonato/advisory/DiGiWwwServerC1-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15987","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1974","sourceIdentifier":"cve@mitre.org","published":"2004-04-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.php, (3) search.php, (4) main.php, (5) viewall.php, (6) download.php, (7) email.php, (8) file.php, (9) rate.php, or (10) stats.php, which reveals the path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*","matchCriteriaId":"E6EB588E-FC2B-4E10-86F5-33C2758BEED5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108311096022485&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15990","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108311096022485&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15990","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1975","sourceIdentifier":"cve@mitre.org","published":"2004-04-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a vulnerability that is closely related to CVE-2004-1551."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_arena:pafiledb:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DFC5717A-E248-406F-A281-C5B2F5368127"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_arena:pafiledb:3.0_beta_3.1:*:*:*:*:*:*:*","matchCriteriaId":"2E807335-6C70-4A19-A692-A7DE325FC213"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*","matchCriteriaId":"E6EB588E-FC2B-4E10-86F5-33C2758BEED5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108311096022485&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109613031414184&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10229","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15992","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108311096022485&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109613031414184&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15992","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1976","sourceIdentifier":"cve@mitre.org","published":"2004-04-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which allows remote attackers to gain access by connecting to port 1900."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:smc_networks:smc7004vbr:1.032:*:*:*:*:*:*:*","matchCriteriaId":"45A43BCC-5E9C-447A-B3A4-39A96FB8DFF7"},{"vulnerable":true,"criteria":"cpe:2.3:h:smc_networks:smc7004vbr:1.231:*:*:*:*:*:*:*","matchCriteriaId":"6CEF2BA0-1BFB-4699-ADBF-AD20C8979B6C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0101.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020580.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108317929931816&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10232","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15993","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0101.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020580.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108317929931816&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10232","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15993","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1977","sourceIdentifier":"cve@mitre.org","published":"2004-04-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"3com NBX IP VOIP NetSet Configuration Manager allows remote attackers to cause a denial of service (crash) via a Nessus scan in safeChecks mode."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:3com:webbngss3nbxnts:4.0.17:*:*:*:*:*:*:*","matchCriteriaId":"869E4F84-2512-4F67-9BA8-A310F3697626"},{"vulnerable":true,"criteria":"cpe:2.3:h:3com:webbngss3nbxnts:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"7A13CC33-EE27-4FC7-A7DB-22B6F24A5AEA"},{"vulnerable":true,"criteria":"cpe:2.3:h:3com:webbngss3nbxnts:4.1.21:*:*:*:*:*:*:*","matchCriteriaId":"F11FD8A6-15FB-4BF4-8363-518F9B9AAE39"},{"vulnerable":true,"criteria":"cpe:2.3:h:3com:webbngss3nbxnts:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"E55D5928-E330-4FA6-A5DF-1408B653CF84"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0092.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108334887408554&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11504","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.secnap.net/security/20040420.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10240","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16015","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0092.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108334887408554&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.secnap.net/security/20040420.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1978","sourceIdentifier":"cve@mitre.org","published":"2004-04-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HTML and web script via the text parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"044E2E34-470C-45C9-8136-22493077D842"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5FB2555-7146-4A75-9D24-250BBC09244A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"949F0BC0-A79E-4B1D-894D-650CF68109F9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108335043825605&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11535","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010008","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5747","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10251","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16023","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108335043825605&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16023","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1979","sourceIdentifier":"cve@mitre.org","published":"2004-04-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in do_search.php in PROPS 0.6.1 allows remote attackers to inject arbitrary HTML or web script via the search_string parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:props:props:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C1FABAFD-B5EE-4E9B-9FF4-4AF4E3D793CD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108342671616155&w=2","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=29581&release_id=234433","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10258","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16035","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108342671616155&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=29581&release_id=234433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10258","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1980","sourceIdentifier":"cve@mitre.org","published":"2004-04-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in glossary.php in PROPS 0.6.1 allows remote attackers to view arbitrary files via a .. (dot dot) in (1) module or (2) format variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:props:props:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"C1FABAFD-B5EE-4E9B-9FF4-4AF4E3D793CD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108342671616155&w=2","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=29581&release_id=234433","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16036","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108342671616155&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?group_id=29581&release_id=234433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16036","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1981","sourceIdentifier":"cve@mitre.org","published":"2004-05-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_enterprise:9:*:*:*:*:*:*:*","matchCriteriaId":"53235D62-18AA-4482-B9AE-9E1AE87BDB3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_enterprise:10:*:*:*:*:*:*:*","matchCriteriaId":"38F02473-3701-413D-B2F2-B400958F22F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_reports:9:*:*:*:*:*:*:*","matchCriteriaId":"716121F8-EE8D-4A4C-BAB6-943BE3ADDC1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_reports:10:*:*:*:*:*:*:*","matchCriteriaId":"F4D5162B-391B-4B36-A688-8D903218B3B0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108360413811017&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108671836127360&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16046","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108360413811017&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108671836127360&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1982","sourceIdentifier":"cve@mitre.org","published":"2004-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return characters in the subject field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1:*:*:*:*:*:*:*","matchCriteriaId":"CE218CB1-11EE-4DE2-A556-8F3F9F624D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.2:*:*:*:*:*:*:*","matchCriteriaId":"517253F6-2875-4D01-9F6D-903AFBD7B06D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108360430703935&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12609","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10263","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16050","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108360430703935&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16050","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1983","sourceIdentifier":"cve@mitre.org","published":"2004-05-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The arch_get_unmapped_area function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Randomization (ASLR) is enabled, allows local users to cause a denial of service (infinite loop) via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the_pax_team:pax_linux:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"83CE3B1E-D4CB-4829-B6B8-080BA6116FA5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*","matchCriteriaId":"65ED9D8C-604D-4B0B-A192-C0DA4D2E9AEB"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108360001130312&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108420555920369&w=2","source":"cve@mitre.org"},{"url":"http://pax.grsecurity.net/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10264","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16037","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108360001130312&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108420555920369&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://pax.grsecurity.net/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-200407-02.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10264","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16037","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1984","sourceIdentifier":"cve@mitre.org","published":"2004-05-02T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2) addpic.php, (3) config.php, (4) db_input.php, (5) displayecard.php, (6) ecard.php, (7) crop.inc.php, which reveal the full path in a PHP error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"D3479C85-5B30-43FE-9492-5438D27B8DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_.0:*:*:*:*:*:*:*","matchCriteriaId":"E830E59A-57BE-4DE7-9AB4-E8E24359CA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"8FCDC744-DAF3-449C-B3AE-BA420A636CBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CDBEDCE-787D-4523-A209-0CCFD6E41064"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A6BBC5F9-1E40-47FF-9371-FD0C7A9458D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.2_b:*:*:*:*:*:*:*","matchCriteriaId":"C7292845-96FB-48BF-935F-9BD7772AFD16"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108360247732014&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11524","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010001","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5756","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6495","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6496","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6497","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6498","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6499","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6500","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=26","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16039","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108360247732014&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6496","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6497","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6499","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6500","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=26","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16039","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1985","sourceIdentifier":"cve@mitre.org","published":"2004-04-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to inject arbitrary HTML or web script via the CPG_URL parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"D3479C85-5B30-43FE-9492-5438D27B8DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_.0:*:*:*:*:*:*:*","matchCriteriaId":"E830E59A-57BE-4DE7-9AB4-E8E24359CA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"8FCDC744-DAF3-449C-B3AE-BA420A636CBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CDBEDCE-787D-4523-A209-0CCFD6E41064"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A6BBC5F9-1E40-47FF-9371-FD0C7A9458D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.2_b:*:*:*:*:*:*:*","matchCriteriaId":"C7292845-96FB-48BF-935F-9BD7772AFD16"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108360247732014&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11524","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5757","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10253","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=26","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16040","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108360247732014&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5757","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=26","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16040","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1986","sourceIdentifier":"cve@mitre.org","published":"2004-04-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the startdir parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"D3479C85-5B30-43FE-9492-5438D27B8DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_.0:*:*:*:*:*:*:*","matchCriteriaId":"E830E59A-57BE-4DE7-9AB4-E8E24359CA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"8FCDC744-DAF3-449C-B3AE-BA420A636CBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CDBEDCE-787D-4523-A209-0CCFD6E41064"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A6BBC5F9-1E40-47FF-9371-FD0C7A9458D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.2_b:*:*:*:*:*:*:*","matchCriteriaId":"C7292845-96FB-48BF-935F-9BD7772AFD16"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108360247732014&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11524","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010001","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5758","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10253","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=26","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16042","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108360247732014&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=26","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1987","sourceIdentifier":"cve@mitre.org","published":"2004-04-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the (1) $CONFIG['impath'] or (2) $CONFIG['jpeg_qual'] parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"D3479C85-5B30-43FE-9492-5438D27B8DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_.0:*:*:*:*:*:*:*","matchCriteriaId":"E830E59A-57BE-4DE7-9AB4-E8E24359CA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"8FCDC744-DAF3-449C-B3AE-BA420A636CBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CDBEDCE-787D-4523-A209-0CCFD6E41064"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A6BBC5F9-1E40-47FF-9371-FD0C7A9458D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.2_b:*:*:*:*:*:*:*","matchCriteriaId":"C7292845-96FB-48BF-935F-9BD7772AFD16"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108360247732014&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11524","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010001","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10253","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=26","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16043","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108360247732014&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=26","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16043","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1988","sourceIdentifier":"cve@mitre.org","published":"2004-04-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR to reference a URL on a remote web server that contains functions.inc.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"D3479C85-5B30-43FE-9492-5438D27B8DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_.0:*:*:*:*:*:*:*","matchCriteriaId":"E830E59A-57BE-4DE7-9AB4-E8E24359CA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"8FCDC744-DAF3-449C-B3AE-BA420A636CBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CDBEDCE-787D-4523-A209-0CCFD6E41064"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A6BBC5F9-1E40-47FF-9371-FD0C7A9458D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.2_b:*:*:*:*:*:*:*","matchCriteriaId":"C7292845-96FB-48BF-935F-9BD7772AFD16"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108360247732014&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11524","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010001","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5761","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10253","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=26","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16041","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108360247732014&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=26","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16041","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1989","sourceIdentifier":"cve@mitre.org","published":"2004-04-30T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter to reference a URL on a remote web server that contains user_list_info_box.inc."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"D3479C85-5B30-43FE-9492-5438D27B8DC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_.0:*:*:*:*:*:*:*","matchCriteriaId":"E830E59A-57BE-4DE7-9AB4-E8E24359CA2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.1_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"8FCDC744-DAF3-449C-B3AE-BA420A636CBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2:*:*:*:*:*:*:*","matchCriteriaId":"7CDBEDCE-787D-4523-A209-0CCFD6E41064"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A6BBC5F9-1E40-47FF-9371-FD0C7A9458D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:coppermine:coppermine_photo_gallery:1.2.2_b:*:*:*:*:*:*:*","matchCriteriaId":"C7292845-96FB-48BF-935F-9BD7772AFD16"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108360247732014&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11524","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010001","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5912","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10253","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=26","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16041","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108360247732014&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010001","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10253","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=26","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16041","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1990","sourceIdentifier":"cve@mitre.org","published":"2004-03-03T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aldo_vargas:aldos_web_server:1.5:*:*:*:*:*:*:*","matchCriteriaId":"564A1C03-AA36-4E67-B737-F53EAD882EC7"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108360629031227&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11542","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5880","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10262","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16047","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108360629031227&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16047","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1991","sourceIdentifier":"cve@mitre.org","published":"2004-05-03T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Aldo's Web Server (aweb) 1.5 allows remote attackers to view arbitrary files via a .. (dot dot) in an HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aldostools:aldo\\'s_web_server:1.5:*:*:*:*:*:*:*","matchCriteriaId":"7C7D0017-827D-4268-B8DE-955A30EDD02D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108360629031227&w=2","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11542","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5881","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10262","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16048","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=108360629031227&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Issue Tracking","Third Party Advisory"]},{"url":"http://secunia.com/advisories/11542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1992","sourceIdentifier":"cve@mitre.org","published":"2004-04-20T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service (crash) via a long -l parameter, which triggers an out-of-bounds read."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.0.4","matchCriteriaId":"164F0A28-7C84-4444-9C68-DA1D1B4DFA9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0CB703F7-4806-4E3F-850E-ACC127892899"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"D6E3F784-86CB-46FC-97FB-1F43F140C9ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"022E0AF9-48FA-41C4-A109-4A3284A721BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"397E88A4-9E82-4818-B176-1C049993F1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D7DD649F-E290-4E8E-B61F-3950A2157938"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:4.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"51BE6EDE-C7BC-4730-9602-160A027D8F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:4.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7DE0A612-CF94-4DBE-808C-AE4CA9DD2C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:4.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F20066E0-BAE8-462F-86B5-A39DDB5D11C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:5.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"78B460EA-F742-4524-B213-BF92ABF82ABC"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108360377119290&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=ntbugtraq&m=108359620108234&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11430","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009869","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5546","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5ZP0G2KCKA.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10181","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15913","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108360377119290&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=ntbugtraq&m=108359620108234&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009869","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5ZP0G2KCKA.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10181","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1993","sourceIdentifier":"cve@mitre.org","published":"2004-05-04T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers to execute arbitrary commands via shell metacharacters such as \"`\" (backticks) in the password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:omail:omail_webmail:0.97.3:*:*:*:*:*:*:*","matchCriteriaId":"6D031B5C-282A-42B9-9345-72B785138A39"},{"vulnerable":true,"criteria":"cpe:2.3:a:omail:omail_webmail:0.98.3:*:*:*:*:*:*:*","matchCriteriaId":"7250A3B6-88AF-4816-8812-33D1575E3FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:omail:omail_webmail:0.98.5:*:*:*:*:*:*:*","matchCriteriaId":"F69CDA07-ABBF-401E-90A0-1183B6194CAA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108377215015515&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/9585","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10274","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12948","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108377215015515&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/9585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/12948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1994","sourceIdentifier":"cve@mitre.org","published":"2004-05-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FuseTalk 4.0 allows remote attackers to ban other users via a direct request to banning.cfm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e-zone_media_inc.:fusetalk:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1DC24546-0EB6-433B-8CC6-4A2E66D66F53"},{"vulnerable":true,"criteria":"cpe:2.3:a:e-zone_media_inc.:fusetalk:3.0:*:*:*:*:*:*:*","matchCriteriaId":"5D6E5F61-E9B3-4AB3-8A54-9B2666CA3C88"},{"vulnerable":true,"criteria":"cpe:2.3:a:e-zone_media_inc.:fusetalk:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F907A7C8-40F9-40C9-A01D-1B0127A64A44"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108377423825478&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11555","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5894","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10278","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16081","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108377423825478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1995","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-Site Request Forgery (CSRF) vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts via a link to adduser.cfm."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-352"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fusetalk:fusetalk:2.0:-:*:*:*:*:*:*","matchCriteriaId":"57C45CEA-17E7-479D-B9D9-596FB8E9B932"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108377423825478&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11555","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010080","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/5895","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10276","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16080","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=108377423825478&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/11555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/5895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10276","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-1996","sourceIdentifier":"cve@mitre.org","published":"2004-05-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.0 allows remote attackers to inject arbitrary web script via the size tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:smf:1.0_beta4.1:*:*:*:*:*:*:*","matchCriteriaId":"056B8354-C55F-4DCA-9D59-638623055D5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:smf:1.0_beta4p:*:*:*:*:*:*:*","matchCriteriaId":"8300200A-05AD-4399-BA77-D318587E26C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:simple_machines:smf:1.0_beta5p:*:*:*:*:*:*:*","matchCriteriaId":"AA2704A4-A615-416C-9B6F-13165EDEBC37"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108377364615934&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10281","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16067","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108377364615934&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10281","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16067","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1997","sourceIdentifier":"cve@mitre.org","published":"2004-05-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kolab:kolab_groupware_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3FAE5C72-0A0C-4BB3-90A7-EFF26842AB91"},{"vulnerable":true,"criteria":"cpe:2.3:a:kolab:kolab_groupware_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2FB8D94E-3E31-4D8F-9DEA-DB4C36EDAADC"},{"vulnerable":true,"criteria":"cpe:2.3:a:kolab:kolab_groupware_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"7AC4A00E-A8D1-48B0-A399-001920740142"},{"vulnerable":true,"criteria":"cpe:2.3:a:kolab:kolab_groupware_server:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"6C3AA706-A00D-4784-A7AB-533908368FF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:kolab:kolab_groupware_server:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"5D24C715-AAEA-49BF-BA74-E1E02153A754"},{"vulnerable":true,"criteria":"cpe:2.3:a:kolab:kolab_groupware_server:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B918B17E-C17F-4ACE-A3A9-D6090F276245"},{"vulnerable":true,"criteria":"cpe:2.3:a:kolab:kolab_groupware_server:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"92B6A22E-2B00-4B7C-99E9-CBB5FDB5FDC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:2.0:*:*:*:*:*:*:*","matchCriteriaId":"48A4B336-2D5B-4D9B-AA87-E5266FED05BD"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108377525924422&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11560","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.erfrakon.de/projects/kolab/download/kolab-server-1.0/src/Changelog","source":"cve@mitre.org"},{"url":"http://www.kolab.org/pipermail/kolab-users/2004-April/000215.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:052","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5898","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10277","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16068","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108377525924422&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11560","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.erfrakon.de/projects/kolab/download/kolab-server-1.0/src/Changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kolab.org/pipermail/kolab-users/2004-April/000215.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:052","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-1998","sourceIdentifier":"cve@mitre.org","published":"2004-05-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to gain sensitive information via an invalid show parameter to modules.php, which reveals the full path in a PHP error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.8:*:*:*:*:*:*:*","matchCriteriaId":"0DA65A3E-1789-4D45-839C-B459ED4FA2AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108378804809891&w=2","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=27","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108378804809891&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=27","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-1999","sourceIdentifier":"cve@mitre.org","published":"2004-05-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to inject arbitrary HTML and web script via the (1) ttitle or (2) sid parameters to modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.8:*:*:*:*:*:*:*","matchCriteriaId":"0DA65A3E-1789-4D45-839C-B459ED4FA2AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108378804809891&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11553","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=27","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16073","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108378804809891&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=27","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2000","sourceIdentifier":"cve@mitre.org","published":"2004-05-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL via the (1) orderby or (2) sid parameters to modules.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108378804809891&w=2","source":"cve@mitre.org"},{"url":"http://osvdb.org/52223","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11553","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/488452/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10282","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27932","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=27","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16074","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108378804809891&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/52223","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/488452/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10282","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/27932","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=27","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2001","sourceIdentifier":"cve@mitre.org","published":"2004-05-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ifconfig \"-arp\" in SGI IRIX 6.5 through 6.5.22m does not properly disable ARP requests from being sent or received."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17f:*:*:*:*:*:*:*","matchCriteriaId":"EED22734-8AAC-4897-BB71-438E19B8A005"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*","matchCriteriaId":"FEA9C28F-18E6-4199-9740-FAB00563EBF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18f:*:*:*:*:*:*:*","matchCriteriaId":"C6E63313-9533-478D-ACC0-C050FBA3EACF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18m:*:*:*:*:*:*:*","matchCriteriaId":"EA0A7D5D-BDD9-45F8-9BE7-3B01D70C8CC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19f:*:*:*:*:*:*:*","matchCriteriaId":"61370032-AB21-4E93-B143-A92A342AFB1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19m:*:*:*:*:*:*:*","matchCriteriaId":"C833FC19-D913-4C62-B14A-E1B3845D0275"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20f:*:*:*:*:*:*:*","matchCriteriaId":"B90188D6-6C57-45C2-B266-50D65B4D33E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20m:*:*:*:*:*:*:*","matchCriteriaId":"39DD839E-159B-43FD-A1E6-A22EE658BEE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21f:*:*:*:*:*:*:*","matchCriteriaId":"CE9CF799-3B52-4694-A706-37FA08EC9ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21m:*:*:*:*:*:*:*","matchCriteriaId":"4E5A5AD7-F8AD-448F-8125-ACB0E7BA0A4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.22m:*:*:*:*:*:*:*","matchCriteriaId":"797C8D1C-70F7-4AE8-BD9B-3465973D9427"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040502-01-P.asc","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10289","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040502-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10289","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-2002","sourceIdentifier":"cve@mitre.org","published":"2004-05-05T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in SGI IRIX 6.5 through 6.5.22m allows remote attackers to cause a denial of service via a certain UDP packet."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5:*:*:*:*:*:*:*","matchCriteriaId":"C30D6962-3DBB-4DF8-A04F-8E47AFEDCF99"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"36B60E50-4F5A-4404-BEA3-C94F7D27B156"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"6ECB750B-9F53-4DB6-8B26-71BCCA446FF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2f:*:*:*:*:*:*:*","matchCriteriaId":"BB113626-38E2-4C42-A6A9-4BBDA0AC4A96"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.2m:*:*:*:*:*:*:*","matchCriteriaId":"772E3C7E-9947-414F-8642-18653BB048E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"E6B2E6D1-8C2D-4E15-A6BB-E4FE878ED1E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3f:*:*:*:*:*:*:*","matchCriteriaId":"8D51EC29-8836-4F87-ABF8-FF7530DECBB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.3m:*:*:*:*:*:*:*","matchCriteriaId":"518B7253-7B0F-4A0A-ADA7-F3E3B5AAF877"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4:*:*:*:*:*:*:*","matchCriteriaId":"440B7208-34DB-4898-8461-4E703F7EDFB7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4f:*:*:*:*:*:*:*","matchCriteriaId":"3CEC8518-4DBA-43AA-90B8-279F2DD4A2DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.4m:*:*:*:*:*:*:*","matchCriteriaId":"3F8286F3-DF0E-4D8E-A27D-0C5182D5870C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5663579C-3AD2-4E5B-A595-C8DB984F9C26"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5f:*:*:*:*:*:*:*","matchCriteriaId":"B306EE13-57CF-43A6-AA72-C641C53A2A23"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.5m:*:*:*:*:*:*:*","matchCriteriaId":"6291BEE1-73D2-4976-B065-E135880F73B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6:*:*:*:*:*:*:*","matchCriteriaId":"D07AA144-6FD7-4C80-B4F2-D21C1AFC864A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6f:*:*:*:*:*:*:*","matchCriteriaId":"621C31D9-8102-4F2D-8008-B32020F0B831"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.6m:*:*:*:*:*:*:*","matchCriteriaId":"3FF5E9B8-62F9-4A6F-9C0C-551980981366"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7:*:*:*:*:*:*:*","matchCriteriaId":"29113D8E-9618-4A0E-9157-678332082858"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7f:*:*:*:*:*:*:*","matchCriteriaId":"F883CF73-CDA0-4B50-98E6-1B5DE0A4A816"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.7m:*:*:*:*:*:*:*","matchCriteriaId":"C6C9F200-68AC-4B45-8AFC-F604429FDF3F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8:*:*:*:*:*:*:*","matchCriteriaId":"313613E9-4837-433C-90EE-84A92E8D24E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8f:*:*:*:*:*:*:*","matchCriteriaId":"1742BF2B-63C7-441D-9A01-DE65C95911D4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.8m:*:*:*:*:*:*:*","matchCriteriaId":"D30B7C42-CEE8-4377-957C-BCCE35C071A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9:*:*:*:*:*:*:*","matchCriteriaId":"41AA1290-5039-406F-B195-3A4C018202D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9f:*:*:*:*:*:*:*","matchCriteriaId":"B859D7F7-B0A6-4148-8146-F651ED3F99AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.9m:*:*:*:*:*:*:*","matchCriteriaId":"59EC5B1A-309A-4DE2-A197-F4DC07A8DC3D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10:*:*:*:*:*:*:*","matchCriteriaId":"60CC9410-F6B8-4748-B76F-30626279028E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10f:*:*:*:*:*:*:*","matchCriteriaId":"0E7D3C74-CDD2-4DFF-A331-007E1669752A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.10m:*:*:*:*:*:*:*","matchCriteriaId":"03FA10EA-F6E5-4A89-AC37-40FF6A147528"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11:*:*:*:*:*:*:*","matchCriteriaId":"DCC67401-C85A-4E4E-AE61-85FEBBF4346B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11f:*:*:*:*:*:*:*","matchCriteriaId":"7C8E0DF6-D9C2-4DBC-9997-B5BFC6DEC9F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.11m:*:*:*:*:*:*:*","matchCriteriaId":"D1E1480B-2183-45AD-B63F-16DEC9BF0398"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1C4427AC-07C1-4765-981B-B5D86D698C2D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12f:*:*:*:*:*:*:*","matchCriteriaId":"2D08345C-F945-410C-9DCB-8C358178F975"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.12m:*:*:*:*:*:*:*","matchCriteriaId":"8764BE36-9377-486C-9198-DF79A5A60679"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13:*:*:*:*:*:*:*","matchCriteriaId":"63EF0CEE-74A9-45C8-8AFD-77815230ACC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13f:*:*:*:*:*:*:*","matchCriteriaId":"25243FA1-7AF7-41D4-8FAD-A5AB289E120D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.13m:*:*:*:*:*:*:*","matchCriteriaId":"94D89730-AA61-4FC9-A6AB-0574CA51EE75"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14:*:*:*:*:*:*:*","matchCriteriaId":"5B24D34C-1F95-45C8-9A57-2D2622ED9019"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14f:*:*:*:*:*:*:*","matchCriteriaId":"A7B59E7C-B059-41CD-AE33-E9623ADA12BC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.14m:*:*:*:*:*:*:*","matchCriteriaId":"0DF1B657-C910-4BB0-828C-09B6A59D988D"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15:*:*:*:*:*:*:*","matchCriteriaId":"6BD69805-D021-4DCC-9FB6-A0BEA721408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15f:*:*:*:*:*:*:*","matchCriteriaId":"72D61A9F-AC57-4DD9-9047-74BFA9BFACFC"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.15m:*:*:*:*:*:*:*","matchCriteriaId":"C254FC5D-895D-4EFC-B9A7-74699D9FE65E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16:*:*:*:*:*:*:*","matchCriteriaId":"B13C07CC-F615-4F30-B532-4BF6F02F84DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16f:*:*:*:*:*:*:*","matchCriteriaId":"27532639-37CD-4BD2-AE48-F741009D3449"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.16m:*:*:*:*:*:*:*","matchCriteriaId":"F83879DE-1BD7-4FF7-ACC6-5B119DB09BF9"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17:*:*:*:*:*:*:*","matchCriteriaId":"8BE3F77A-909E-4947-A808-BCAB7F96A108"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17f:*:*:*:*:*:*:*","matchCriteriaId":"EED22734-8AAC-4897-BB71-438E19B8A005"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.17m:*:*:*:*:*:*:*","matchCriteriaId":"FEA9C28F-18E6-4199-9740-FAB00563EBF7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18:*:*:*:*:*:*:*","matchCriteriaId":"A4F1E3C7-0FDD-46E1-8748-6A5FF669C95C"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18f:*:*:*:*:*:*:*","matchCriteriaId":"C6E63313-9533-478D-ACC0-C050FBA3EACF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.18m:*:*:*:*:*:*:*","matchCriteriaId":"EA0A7D5D-BDD9-45F8-9BE7-3B01D70C8CC1"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19:*:*:*:*:*:*:*","matchCriteriaId":"2334FD6C-444F-4042-AF6D-D654C18C9950"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19f:*:*:*:*:*:*:*","matchCriteriaId":"61370032-AB21-4E93-B143-A92A342AFB1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.19m:*:*:*:*:*:*:*","matchCriteriaId":"C833FC19-D913-4C62-B14A-E1B3845D0275"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20:*:*:*:*:*:*:*","matchCriteriaId":"1EFCB9A7-9121-4FAE-B6FA-96C3A023ACEF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20f:*:*:*:*:*:*:*","matchCriteriaId":"B90188D6-6C57-45C2-B266-50D65B4D33E4"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.20m:*:*:*:*:*:*:*","matchCriteriaId":"39DD839E-159B-43FD-A1E6-A22EE658BEE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21:*:*:*:*:*:*:*","matchCriteriaId":"E2C1514F-A4DD-462C-9955-2AD8CF5B7F14"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21f:*:*:*:*:*:*:*","matchCriteriaId":"CE9CF799-3B52-4694-A706-37FA08EC9ABF"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.21m:*:*:*:*:*:*:*","matchCriteriaId":"4E5A5AD7-F8AD-448F-8125-ACB0E7BA0A4B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.22:*:*:*:*:*:*:*","matchCriteriaId":"C63CC83D-BF18-42BF-A5DF-3516508B072F"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5.22m:*:*:*:*:*:*:*","matchCriteriaId":"797C8D1C-70F7-4AE8-BD9B-3465973D9427"},{"vulnerable":true,"criteria":"cpe:2.3:o:sgi:irix:6.5_20:*:*:*:*:*:*:*","matchCriteriaId":"E6C44E34-E074-4FB6-943D-547082A50126"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040502-01-P.asc","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10287","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16158","source":"cve@mitre.org"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20040502-01-P.asc","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16158","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2003","sourceIdentifier":"cve@mitre.org","published":"2004-05-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the ssl_prcert function in the SSLway filter (sslway.c) for DeleGate 8.9.2 and earlier allows remote attackers to execute arbitrary code via a certificate with a long (1) subject or (2) issuer name field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9180C95-FF6F-4A0C-9DE0-DFF6D8387698"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.7.1:*:*:*:*:*:*:*","matchCriteriaId":"68FA1404-9FA2-4379-96BC-6D7970C0EAA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.8.0:*:*:*:*:*:*:*","matchCriteriaId":"EABEE7AB-7C45-473E-9873-0423F2249F96"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.8.1:*:*:*:*:*:*:*","matchCriteriaId":"A1F66F57-6AEB-4E3C-B148-BC7D11E1EBEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.8.2:*:*:*:*:*:*:*","matchCriteriaId":"611AD3E5-708F-46BB-B21D-09598E1C4771"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:7.9.11:*:*:*:*:*:*:*","matchCriteriaId":"AD59AEEB-D524-4337-8962-B29863CBC889"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.3.3:*:*:*:*:*:*:*","matchCriteriaId":"F15245AF-B9B6-4D46-A901-A781FC0BAF24"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.3.4:*:*:*:*:*:*:*","matchCriteriaId":"C7A3E1EB-89A5-4326-8977-9B462065C39B"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.4.0:*:*:*:*:*:*:*","matchCriteriaId":"1BD607D2-2B07-474B-A855-2C3319B42CED"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"BE4B4665-84C4-4129-9916-ABAC61B81FF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.9:*:*:*:*:*:*:*","matchCriteriaId":"4131A4A5-5D67-4522-9A6E-E708815B5B86"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.9.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C30DD0-C957-44BA-B44C-7B424E664B52"},{"vulnerable":true,"criteria":"cpe:2.3:a:delegate:delegate:8.9.2:*:*:*:*:*:*:*","matchCriteriaId":"EC2E24A5-A864-4F42-A053-2FDA9D09A4B5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108386181021070&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11569","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5945","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10295","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16078","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108386181021070&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5945","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16078","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2004","sourceIdentifier":"cve@mitre.org","published":"2004-05-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which allows remote attackers to gain privileges via SSH."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:personal:*:*:*:*:*","matchCriteriaId":"3EA56868-ACA1-4C65-9FFB-A68129D2428A"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/10297","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.suse.de/de/security/2004_11_live_cd_91.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16084","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10297","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.suse.de/de/security/2004_11_live_cd_91.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16084","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2005","sourceIdentifier":"cve@mitre.org","published":"2004-05-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with (1) a link to a long URL to the C drive or (2) a long attachment name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D64909E5-6E9A-4873-B23C-C825B5CDBAAE"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1AD34A80-171B-4892-A427-633BB8F2085E"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8EEF7CAC-0603-436B-B2AD-448AA17D82F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F01DA3EF-92F6-470E-AE4D-4CDD2776B445"},{"vulnerable":true,"criteria":"cpe:2.3:a:qualcomm:eudora:6.1:*:*:*:*:*:*:*","matchCriteriaId":"A72C4B66-AFEC-4035-BD72-A1133E6CCD4F"}]}]}],"references":[{"url":"http://lists.netsys.com/pipermail/full-disclosure/2004-May/021059.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108395487628044&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11568","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.eudora.com/download/eudora/windows/6.1.1/RelNotes.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10298","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16086","source":"cve@mitre.org"},{"url":"http://lists.netsys.com/pipermail/full-disclosure/2004-May/021059.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108395487628044&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11568","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.eudora.com/download/eudora/windows/6.1.1/RelNotes.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10298","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2006","sourceIdentifier":"cve@mitre.org","published":"2004-05-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trend Micro OfficeScan 3.0 - 6.0 has default permissions of \"Everyone Full Control\" on the installation directory and registry keys, which allows local users to disable virus protection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:3.0:*:corporate:*:*:*:*:*","matchCriteriaId":"4013BF7E-DE8F-4941-BF15-D17C8C88DB78"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_3.5:*:*:*:*:*:*:*","matchCriteriaId":"BE60F5D9-35D0-4D0E-85D1-EE71E533622F"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_3.11:*:*:*:*:*:*:*","matchCriteriaId":"BF74A292-2B1B-43FC-AA82-CFB04D7644E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_3.13:*:*:*:*:*:*:*","matchCriteriaId":"46575AE8-8718-44D8-AF5C-14F7981B3238"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_3.54:*:*:*:*:*:*:*","matchCriteriaId":"A79FBAAA-D6B8-4A05-B8E1-D7549207EA5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_5.02:*:*:*:*:*:*:*","matchCriteriaId":"D6CE3BB4-54BA-48DE-9CFC-C2241D99DA67"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_5.58:*:*:*:*:*:*:*","matchCriteriaId":"BEE87037-D7CC-480B-BBD2-F1802294D4F2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108395366909344&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11576","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5990","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10300","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16092","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108395366909344&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11576","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16092","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2007","sourceIdentifier":"cve@mitre.org","published":"2004-05-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to inject arbitrary HTML or web script via the (1) cat parameter in a CatView function or (2) jokeid parameter in a JokeView function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adam_webb:nukejokes:1.7:*:*:*:*:*:*:*","matchCriteriaId":"42F377D3-49FF-4A54-8797-F6DA6177A434"},{"vulnerable":true,"criteria":"cpe:2.3:a:adam_webb:nukejokes:2.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"BACEAD40-FE94-439F-AEE3-E2436743A81E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108404714232579&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10306","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=28","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16096","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108404714232579&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=28","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16096","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2008","sourceIdentifier":"cve@mitre.org","published":"2004-05-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to execute arbitrary SQL via the jokeid parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adam_webb:nukejokes:1.7:*:*:*:*:*:*:*","matchCriteriaId":"42F377D3-49FF-4A54-8797-F6DA6177A434"},{"vulnerable":true,"criteria":"cpe:2.3:a:adam_webb:nukejokes:2.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"BACEAD40-FE94-439F-AEE3-E2436743A81E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108404714232579&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11579","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10306","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=28","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16099","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108404714232579&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11579","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=28","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2009","sourceIdentifier":"cve@mitre.org","published":"2004-05-08T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NukeJokes 1.7 and 2 Beta allows remote attackers to obtain the full path of the server via (1) a direct call to mainfunctions.php, (2) an invalid jokeid parameter in a JokeView function or (3) an invalid cat parameter in a CatView function, which reveals the path in a PHP error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:adam_webb:nukejokes:1.7:*:*:*:*:*:*:*","matchCriteriaId":"42F377D3-49FF-4A54-8797-F6DA6177A434"},{"vulnerable":false,"criteria":"cpe:2.3:a:adam_webb:nukejokes:2.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"BACEAD40-FE94-439F-AEE3-E2436743A81E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108404714232579&w=2","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=28","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16094","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108404714232579&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=28","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2010","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in phpShop 0.7.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the base_dir parameter to reference a URL on a remote web server that contains phpshop.cfg."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phpshop:phpshop:0.6.1b:*:*:*:*:*:*:*","matchCriteriaId":"8BE26DFA-CF05-4EF0-A990-BA3ECF81A9F2"},{"vulnerable":false,"criteria":"cpe:2.3:a:phpshop:phpshop:0.7:*:*:*:*:*:*:*","matchCriteriaId":"FB33E0DA-9DB0-4A81-A4BD-1A407D895E2A"},{"vulnerable":false,"criteria":"cpe:2.3:a:phpshop:phpshop:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"591A04C1-E004-4853-A3F8-47B503197E93"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108420702317870&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11587","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.fribble.net/advisories/phpshop_29-04-04.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10313","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16107","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108420702317870&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.fribble.net/advisories/phpshop_29-04-04.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10313","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16107","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2011","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"msxml3.dll in Internet Explorer 6.0.2600.0 allows remote attackers to cause a denial of service (crash) via a single & (ampersand) in a <Ref href> link, which triggers a parsing error, possibly due to missing portions of the URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*","matchCriteriaId":"68656E52-AD8A-474E-9160-CD5F8857254B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108422549617947&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16112","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108422549617947&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16112","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2012","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:niels:provos_systrace:1.1:*:*:*:*:*:*:*","matchCriteriaId":"88D46C75-8F8E-4F71-AA02-E0C62CB78B96"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels:provos_systrace:1.2:*:*:*:*:*:*:*","matchCriteriaId":"BAC55D51-6C9E-4DB5-AA99-F7B57D8EA835"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels:provos_systrace:1.3:*:*:*:*:*:*:*","matchCriteriaId":"BB619025-39E9-4D41-8EE7-E99A4160BAEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels:provos_systrace:1.4:*:*:*:*:*:*:*","matchCriteriaId":"69B3A079-3F0D-46A8-AE39-81FDBE5DAAA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels:provos_systrace:1.5:*:*:*:*:*:*:*","matchCriteriaId":"682EFA1D-A5A1-49C7-9A14-0D84A0E63B13"},{"vulnerable":true,"criteria":"cpe:2.3:a:vladimir_kotal:systrace_port_for_freebsd:2004-03-09:*:*:*:*:*:*:*","matchCriteriaId":"CC310EF4-A650-4F8E-A79D-DF66CFE32D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:vladimir_kotal:systrace_port_for_freebsd:2004-06-02:*:*:*:*:*:*:*","matchCriteriaId":"F02F4CD3-0893-4447-A79C-3E4254860BBF"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:netbsd:netbsd:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A3C3F588-98DA-4F6F-A083-2B9EE534C561"}]}]}],"references":[{"url":"ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2004-007.txt.asc","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108432258920570&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11585","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10320","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16110","source":"cve@mitre.org"},{"url":"ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2004-007.txt.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108432258920570&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16110","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2013","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier allows local users to execute arbitrary code via an optlen value of -1, which causes kmalloc to allocate 0 bytes of memory."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.25","matchCriteriaId":"1B690584-D7A7-48E6-8271-B9ABB161034E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0091.html","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch"]},{"url":"http://lists.netsys.com/pipermail/full-disclosure/2004-May/021223.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108456230815842&w=2","source":"cve@mitre.org","tags":["Mailing List","Patch"]},{"url":"http://www.securityfocus.com/bid/10326","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16117","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch"]},{"url":"http://lists.netsys.com/pipermail/full-disclosure/2004-May/021223.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://marc.info/?l=bugtraq&m=108456230815842&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch"]},{"url":"http://www.securityfocus.com/bid/10326","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16117","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2014","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"50DD71F2-0B3C-4082-950A-CBFA5C601AEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.6:*:*:*:*:*:*:*","matchCriteriaId":"26B3B1B6-3985-4479-93B2-14E1AB52F768"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.7:*:*:*:*:*:*:*","matchCriteriaId":"0BC975AA-0F98-4A3A-B3B4-2152156327D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"7DEDFB88-C435-4FB9-838D-8199690A8F70"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.8:*:*:*:*:*:*:*","matchCriteriaId":"D5BF2616-A99A-4229-A8A6-655155ED5EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.8.1:*:*:*:*:*:*:*","matchCriteriaId":"3A14454E-DDAE-4115-8323-8BB4E17DF208"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.8.2:*:*:*:*:*:*:*","matchCriteriaId":"94E758F9-798B-4C25-A94A-8BF4E3E90B3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.9:*:*:*:*:*:*:*","matchCriteriaId":"F88CD81A-7804-4316-8581-41689A318D56"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:wget:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"1BE0FCE2-ABB9-4943-96AE-C81277014396"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108481268725276&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=wget&m=108482747906833&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=wget&m=108483270227139&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17399","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:204","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-771.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10361","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16167","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9830","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/145-1/","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108481268725276&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=wget&m=108482747906833&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=wget&m=108483270227139&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17399","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:204","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-771.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10361","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9830","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/145-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2015","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebCT Campus Edition allows remote attackers to inject arbitrary HTML or web script via (1) iframe, (2) img, or (3) object tags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webct:webct:campus_4.0:*:*:*:*:*:*:*","matchCriteriaId":"D24B63A5-5ECE-434A-AAC0-A60255F0D051"},{"vulnerable":true,"criteria":"cpe:2.3:a:webct:webct:campus_4.0_sp3_hotfix_40833:*:*:*:*:*:*:*","matchCriteriaId":"1EE20335-EF43-4599-A1A2-C7ABD7C815B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:webct:webct:campus_4.1:*:*:*:*:*:*:*","matchCriteriaId":"2F3CC81C-36D9-4606-B325-B7F186FE1C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:webct:webct:campus_4.1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A989FFBE-F828-4439-AC01-77037E295EDD"},{"vulnerable":true,"criteria":"cpe:2.3:a:webct:webct:campus_4.1_sp2_hotfix_40832:*:*:*:*:*:*:*","matchCriteriaId":"B3DF3966-107C-486D-B734-F08F42192A72"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0851.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108481256731404&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10357","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16156","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0851.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108481256731404&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16156","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2016","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the HTTP server in NetChat 7.3 and earlier allows remote attackers to execute arbitrary code via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netchat:subnet_chat_application:7.0:*:*:*:*:*:*:*","matchCriteriaId":"10096C6F-9502-49B2-BDD4-4657FAC04FFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netchat:subnet_chat_application:7.1:*:*:*:*:*:*:*","matchCriteriaId":"4EE548B0-3188-4C3B-AB78-3E17C5CFDF1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netchat:subnet_chat_application:7.2:*:*:*:*:*:*:*","matchCriteriaId":"59D4E2D1-F08F-4CE9-B450-4B608598DD74"},{"vulnerable":true,"criteria":"cpe:2.3:a:netchat:subnet_chat_application:7.3:*:*:*:*:*:*:*","matchCriteriaId":"E021CCBC-7DD1-4388-8097-EC0CECD8C562"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108481422130354&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11637","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10353","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16165","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108481422130354&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2017","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Turbo Traffic Trader C (TTT-C) 1.0 allow remote attackers to inject arbitrary HTML or web script, as demonstrated via (1) the link parameter to ttt-out, (2) the X-Forwarded-For header in a GET request to ttt-in, (3) the Referer header in a GET request to ttt-in, or the (4) site name or (5) site URL fields in the main control panel."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turbotraffictrader:turbotraffictrader_c:1.0:*:*:*:*:*:*:*","matchCriteriaId":"993127EF-4E93-4961-A874-1542C201A687"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108481571131866&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11623","source":"cve@mitre.org"},{"url":"http://www.icefire.org/security/ttt-bugreport.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6339","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6340","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6341","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6342","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6343","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6344","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10359","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16164","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108481571131866&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11623","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.icefire.org/security/ttt-bugreport.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6340","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6343","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6344","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2018","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in Php-Nuke 6.x through 7.3 allows remote attackers to execute arbitrary PHP code by modifying the modpath parameter to reference a URL on a remote web server that contains the code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*","matchCriteriaId":"CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0870.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108482888621896&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11625","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/6222","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10365","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=29","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16218","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0870.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108482888621896&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/6222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=29","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16218","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2019","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which displays the full path in a PHP error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*","matchCriteriaId":"CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108482957715299&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11625","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10367","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=29","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16170","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108482957715299&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=29","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16170","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2020","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 6.x through 7.3 allow remote attackers to inject arbitrary HTML or web script into the (1) optionbox parameter in the News module, (2) date parameter in the Statistics module, (3) year, month, and month_1 parameters in the Stories_Archive module, (4) mode, order, and thold parameters in the Surveys module, or (5) a SQL statement to index.php, as processed by mainfile.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*","matchCriteriaId":"CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108482957715299&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11625","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/6225","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6226","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10367","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=29","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16172","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108482957715299&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/6225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=29","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16172","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2021","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote attackers to view arbitrary files via a .. (dot dot) in the filename argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oscommerce:oscommerce:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BFB8C352-B248-4FA3-8F3B-E3557E47145F"},{"vulnerable":true,"criteria":"cpe:2.3:a:oscommerce:oscommerce:2.2_cvs:*:*:*:*:*:*:*","matchCriteriaId":"E94D34C1-A7BB-4F02-82E7-B708B33901E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:oscommerce:oscommerce:2.2_ms1:*:*:*:*:*:*:*","matchCriteriaId":"95097990-E687-4417-94DF-D6E9A7CC48AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:oscommerce:oscommerce:2.2_ms2:*:*:*:*:*:*:*","matchCriteriaId":"4C382022-5D4A-419E-9A6F-14A38094C187"},{"vulnerable":true,"criteria":"cpe:2.3:a:oscommerce:oscommerce:2.2_ms3:*:*:*:*:*:*:*","matchCriteriaId":"B69DBFBC-BC06-4090-9C9E-E0FF2953151F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2005-03/0378.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108482902101519&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11624","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010176","source":"cve@mitre.org"},{"url":"http://www.excluded.org/advisories/advisory13.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/6308","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10364","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16174","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2005-03/0378.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108482902101519&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010176","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.excluded.org/advisories/advisory13.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/6308","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16174","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2022","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows systems, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to the system command, which leads to a stack-based buffer overflow.  NOTE: it is unclear whether this bug is in Perl or the OS API that is used by Perl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"946C2AD2-EAEE-473E-9A3C-827FA3D89D2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.6.1.630:*:*:*:*:*:*:*","matchCriteriaId":"4921CDAF-E4D5-4AED-8FD9-1E506105A5D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"BA1DA7BF-DAB4-47F9-BE5B-808E8FFFC83E"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"D5B92CD6-8E90-4737-B5E3-1AA61A030809"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4DA00BED-7C68-4BEA-93CE-8A064F4A8624"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.7.2:*:*:*:*:*:*:*","matchCriteriaId":"FB52D21C-3164-40E3-80CC-3DE2F351CBC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.7.3:*:*:*:*:*:*:*","matchCriteriaId":"658D6331-3F95-4D93-A244-4AD60B109CD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.8:*:*:*:*:*:*:*","matchCriteriaId":"20B2F92E-AE6D-4C99-8835-798D52121D93"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0905.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108489894009025&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=108482796105922&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=108483058514596&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=108489112131099&w=2","source":"cve@mitre.org"},{"url":"http://www.oliverkarow.de/research/ActivePerlSystemBOF.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.perlmonks.org/index.pl?node_id=354145","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10375","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16169","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0905.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108489894009025&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=108482796105922&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=108483058514596&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=108489112131099&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oliverkarow.de/research/ActivePerlSystemBOF.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.perlmonks.org/index.pl?node_id=354145","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16169","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2023","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly other versions allows remote attackers to execute arbitrary SQL via the (1) admin_name or (2) admin_pass parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zen_cart:zen_cart:1.1.2d:*:*:*:*:*:*:*","matchCriteriaId":"260635F8-5F63-4B63-9630-5AB9F347230F"},{"vulnerable":true,"criteria":"cpe:2.3:a:zen_cart:zen_cart:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B04B1DCF-4441-4589-93EF-E35C94E8696D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108489697219781&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11649","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1010172","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6298","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0405-advisories/zencart112d.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/434237/30/4950/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10378","source":"cve@mitre.org"},{"url":"http://www.zen-cart.com/modules/ipb/index.php?showtopic=4835","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zen-cart.com/modules/mydownloads/viewcat.php?cid=31&orderby=dateD","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16176","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108489697219781&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1010172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6298","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.packetstormsecurity.org/0405-advisories/zencart112d.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/434237/30/4950/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zen-cart.com/modules/ipb/index.php?showtopic=4835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zen-cart.com/modules/mydownloads/viewcat.php?cid=31&orderby=dateD","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16176","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2024","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allows attackers to gain administrative privileges via password_forgotten.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zen_cart:zen_cart:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"B04B1DCF-4441-4589-93EF-E35C94E8696D"}]}]}],"references":[{"url":"http://www.zen-cart.com/modules/ipb/index.php?showtopic=4873","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zen-cart.com/modules/mydownloads/viewcat.php?cid=31&orderby=dateD","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.zen-cart.com/modules/ipb/index.php?showtopic=4873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zen-cart.com/modules/mydownloads/viewcat.php?cid=31&orderby=dateD","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2025","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in application_top.php for Zen Cart 1.1.3 before patch 2 may allow remote attackers to execute arbitrary SQL commands via the products_id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zen_cart:zen_cart:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"62A57318-B835-4D22-9623-7E2601ABA3F1"}]}]}],"references":[{"url":"http://www.zen-cart.com/modules/ipb/index.php?showtopic=3731","source":"cve@mitre.org"},{"url":"http://www.zen-cart.com/modules/mydownloads/viewcat.php?cid=31&orderby=dateD","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.zen-cart.com/modules/ipb/index.php?showtopic=3731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zen-cart.com/modules/mydownloads/viewcat.php?cid=31&orderby=dateD","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2026","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apsis:pound:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1FF65C8F-FF7F-4D88-A35D-E72E49431401"},{"vulnerable":true,"criteria":"cpe:2.3:a:apsis:pound:1.1:*:*:*:*:*:*:*","matchCriteriaId":"9956FC3F-46CF-4E4C-9534-55D1E549AA02"},{"vulnerable":true,"criteria":"cpe:2.3:a:apsis:pound:1.2:*:*:*:*:*:*:*","matchCriteriaId":"A851CC8E-884B-4C24-A4C6-3DF0E458EEEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:apsis:pound:1.3:*:*:*:*:*:*:*","matchCriteriaId":"211D3F7E-AAD9-46F3-BAF2-D712F16BD4B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:apsis:pound:1.4:*:*:*:*:*:*:*","matchCriteriaId":"F89E53F8-1412-4907-9C56-CCF9BD255A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:apsis:pound:1.5:*:*:*:*:*:*:*","matchCriteriaId":"1E7AEEAC-ACA9-45AF-A5DE-E6C1A2E2CC97"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0343.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11528","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-08.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1010034","source":"cve@mitre.org"},{"url":"http://www.apsis.ch/pound/pound_list/archive/2003/2003-12/1070234315000#1070234315000","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5746","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10267","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16033","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0343.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-08.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1010034","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.apsis.ch/pound/pound_list/archive/2003/2003-12/1070234315000#1070234315000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10267","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16033","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2027","sourceIdentifier":"cve@mitre.org","published":"2004-05-10T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Icecast 2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a long Basic Authorization header that triggers an out-of-bounds read."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F32DB53A-7E27-4856-A4D7-909CF121F332"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"D05505BF-6437-421A-90B3-9766E707ADDC"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"6D5E2224-2844-420F-A51E-DED27A50A93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"9C35E7B3-C898-4127-9188-65E691148EEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.7.1:*:*:*:*:*:*:*","matchCriteriaId":"FD812E67-7373-474C-8A05-1827C19BD6F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"BE04F78D-A908-4F5E-A9AE-4B9996B304B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"AD3DCBD8-26FB-4098-8EFE-8C8C025E3B6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.9.1:*:*:*:*:*:*:*","matchCriteriaId":"C30157ED-6C29-42D0-8F4B-D5498A5BFF50"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B2ABBD7E-50EB-4CFD-BA92-4C7172E82C50"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.10:*:*:*:*:*:*:*","matchCriteriaId":"85B1944C-E99D-4FF2-AE5B-2887F9BE1E80"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.10.1:*:*:*:*:*:*:*","matchCriteriaId":"17888040-F0ED-491C-98D7-3BA0F7318D20"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.11:*:*:*:*:*:*:*","matchCriteriaId":"D86170BC-3616-4B26-832B-6F6C41D02081"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"AB7336AF-1276-41F6-8BC9-68B2110A92A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:icecast:icecast:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7A85F62D-5D15-417D-9B94-4C853DB9A514"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0378.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11578","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-10.xml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6075","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10311","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.xiph.org/archives/icecast/7144.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16103","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0378.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200405-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6075","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.xiph.org/archives/icecast/7144.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16103","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2028","sourceIdentifier":"cve@mitre.org","published":"2004-05-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in stats.php in e107 allows remote attackers to inject arbitrary web script or HTML via the referer parameter to log.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_10:*:*:*:*:*:*:*","matchCriteriaId":"18C34EB0-7685-4346-81A2-371C1F19F6AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_11:*:*:*:*:*:*:*","matchCriteriaId":"AB26A2A4-B0DE-4130-AA5F-76D5394A0614"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_12:*:*:*:*:*:*:*","matchCriteriaId":"90909932-AD39-4648-8621-5866F0C4AB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_13:*:*:*:*:*:*:*","matchCriteriaId":"37F208E9-3C39-4D00-B1E0-5CD0B315E740"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_14:*:*:*:*:*:*:*","matchCriteriaId":"27C7402F-54C9-4FDA-B181-85941DDC7010"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*","matchCriteriaId":"061B1AF2-2BA7-49CB-9F8B-91BF5D5B0BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*","matchCriteriaId":"4F77F5E4-8636-41F5-9A80-055CC0FC0346"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*","matchCriteriaId":"8DDD8B3B-8580-4624-8D77-E3FD97DFF4A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*","matchCriteriaId":"6454D949-83A2-4F69-92E1-BBCD84F21BC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*","matchCriteriaId":"CC274184-AD8E-4BC2-BC6A-4E64F354BFFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*","matchCriteriaId":"F8692341-8DF2-4943-853A-4AAF1F313914"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108515632622796&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11693","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6345","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10395","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16231","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108515632622796&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10395","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16231","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2029","sourceIdentifier":"cve@mitre.org","published":"2004-05-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Util_DecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows remote attackers to cause a denial of service (crash) via a Basic Authorization HTTP request with a \"A==\" value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trevor_hogan:bnbt:7.5_beta_release2:*:*:*:*:*:*:*","matchCriteriaId":"2CE628BC-61AB-4B71-9357-E9DACB75B70B"}]}]}],"references":[{"url":"http://bnbt.go-dedicated.com/","source":"cve@mitre.org"},{"url":"http://fux0r.phathookups.com/advisory/sp-x12-advisory.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108526361421535&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11684","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010254","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6336","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10399","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16228","source":"cve@mitre.org"},{"url":"http://bnbt.go-dedicated.com/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://fux0r.phathookups.com/advisory/sp-x12-advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108526361421535&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10399","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16228","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2030","sourceIdentifier":"cve@mitre.org","published":"2004-05-22T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in index.jsp for Liferay before 2.2.0 release 10/1/2004 allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the message subject."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:*:*:*:*:*:*:*:*","versionEndIncluding":"2.1.1","matchCriteriaId":"D3311C86-DA76-466E-A843-B6F8F94B8EF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:liferay:liferay_enterprise_portal:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A8340091-8C00-42AD-8709-866044D4A3B8"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108526683823840&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110141194202856&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11692","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010259","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=252060","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6346","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10402","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16232","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108526683823840&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110141194202856&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010259","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=252060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10402","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16232","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2031","sourceIdentifier":"cve@mitre.org","published":"2004-05-21T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in user.php in e107 allows remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) MSN, or (3) AIM fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*","matchCriteriaId":"8DDD8B3B-8580-4624-8D77-E3FD97DFF4A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*","matchCriteriaId":"6454D949-83A2-4F69-92E1-BBCD84F21BC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*","matchCriteriaId":"CC274184-AD8E-4BC2-BC6A-4E64F354BFFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*","matchCriteriaId":"F8692341-8DF2-4943-853A-4AAF1F313914"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.610:*:*:*:*:*:*:*","matchCriteriaId":"04C91C45-9A96-4E69-8A0A-D619AB45BC08"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.611:*:*:*:*:*:*:*","matchCriteriaId":"5F7C68F4-9ECD-41A9-B4AE-48F028841428"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.612:*:*:*:*:*:*:*","matchCriteriaId":"28B75E28-08DE-4CA2-A60B-FB2F61AEC5BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.613:*:*:*:*:*:*:*","matchCriteriaId":"B9AA824A-CEE6-460B-A668-92FC3A822305"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.614:*:*:*:*:*:*:*","matchCriteriaId":"6A51FBB3-42CE-40E1-A15D-ADDFBF8E203D"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.615:*:*:*:*:*:*:*","matchCriteriaId":"BEAC1FD5-ECD1-480C-827E-F1AE8484C4EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.615a:*:*:*:*:*:*:*","matchCriteriaId":"D17F613A-6BE1-4B45-8E40-8E44E0EEA756"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108541119526279&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11696","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6410","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10405","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16241","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108541119526279&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11696","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16241","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2032","sourceIdentifier":"cve@mitre.org","published":"2004-05-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netgear RP114 allows remote attackers to bypass the keyword based URL filtering by requesting a long URL, as demonstrated using a large number of %20 (hex-encoded space) sequences."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:rp114:3.26:*:*:*:*:*:*:*","matchCriteriaId":"2AA7BDD8-A286-478C-B8CE-D1FAE323FA4F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108541203427391&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11698","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/6411","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10404","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16238","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108541203427391&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/6411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16238","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2033","sourceIdentifier":"cve@mitre.org","published":"2004-05-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Orenosv 0.5.9f allows remote attackers to cause a denial of service (crash) via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:orenosv:orenosv_http_ftp_server:0.5.9c:*:*:*:*:*:*:*","matchCriteriaId":"5F66DA2C-D3B4-4D92-B268-F7A389D2B565"},{"vulnerable":true,"criteria":"cpe:2.3:a:orenosv:orenosv_http_ftp_server:0.5.9e:*:*:*:*:*:*:*","matchCriteriaId":"EC02B1D3-BBC4-480E-B82A-969DB548E4DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:orenosv:orenosv_http_ftp_server:0.5.9f:*:*:*:*:*:*:*","matchCriteriaId":"BF7EAD5D-5E4B-4CFD-ADDF-1A682895A5DD"}]}]}],"references":[{"url":"http://hp.vector.co.jp/authors/VA027031/orenosv/index_en.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108559623703422&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11706","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6419","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10420","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16250","source":"cve@mitre.org"},{"url":"http://hp.vector.co.jp/authors/VA027031/orenosv/index_en.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108559623703422&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16250","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2034","sourceIdentifier":"cve@mitre.org","published":"2004-01-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the (1) WTHoster and (2) WebDriver modules in WildTangent Web Driver 4.0 allows remote attackers to execute arbitrary code via a long filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wildtangent:webdriver:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F3F879F3-4143-4F64-9FA7-842AC8084284"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108569235217149&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11727","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.ngssoftware.com/advisories/wildtangent.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6445","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10421","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16266","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108569235217149&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11727","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.ngssoftware.com/advisories/wildtangent.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16266","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2035","sourceIdentifier":"cve@mitre.org","published":"2004-05-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MiniShare 1.3.2 allows remote attackers to cause a denial of service (crash) via a malformed HTTP GET or HEAD request without the proper number of trailing CRLF sequences."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minishare:minimal_http_server:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"55B19736-751F-401F-80BC-283BC5AD0A78"}]}]}],"references":[{"url":"http://lists.netsys.com/pipermail/full-disclosure/2004-May/021980.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108563992129877&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11715","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=241158","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.autistici.org/fdonato/advisory/MiniShare1.3.2-adv.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/6432","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10417","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16260","source":"cve@mitre.org"},{"url":"http://lists.netsys.com/pipermail/full-disclosure/2004-May/021980.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108563992129877&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11715","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=241158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.autistici.org/fdonato/advisory/MiniShare1.3.2-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/6432","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16260","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2036","sourceIdentifier":"cve@mitre.org","published":"2004-05-28T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the art_print function in print.inc.php in unknown versions of jPortal before 2.3.1 allows remote attackers to inject arbitrary SQL commands via the id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jportal:jportal_web_portal:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E2207ACC-04F8-4960-B5F7-B3779C055B44"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108577011129476&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11737","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010327","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6503","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securiteam.com/unixfocus/5HP020KD5K.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10430","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16272","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108577011129476&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010327","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securiteam.com/unixfocus/5HP020KD5K.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10430","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16272","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2037","sourceIdentifier":"cve@mitre.org","published":"2004-03-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Mollensoft Lightweight FTP Server 3.6 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long CWD command, as demonstrated in one example by using the \"cd\" command in an interactive FTP client."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mollensoft_software:lightweight_ftp_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0B8FDC-AB1D-42A6-B113-B9A298356180"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108577846011604&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108611230015042&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010328","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6412","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10409","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10429","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16237","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16303","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108577846011604&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108611230015042&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16237","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16303","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2038","sourceIdentifier":"cve@mitre.org","published":"2004-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) before LDU 700 allows remote attackers to inject arbitrary web script or HTML via a BBcode img tag in (1) functions.php, (2) header.php or (3) auth.inc.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:neocrome:land_down_under:*:*:*:*:*:*:*:*","versionEndIncluding":"700.03","matchCriteriaId":"B667EDB7-C663-4C85-B5FE-AE85A3D9D624"},{"vulnerable":true,"criteria":"cpe:2.3:a:neocrome:land_down_under:601:*:*:*:*:*:*:*","matchCriteriaId":"6DD6B4B4-B7A5-4D40-A592-F560A0D51C2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:neocrome:land_down_under:602:*:*:*:*:*:*:*","matchCriteriaId":"A3AFAA03-3EE3-4903-8D6B-01D752C04716"},{"vulnerable":true,"criteria":"cpe:2.3:a:neocrome:land_down_under:700.01:*:*:*:*:*:*:*","matchCriteriaId":"6DBE0C14-CC8B-41FE-ABD9-C9C02813C7AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:neocrome:land_down_under:700.02:*:*:*:*:*:*:*","matchCriteriaId":"CC6B6217-DD6C-41C5-AB0C-DE7B989C79D0"}]}]}],"references":[{"url":"http://ldu.neocrome.net/page.php?id=1357","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108585789220174&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11739","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/May/1010335.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6508","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6510","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6511","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10435","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16284","source":"cve@mitre.org"},{"url":"http://ldu.neocrome.net/page.php?id=1357","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108585789220174&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11739","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/May/1010335.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10435","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16284","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2039","sourceIdentifier":"cve@mitre.org","published":"2004-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"e107 0.615 allows remote attackers to obtain sensitive information via a direct request to (1) alt_news.php, (2) backend_menu.php, (3) clock_menu.php, (4) counter_menu.php, (5) login_menu.php, and other files, which reveal the full path in a PHP error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*","matchCriteriaId":"061B1AF2-2BA7-49CB-9F8B-91BF5D5B0BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*","matchCriteriaId":"4F77F5E4-8636-41F5-9A80-055CC0FC0346"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108588043007224&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=108586723116427&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11740","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6525","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10436","source":"cve@mitre.org"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=31","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16277","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108588043007224&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=108586723116427&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10436","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.waraxe.us/index.php?modname=sa&id=31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2040","sourceIdentifier":"cve@mitre.org","published":"2004-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary web script or HTML via the (1) LAN_407 parameter to clock_menu.php, (2) \"email article to a friend\" field, (3) \"submit news\" field, or (4) avmsg parameter to usersettings.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*","matchCriteriaId":"061B1AF2-2BA7-49CB-9F8B-91BF5D5B0BF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*","matchCriteriaId":"4F77F5E4-8636-41F5-9A80-055CC0FC0346"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108588043007224&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=108586723116427&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11740","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6526","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6527","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6528","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6529","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10436","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=31","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16279","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16280","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16281","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108588043007224&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=108586723116427&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6529","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16280","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16281","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2041","sourceIdentifier":"cve@mitre.org","published":"2004-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in secure_img_render.php in e107 0.615 allows remote attackers to execute arbitrary PHP code by modifying the p parameter to reference a URL on a remote web server that contains the code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:0.6_15:*:*:*:*:*:*:*","matchCriteriaId":"061B1AF2-2BA7-49CB-9F8B-91BF5D5B0BF3"},{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:0.6_15a:*:*:*:*:*:*:*","matchCriteriaId":"4F77F5E4-8636-41F5-9A80-055CC0FC0346"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108588043007224&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=108586723116427&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11740","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6530","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10436","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=31","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16282","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108588043007224&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=108586723116427&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2042","sourceIdentifier":"cve@mitre.org","published":"2004-05-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via (1) content parameter to content.php, (2) content_id parameter to content.php, or (3) list parameter to news.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.615:*:*:*:*:*:*:*","matchCriteriaId":"BEAC1FD5-ECD1-480C-827E-F1AE8484C4EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:0.615a:*:*:*:*:*:*:*","matchCriteriaId":"D17F613A-6BE1-4B45-8E40-8E44E0EEA756"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108588043007224&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=108586723116427&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11740","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6531","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6532","source":"cve@mitre.org","tags":["Exploit","Tool Signature","Vendor Advisory"]},{"url":"http://www.osvdb.org/6533","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10436","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=31","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16283","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108588043007224&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=108586723116427&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11740","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6531","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Tool Signature","Vendor Advisory"]},{"url":"http://www.osvdb.org/6533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10436","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.waraxe.us/index.php?modname=sa&id=31","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16283","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2043","sourceIdentifier":"cve@mitre.org","published":"2004-05-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long database name, as demonstrated using the gsec command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:4.0:*:*:*:*:*:*:*","matchCriteriaId":"E61E2866-38F1-45C0-8B5D-A07CA430BDDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:5.0:*:*:*:*:*:*:*","matchCriteriaId":"0D2666FC-B03C-47A5-BA04-A08DC28C7C73"},{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:6.0:*:*:*:*:*:*:*","matchCriteriaId":"5FE98699-E21E-4D1C-BD43-F7F62D9AE7BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:6.4:*:*:*:*:*:*:*","matchCriteriaId":"42F1460E-CA94-4D7D-9799-F763221DBF4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:6.5:*:*:*:*:*:*:*","matchCriteriaId":"9547CEC2-B180-4BFF-A5FF-DE8D2ABB8986"},{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:7.0:*:*:*:*:*:*:*","matchCriteriaId":"D724271B-3747-4C65-BC90-D0F7B89F996B"},{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5B705544-E282-4791-B4F9-0865D57E2747"},{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:interbase_superserver:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1DB0894E-F477-45F1-902B-D87C4E2291BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:firebirdsql:firebird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"78A133F6-268F-4765-98E9-A910FC9F4926"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0027.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108611386202493&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11756","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/19350","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010381","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1014","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6408","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6624","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/unixfocus/5AP0P0UCUO.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10446","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16229","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16316","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0027.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108611386202493&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/19350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010381","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6624","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/unixfocus/5AP0P0UCUO.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16229","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16316","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2044","sourceIdentifier":"cve@mitre.org","published":"2004-06-01T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke 7x do not properly use the eregi() PHP function with $_SERVER['PHP_SELF'] to identify the calling script, which allows remote attackers to directly access scripts, obtain path information via a PHP error message, and possibly gain access, as demonstrated using an HTTP request that contains the \"admin.php\" string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.0:*:*:*:*:*:*:*","matchCriteriaId":"93B755A9-694E-49FA-9068-353203AF9965"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CA0B88AD-CACF-4E48-A4B1-313FFE32D058"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.1:*:*:*:*:*:*:*","matchCriteriaId":"FF4C3F85-A23C-40B9-9B0F-564E7C254AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.2:*:*:*:*:*:*:*","matchCriteriaId":"4EAF55C4-F0A7-4A36-B203-83670D58483F"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.2a:*:*:*:*:*:*:*","matchCriteriaId":"E3ED3BFC-C8CF-4537-832C-0D00400AC064"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C94B62CA-8D34-4B37-8748-1FE64F0299DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.4:*:*:*:*:*:*:*","matchCriteriaId":"8720AE61-41C7-4EA8-8C01-81AC0BFACBCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.5:*:*:*:*:*:*:*","matchCriteriaId":"2F6E1577-6E50-49E2-B968-8C2AA924142F"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:5.6:*:*:*:*:*:*:*","matchCriteriaId":"CA9AE983-B6FF-4686-BDB3-E6B12D4E853E"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*","matchCriteriaId":"CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:oscommerce:osc2nuke:7x_1.0:*:*:*:*:*:*:*","matchCriteriaId":"334BB9BD-EB60-4B69-88A7-01B9EC6B509D"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_laudanski:betanc_php-nuke:bundle:*:*:*:*:*:*:*","matchCriteriaId":"69CDDF6D-7D41-49DC-BCC5-CDEDC68465CE"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0005.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0006.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108611606320559&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108611643614881&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108662955105757&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11766","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6593","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10447","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16294","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16296","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16298","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0005.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0006.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108611606320559&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108611643614881&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=108662955105757&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11766","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10447","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2045","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to cause a denial of service (device reboot) via an HTTP request with a long username."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:conceptronic:cadslr1_adsl_router:3.04n:*:*:*:*:*:*:*","matchCriteriaId":"AC82CF5B-400B-4F1F-A278-4BBAAC735783"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109045084522857&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12110","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10769","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.shellsec.net/leer_advisory.php?id=5","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16746","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109045084522857&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.shellsec.net/leer_advisory.php?id=5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16746","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2046","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in APC PowerChute Business Edition 6.0 through 7.0.1 allows remote attackers to cause a denial of service via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apc:powerchute:6.0:*:business:*:*:*:*:*","matchCriteriaId":"68FC1998-ADBA-4F60-944E-9482678D8768"},{"vulnerable":true,"criteria":"cpe:2.3:a:apc:powerchute:7.1:*:business:*:*:*:*:*","matchCriteriaId":"55D378AC-1A37-4229-B7B9-90AB4DBEE995"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109061480026378&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12124","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1010745","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8187","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10777","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16767","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109061480026378&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12124","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1010745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10777","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16767","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2047","sourceIdentifier":"cve@mitre.org","published":"2004-07-23T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1 for PostNuke allows remote attackers to retrieve arbitrary files via a .. (dot dot) in the pathext parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easyweb:easyweb_filemanager:1.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"E9A7097C-D0AF-4B7D-8B9B-61B19D63BD2D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109068482605241&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12151","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.cirt.net/advisories/ew_file_manager.shtml","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/8193","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10792","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16806","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109068482605241&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12151","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.cirt.net/advisories/ew_file_manager.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/8193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16806","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2048","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default \"jstwo\" password, which allows remote attackers to gain access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_extreme:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"99504BBD-2057-4EAD-8347-96216B3EEDCA"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_l:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"A96E308D-2610-4B0B-B4E3-16AF3E4C91E8"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_m:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"B63C47F9-CD0E-4B2A-8A4A-9DF5DACF51C4"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_mobile:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"B099B881-ED9D-4275-B870-DC8404EA397F"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_s:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"52D22936-D5EE-4588-9EE0-F1B628F951F8"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_xm:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"5313BBF6-89A0-48C4-9A4D-8601173201A1"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_xs:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"0D79A571-BD13-4045-AFEF-90412D13F1A9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109068491801021&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12154","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010770","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8246","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10794","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16790","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109068491801021&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16790","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2049","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper library, which allows attackers to gain access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_extreme:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"99504BBD-2057-4EAD-8347-96216B3EEDCA"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_l:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"A96E308D-2610-4B0B-B4E3-16AF3E4C91E8"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_m:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"B63C47F9-CD0E-4B2A-8A4A-9DF5DACF51C4"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_mobile:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"B099B881-ED9D-4275-B870-DC8404EA397F"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_s:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"52D22936-D5EE-4588-9EE0-F1B628F951F8"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_xm:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"5313BBF6-89A0-48C4-9A4D-8601173201A1"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_xs:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"0D79A571-BD13-4045-AFEF-90412D13F1A9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109068491801021&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12154","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010770","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8247","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10794","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16795","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109068491801021&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10794","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16795","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2050","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allow local users to gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the \"maertsJ\" password, which is hard-coded into lshell."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_extreme:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"99504BBD-2057-4EAD-8347-96216B3EEDCA"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_l:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"A96E308D-2610-4B0B-B4E3-16AF3E4C91E8"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_m:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"B63C47F9-CD0E-4B2A-8A4A-9DF5DACF51C4"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_mobile:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"B099B881-ED9D-4275-B870-DC8404EA397F"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_s:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"52D22936-D5EE-4588-9EE0-F1B628F951F8"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_xm:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"5313BBF6-89A0-48C4-9A4D-8601173201A1"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_xs:2.4.38:*:*:*:*:*:*:*","matchCriteriaId":"0D79A571-BD13-4045-AFEF-90412D13F1A9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109068491801021&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12154","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1010770","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8248","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10794","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16808","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109068491801021&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1010770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16808","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2051","sourceIdentifier":"cve@mitre.org","published":"2004-07-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbitrary files via a file:/// URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_extreme:2.4.38_firmware:*:*:*:*:*:*:*","matchCriteriaId":"2E936EEE-A27E-432A-867E-5651974430D9"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_l:2.4.38_firmware:*:*:*:*:*:*:*","matchCriteriaId":"839B447F-82E3-4883-AFE1-479CE1F60067"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_m:2.4.38_firmware:*:*:*:*:*:*:*","matchCriteriaId":"2DFFEFDC-4968-44DA-BEFF-30333C40D498"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_mobile:2.4.38_firmware:*:*:*:*:*:*:*","matchCriteriaId":"426547AF-64E1-4ACF-9D14-C781561B01B1"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_s:2.4.38_firmware:*:*:*:*:*:*:*","matchCriteriaId":"D4CE8DB3-5478-4A87-A65D-8F2C94D91B9F"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_xm:2.4.38_firmware:*:*:*:*:*:*:*","matchCriteriaId":"A8874BC7-9FEA-4DC3-A7AE-9CB8CE26C729"},{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune_xs:2.4.38_firmware:*:*:*:*:*:*:*","matchCriteriaId":"80FCF011-42C6-40AB-AAAE-4136C862C61D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109068491801021&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12154","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010770","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8249","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10794","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16798","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109068491801021&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12154","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8249","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16798","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2052","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eSeSIX Thintune thin clients running firmware 2.4.38 and earlier accept any password that begins with the actual password, which makes it easier for users to conduct brute force password guessing."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:esesix:thintune:*:*:*:*:*:*:*:*","versionEndIncluding":"2.4.38","matchCriteriaId":"4BDF6B89-669E-41E5-9940-C7FA9C285674"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109068491801021&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109068491801021&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2053","sourceIdentifier":"cve@mitre.org","published":"2004-07-24T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in EasyIns Stadtportal 4 allows remote attackers to execute arbitrary PHP code via the site parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:easyins:easyins:stadtportal_4.0:*:*:*:*:*:*:*","matchCriteriaId":"FD7EB899-DC5C-4366-9FCB-BC41B1B52440"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109069241512694&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010769","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8233","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10795","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16797","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109069241512694&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10795","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16797","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2054","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via (1) the mode parameter to privmsg.php or (2) the redirect parameter to login.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C74C78D-EEE0-48DF-9721-2A43B996EBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"054EFBD3-2252-4173-B37A-B8CA0218CE0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"00EB368F-5471-42E3-BBBE-EF9E623A7259"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F65406CF-59F1-48DC-8ABC-501F210A8B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03AC5144-140D-48E9-87FD-96F2E248D4E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A8F12660-10A7-4B66-94B0-954C9CD7D36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*","matchCriteriaId":"D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*","matchCriteriaId":"1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*","matchCriteriaId":"69F58020-7D60-4376-BF2B-602A24C3F4EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"3BF566D7-4537-49F6-91BF-F56D64DAE6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*","matchCriteriaId":"18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E3F1F44C-B65B-49C4-B6E8-30560D5B7663"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"639E102D-2BD2-42FF-999A-02135A3E5647"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"AA7F5CF1-4610-47D0-A6DD-DCB55645245D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"FB898F63-F327-44B1-B6A2-889E490E583F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"894A26BD-2D8B-4DE7-BEE3-940A0498DB74"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109034476122723&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12114","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10753","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16759","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109034476122723&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16759","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2055","sourceIdentifier":"cve@mitre.org","published":"2004-07-19T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web script via the search_author parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C74C78D-EEE0-48DF-9721-2A43B996EBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"054EFBD3-2252-4173-B37A-B8CA0218CE0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"00EB368F-5471-42E3-BBBE-EF9E623A7259"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F65406CF-59F1-48DC-8ABC-501F210A8B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03AC5144-140D-48E9-87FD-96F2E248D4E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A8F12660-10A7-4B66-94B0-954C9CD7D36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*","matchCriteriaId":"D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6d:*:*:*:*:*:*:*","matchCriteriaId":"1DFBF5F9-AA51-45A7-BE6E-0A06778773B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"FFBE40D8-27C0-4E06-993E-AA07DCD5B4C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.7a:*:*:*:*:*:*:*","matchCriteriaId":"69F58020-7D60-4376-BF2B-602A24C3F4EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"3BF566D7-4537-49F6-91BF-F56D64DAE6DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.8a:*:*:*:*:*:*:*","matchCriteriaId":"18657E92-FA64-43CD-98CD-6C9AFAF3C3BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"E3F1F44C-B65B-49C4-B6E8-30560D5B7663"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"639E102D-2BD2-42FF-999A-02135A3E5647"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"AA7F5CF1-4610-47D0-A6DD-DCB55645245D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"FB898F63-F327-44B1-B6A2-889E490E583F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"894A26BD-2D8B-4DE7-BEE3-940A0498DB74"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109034476122723&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12114","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10753","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16758","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109034476122723&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16758","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2056","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in action.php in Nucleus CMS 3.01 allows remote attackers to execute arbitrary SQL statements via the itemid parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nucleus_group:nucleus_cms:3.01:*:*:*:*:*:*:*","matchCriteriaId":"E14B24DC-A0C5-4DEB-B924-AF75CEA249D6"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109087144509299&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13136","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18002","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109087144509299&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13136","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2057","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9420D4DE-3E89-4F38-97E4-C2DDC422CB64"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D7B1E6-98EA-4036-8915-92A9950D88E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CC50CDF3-927A-4E53-92F9-424B368DF6C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.2:*:*:*:*:*:*:*","matchCriteriaId":"C064DC74-8EC4-45F9-8003-18C517D715DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.3:*:*:*:*:*:*:*","matchCriteriaId":"DD325976-561F-4B0E-B7F9-E5C51619E64A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.4:*:*:*:*:*:*:*","matchCriteriaId":"31B1F333-7FAA-4A29-815B-5A06CB1E54ED"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://ferruh.mavituna.com/article/?574","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109086977330418&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12164","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010777","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8251","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10799","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16799","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://ferruh.mavituna.com/article/?574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109086977330418&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8251","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16799","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2058","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9420D4DE-3E89-4F38-97E4-C2DDC422CB64"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D7B1E6-98EA-4036-8915-92A9950D88E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CC50CDF3-927A-4E53-92F9-424B368DF6C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.2:*:*:*:*:*:*:*","matchCriteriaId":"C064DC74-8EC4-45F9-8003-18C517D715DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.3:*:*:*:*:*:*:*","matchCriteriaId":"DD325976-561F-4B0E-B7F9-E5C51619E64A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.4:*:*:*:*:*:*:*","matchCriteriaId":"31B1F333-7FAA-4A29-815B-5A06CB1E54ED"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://ferruh.mavituna.com/article/?574","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109086977330418&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12164","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010777","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8252","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10799","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16800","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://ferruh.mavituna.com/article/?574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109086977330418&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16800","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2059","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SearchFor parameter in [TABLE-NAME]_search.asp, (2) SQL parameter in [TABLE-NAME]_edit.asp, (3) SearchFor parameter in [TABLE]_list.asp, or (4) SQL parameter in export.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9420D4DE-3E89-4F38-97E4-C2DDC422CB64"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D7B1E6-98EA-4036-8915-92A9950D88E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CC50CDF3-927A-4E53-92F9-424B368DF6C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.2:*:*:*:*:*:*:*","matchCriteriaId":"C064DC74-8EC4-45F9-8003-18C517D715DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.3:*:*:*:*:*:*:*","matchCriteriaId":"DD325976-561F-4B0E-B7F9-E5C51619E64A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.4:*:*:*:*:*:*:*","matchCriteriaId":"31B1F333-7FAA-4A29-815B-5A06CB1E54ED"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://ferruh.mavituna.com/article/?574","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109086977330418&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12164","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010777","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8254","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8255","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8256","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8257","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10799","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16801","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://ferruh.mavituna.com/article/?574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109086977330418&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8256","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8257","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10799","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16801","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2060","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direct request to the database filename, which is predictable based on table and field names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:1.0:*:*:*:*:*:*:*","matchCriteriaId":"9420D4DE-3E89-4F38-97E4-C2DDC422CB64"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.0:*:*:*:*:*:*:*","matchCriteriaId":"A4D7B1E6-98EA-4036-8915-92A9950D88E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CC50CDF3-927A-4E53-92F9-424B368DF6C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.2:*:*:*:*:*:*:*","matchCriteriaId":"C064DC74-8EC4-45F9-8003-18C517D715DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.3:*:*:*:*:*:*:*","matchCriteriaId":"DD325976-561F-4B0E-B7F9-E5C51619E64A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xlinesoft:asprunner:2.4:*:*:*:*:*:*:*","matchCriteriaId":"31B1F333-7FAA-4A29-815B-5A06CB1E54ED"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://ferruh.mavituna.com/article/?574","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109086977330418&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12164","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010777","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8253","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10799","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16802","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://ferruh.mavituna.com/article/?574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109086977330418&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010777","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10799","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16802","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2061","sourceIdentifier":"cve@mitre.org","published":"2004-07-27T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-918"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:risearch:risearch:1.0.01:*:*:*:*:*:*:*","matchCriteriaId":"A9939F0E-CE7C-469E-BC8E-60615728C5E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:risearch:risearch_pro:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"01E03BF3-438A-4F5C-B8A5-3DCAB5F9CA8E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109095196526490&w=2","source":"cve@mitre.org","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/12173","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010788","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/8265","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/8266","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10812","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16817","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=109095196526490&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/12173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010788","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/8265","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/8266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10812","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16817","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2062","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrary SQL via the (1) thread_id, (2) parent_id, or (3) mode parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:antiboard:antiboard:0.6:*:*:*:*:*:*:*","matchCriteriaId":"C0007A06-B599-4019-B425-18D71FE7DB4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:antiboard:antiboard:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0E84DC0A-5E1B-4530-B250-038542934371"},{"vulnerable":true,"criteria":"cpe:2.3:a:antiboard:antiboard:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4A3BBF8F-431C-4916-B997-D2DC1687782B"},{"vulnerable":true,"criteria":"cpe:2.3:a:antiboard:antiboard:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"00220917-B055-4A67-A3E2-A5F5F2281EC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:antiboard:antiboard:0.61:*:*:*:*:*:*:*","matchCriteriaId":"4BF5BB55-E4AD-4BB4-AA84-4DA6DA07C1BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:antiboard:antiboard:0.62:*:*:*:*:*:*:*","matchCriteriaId":"49E8F753-09BF-4711-9C54-E1C1A0220BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:antiboard:antiboard:0.63:*:*:*:*:*:*:*","matchCriteriaId":"0479A127-431F-4F52-8085-3F673E1B150C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109105610220965&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12137","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10821","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16828","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109105610220965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16828","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2063","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to inject arbitrary HTML or web script via the feedback parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:antiboard:antiboard:0.6:*:*:*:*:*:*:*","matchCriteriaId":"C0007A06-B599-4019-B425-18D71FE7DB4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:antiboard:antiboard:0.7:*:*:*:*:*:*:*","matchCriteriaId":"0E84DC0A-5E1B-4530-B250-038542934371"},{"vulnerable":true,"criteria":"cpe:2.3:a:antiboard:antiboard:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4A3BBF8F-431C-4916-B997-D2DC1687782B"},{"vulnerable":true,"criteria":"cpe:2.3:a:antiboard:antiboard:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"00220917-B055-4A67-A3E2-A5F5F2281EC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:antiboard:antiboard:0.61:*:*:*:*:*:*:*","matchCriteriaId":"4BF5BB55-E4AD-4BB4-AA84-4DA6DA07C1BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:antiboard:antiboard:0.62:*:*:*:*:*:*:*","matchCriteriaId":"49E8F753-09BF-4711-9C54-E1C1A0220BD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:antiboard:antiboard:0.63:*:*:*:*:*:*:*","matchCriteriaId":"0479A127-431F-4F52-8085-3F673E1B150C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109105610220965&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12137","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8269","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10821","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16830","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109105610220965&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12137","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10821","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16830","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2064","sourceIdentifier":"cve@mitre.org","published":"2004-07-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in lostBook 1.1 and earlier allows remote attackers to inject arbitrary web script via the (1) Email or (2) Website fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:verylost:lostbook:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"62BB1E6E-C6C4-4AC8-95B9-D61394893619"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109112282611808&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12190","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010812","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8271","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10825","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16835","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109112282611808&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010812","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8271","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16835","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2065","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DansGuardian 2.8 and earlier allows remote attackers to bypass the extension filtering rule via a hex encoded extension or . in the filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"746487B8-C8A7-4334-91A8-A813A38ACDB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"A5C0B435-A011-4579-8194-B4FE4A6FCFD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"90C94BEE-6353-4CFB-9E30-BE30241DE5D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"D8779430-B532-48E6-84E0-498E02B01275"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.2.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4070705F-B9E0-47DA-A9C5-F0B9B3CF33E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"962C794A-4955-4789-BE88-E067567684BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"33380924-AD4B-48AF-BB66-8E3A9529D80C"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.2.9.1:*:*:*:*:*:*:*","matchCriteriaId":"12816696-5FE6-4725-9828-45FA9870BE78"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"0EEA7E42-9209-40A7-A91C-8EA17754B3DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"AE32C167-2C00-4203-A9A1-5466FBA5ACC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.6.1.5:*:*:*:*:*:*:*","matchCriteriaId":"DEA2AC1C-941C-4E61-BD12-198A332949DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.7.3.1:*:*:*:*:*:*:*","matchCriteriaId":"8D77570C-86C0-4DF1-B7DA-F90C119DEAEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.8:*:*:*:*:*:*:*","matchCriteriaId":"25D26011-7833-4B3D-9136-615E30A5B6C0"}]}]}],"references":[{"url":"http://dansguardian.org/?page=history","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109113126217408&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12191","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1010817","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8270","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10823","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16836","source":"cve@mitre.org"},{"url":"http://dansguardian.org/?page=history","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109113126217408&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12191","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1010817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16836","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2066","sourceIdentifier":"cve@mitre.org","published":"2004-07-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the (1) linpha_userid or (2) linpha_password cookies."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"B2EE653B-2731-4C3E-A7D0-3465276E879C"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"108B066B-28C1-4888-B696-78F816A89B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"9113509A-C884-46F4-BE97-C49382536FE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"5BD294BF-79FE-4940-B2D1-CB2506370EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:linpha:linpha:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"00E9B8B3-87E5-46A5-8242-04E620D54086"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109112246805277&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12189","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8272","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10827","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16834","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109112246805277&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8272","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10827","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16834","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2067","sourceIdentifier":"cve@mitre.org","published":"2004-07-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL and bypass authentication via the (1) user, (2) password, or (3) crypted_password parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jaws:jaws:0.2:*:*:*:*:*:*:*","matchCriteriaId":"CA6406F9-BE2A-4127-B5CC-D2BFE56212B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jaws:jaws:0.3:*:*:*:*:*:*:*","matchCriteriaId":"15BFB2A5-78DF-40AE-B0DD-C79D5052C642"},{"vulnerable":true,"criteria":"cpe:2.3:a:jaws:jaws:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3C529BB5-608A-4AEB-A6D2-E40F2C3C0CA3"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109116345930380&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010815","source":"cve@mitre.org"},{"url":"http://www.jaws.com.mx/index.php?gadget=blog&action=single_view&id=10","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8320","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10826","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16847","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109116345930380&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010815","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.jaws.com.mx/index.php?gadget=blog&action=single_view&id=10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8320","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10826","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2068","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an empty NNTP news article with missing mandatory headers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.25:*:*:*:*:*:*:*","matchCriteriaId":"6D734DEC-8409-439C-B76B-47032F7796EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.26:*:*:*:*:*:*:*","matchCriteriaId":"3E92501E-E432-418E-94B5-BBB38793DAF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.27:*:*:*:*:*:*:*","matchCriteriaId":"D5C119D2-23BA-4C0C-80BA-75BBB1B3C373"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.28:*:*:*:*:*:*:*","matchCriteriaId":"88DD952E-FB54-435C-808D-08E96A64D4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.29:*:*:*:*:*:*:*","matchCriteriaId":"684BAA0C-12A9-46A8-BFDE-1C758E2CA2E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.30:*:*:*:*:*:*:*","matchCriteriaId":"4C23B76E-D54B-4944-B234-D52605FA2E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.31:*:*:*:*:*:*:*","matchCriteriaId":"8F51E17B-30E3-4C0E-87C7-511B25A68C87"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.32:*:*:*:*:*:*:*","matchCriteriaId":"C7BEE300-A405-444A-B38B-774AAD6BCB0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.33:*:*:*:*:*:*:*","matchCriteriaId":"3D91BECC-F972-4670-9BEC-C889CCC0553D"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.34:*:*:*:*:*:*:*","matchCriteriaId":"43F7A354-945A-41C1-9D1F-BB1DB2032A45"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.35:*:*:*:*:*:*:*","matchCriteriaId":"F698F052-7272-433F-863F-434C7DB69E4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.36:*:*:*:*:*:*:*","matchCriteriaId":"126D9064-EF0E-4B80-8CDD-BD2700A281D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.37:*:*:*:*:*:*:*","matchCriteriaId":"371BCB59-10FF-43E3-BB1A-181417D2A048"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.38:*:*:*:*:*:*:*","matchCriteriaId":"8E8CC32F-EEC6-4C95-AD70-ED5F3B420912"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.39:*:*:*:*:*:*:*","matchCriteriaId":"D5518EA6-16E4-4C31-AE99-482A449FE68A"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.40:*:*:*:*:*:*:*","matchCriteriaId":"C13D056D-2CE4-48AD-BE4E-E6CF619DA627"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.41:*:*:*:*:*:*:*","matchCriteriaId":"ECED1753-31FE-4AEF-AAD8-D4A1ED15C09B"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.42:*:*:*:*:*:*:*","matchCriteriaId":"F1DE9416-49F7-426D-8D93-BB89472A1633"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.43:*:*:*:*:*:*:*","matchCriteriaId":"D902627D-0A79-4DA4-A5CB-37FF503A7779"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.44:*:*:*:*:*:*:*","matchCriteriaId":"DD877780-C5E4-4422-BAC1-7DDE16C8A8C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.45:*:*:*:*:*:*:*","matchCriteriaId":"D84530B7-1BE6-4F97-A948-654AA02C1F1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.46:*:*:*:*:*:*:*","matchCriteriaId":"E27E4B77-98DC-41CE-B41F-276F482BC81C"},{"vulnerable":true,"criteria":"cpe:2.3:a:leafnode:leafnode:1.9.47:*:*:*:*:*:*:*","matchCriteriaId":"40D003C1-99A0-4559-86FB-F7128566FA9D"}]}]}],"references":[{"url":"http://leafnode.sourceforge.net/leafnode-SA-2004-01.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/10590","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.derkeiler.com/Mailing-Lists/VulnWatch/2004-01/0009.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3441","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14189","source":"cve@mitre.org"},{"url":"http://leafnode.sourceforge.net/leafnode-SA-2004-01.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/10590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.derkeiler.com/Mailing-Lists/VulnWatch/2004-01/0009.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14189","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2069","sourceIdentifier":"secalert@redhat.com","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*","matchCriteriaId":"A02751E9-2D38-4495-9572-8D84D71D4773"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.7.1p2:*:*:*:*:*:*:*","matchCriteriaId":"44CCF5CD-B434-4392-A79A-C1945D2AE30A"}]}]}],"references":[{"url":"http://marc.info/?l=openssh-unix-dev&m=107520317020444&w=2","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=openssh-unix-dev&m=107529205602320&w=2","source":"secalert@redhat.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2005-550.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17000","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17135","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/17252","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22875","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/23680","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf","source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/16567","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/425397/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/451404/100/0/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/451417/100/200/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/archive/1/451426/100/200/threaded","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/14963","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/download/esx/esx-202-200610-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/download/esx/esx-213-200610-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html","source":"secalert@redhat.com"},{"url":"http://www.vupen.com/english/advisories/2006/4502","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20930","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541","source":"secalert@redhat.com"},{"url":"http://marc.info/?l=openssh-unix-dev&m=107520317020444&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=openssh-unix-dev&m=107529205602320&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2005-550.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17252","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-216.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2005-223.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/16567","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/425397/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/451404/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/451417/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/451426/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/14963","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/download/esx/esx-202-200610-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/download/esx/esx-213-200610-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4502","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2070","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Altiris Client Service for Windows 5.6 SP1 Hotfix E (5.6.181) allows local users to execute arbitrary commands by opening the AClient tray icon and using the View Log File option, a different vulnerability than CVE-2005-1590."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:altiris:client_service:5.6.181:windows_sp1_hotfix_e:*:*:*:*:*:*","matchCriteriaId":"5378AA18-B5F4-4DE7-9BE4-F87D56DAC958"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/381649","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/381649","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2071","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two slashes (\"//\") after the server name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macallan:mail_solution:2.8.4.6_build_260:*:*:*:*:*:*:*","matchCriteriaId":"5E1B5513-19A9-4BA0-82E3-3B04CA4AF403"}]}]}],"references":[{"url":"http://secunia.com/advisories/10861","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009030","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3926","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9646","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15194","source":"cve@mitre.org"},{"url":"https://testzone.secunia.com/advisories/10861","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10861","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3926","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9646","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15194","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://testzone.secunia.com/advisories/10861","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2072","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to execute script on other clients via the Itemid parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_open_source:4.6:*:cvs:*:*:*:*:*","matchCriteriaId":"F199881D-5FAF-49E9-95D2-31068C92FFAB"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/9588","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.systemsecure.org/advisories/ssadvisory06022004.php","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15062","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.systemsecure.org/advisories/ssadvisory06022004.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15062","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2073","sourceIdentifier":"cve@mitre.org","published":"2004-02-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux-VServer 1.24 allows local users with root privileges on a virtual server to gain access to the filesystem outside the virtual server via a modified chroot-again exploit using the chmod command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.20:*:*:*:*:*:*:*","matchCriteriaId":"3A4697C1-A42F-4361-B551-1829CDA8BB3E"},{"vulnerable":false,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.21:*:*:*:*:*:*:*","matchCriteriaId":"986B4DA4-1C72-4BE1-9D41-0C1A6B908C0D"},{"vulnerable":false,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.22:*:*:*:*:*:*:*","matchCriteriaId":"4A730470-F8A0-44A8-A228-935A7C8217D2"},{"vulnerable":false,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.23:*:*:*:*:*:*:*","matchCriteriaId":"291CEFF8-B1B5-4124-962D-B328AC862DF4"},{"vulnerable":false,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.24:*:*:*:*:*:*:*","matchCriteriaId":"D2E86CE0-63D7-4BAC-AA82-90966A6898D3"}]}]}],"references":[{"url":"http://secunia.com/advisories/10816","source":"cve@mitre.org"},{"url":"http://www.linux-vserver.org/index.php?page=ChangeLog","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3875","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/353003","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9596","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15073","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.linux-vserver.org/index.php?page=ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3875","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/353003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15073","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2074","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bolintech:dream_ftp_server:1.02:*:*:*:*:*:*:*","matchCriteriaId":"26D763A2-E3D5-46E2-BAF9-AAD891F5FAA3"}]}]}],"references":[{"url":"http://securitytracker.com/id?1009295","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9800","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15380","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9800","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15380","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2075","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sophos Anti-Virus 3.78 allows remote attackers to cause a denial of service (infinite loop) via a MIME header that is not properly terminated."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sophos:sophos_anti-virus:3.46:*:*:*:*:*:*:*","matchCriteriaId":"652B7B18-567C-4353-9D9A-5BE456F56AEA"},{"vulnerable":false,"criteria":"cpe:2.3:a:sophos:sophos_anti-virus:3.78:*:*:*:*:*:*:*","matchCriteriaId":"40D4EB83-A8A4-48F2-A835-FA192ADB3BFD"}]}]}],"references":[{"url":"http://secunia.com/advisories/10855","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009042","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3925","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9648","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.sophos.com/support/news/#mime-378","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15191","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9648","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.sophos.com/support/news/#mime-378","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15191","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2076","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the query parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"0BC85ED9-7491-43D3-B34D-1CB07836888F"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/353869","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9656","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15208","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/353869","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15208","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2077","sourceIdentifier":"cve@mitre.org","published":"2004-02-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nadeo Game Engine for Nadeo TrackMania and Nadeo Virtual Skipper 3 allows remote attackers to cause a denial of service (server crash) via malformed data to TCP port 2350, possibly due to long values or incorrect size fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nadeo:game_engine:*:*:*:*:*:*:*:*","matchCriteriaId":"B45F9126-1DF4-46D8-9CD8-CFF726DD309B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nadeo:trackmania:*:*:*:*:*:*:*:*","matchCriteriaId":"663B35C1-5CF6-44A5-B02C-9698A2A78131"},{"vulnerable":true,"criteria":"cpe:2.3:a:nadeo:virtual_skipper:3:*:*:*:*:*:*:*","matchCriteriaId":"D1A99805-70F7-4230-AF1C-FE1184E6EC54"}]}]}],"references":[{"url":"http://lists.netsys.com/pipermail/full-disclosure/2004-February/016906.html","source":"cve@mitre.org"},{"url":"http://www.securiteinfo.com/attaques/hacking/trackmaniados.shtml","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/353182","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/353226","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9604","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15081","source":"cve@mitre.org"},{"url":"http://lists.netsys.com/pipermail/full-disclosure/2004-February/016906.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteinfo.com/attaques/hacking/trackmaniados.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/353182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/353226","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2078","sourceIdentifier":"cve@mitre.org","published":"2004-02-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red-M Red-Alert 2.7.5 with software 3.1 build 24 allows remote attackers to cause a denial of service (reboot and loss of logged events) via a long request to TCP port 80, possibly triggering a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:red-m:red-alert:2.7.5_v3.1_build_24:*:*:*:*:*:*:*","matchCriteriaId":"F44FF4B3-EB52-4315-8BFA-5ABA5668477F"}]}]}],"references":[{"url":"http://genhex.org/releases/031003.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=full-disclosure&m=107635119005407&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10832","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009001","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3891","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/securitynews/5SP0C0KC0A.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/353211","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15086","source":"cve@mitre.org"},{"url":"http://genhex.org/releases/031003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=full-disclosure&m=107635119005407&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3891","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/securitynews/5SP0C0KC0A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/353211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15086","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2079","sourceIdentifier":"cve@mitre.org","published":"2004-02-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to bypass authentication by connecting from the same IP address as an active authenticated user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:red-m:red-alert:2.7.5_v3.1_build_24:*:*:*:*:*:*:*","matchCriteriaId":"F44FF4B3-EB52-4315-8BFA-5ABA5668477F"}]}]}],"references":[{"url":"http://genhex.org/releases/031003.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=full-disclosure&m=107635119005407&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009001","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3952","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/securitynews/5SP0C0KC0A.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/353211","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15088","source":"cve@mitre.org"},{"url":"http://genhex.org/releases/031003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=full-disclosure&m=107635119005407&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/securitynews/5SP0C0KC0A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/353211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15088","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2080","sourceIdentifier":"cve@mitre.org","published":"2004-02-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Red-M Red-Alert 2.7.5 with software 3.1 build 24 converts multiple spaces in a Service Set Identifier (SSID) to a single space, which prevents Red-Alert from correctly identifying the SSID."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:red-m:red-alert:2.7.5_v3.1_build_24:*:*:*:*:*:*:*","matchCriteriaId":"F44FF4B3-EB52-4315-8BFA-5ABA5668477F"}]}]}],"references":[{"url":"http://genhex.org/releases/031003.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=full-disclosure&m=107635119005407&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009001","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3953","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/securitynews/5SP0C0KC0A.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/353211","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15089","source":"cve@mitre.org"},{"url":"http://genhex.org/releases/031003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=full-disclosure&m=107635119005407&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3953","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/securitynews/5SP0C0KC0A.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/353211","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2081","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service (pmsystem.exe crash) by issuing (1) a CD command with a tilde (~) character or dot dot (/../) or (2) a GET command for an unavailable file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:karjasoft:sami_ftp_server:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"410F8CAC-F2C6-4FAA-BC71-2AA23371C55E"}]}]}],"references":[{"url":"http://www.karja.com/samiftp/news.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/353753","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9657","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15204","source":"cve@mitre.org"},{"url":"http://www.karja.com/samiftp/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/353753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2082","sourceIdentifier":"cve@mitre.org","published":"2004-02-13T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The samiftp.dll library in Sami FTP Server 1.1.3 allows remote authenticated users to cause a denial of service (pmsystem.exe crash) via a GET request wit a large number of leading \"/\" (slash) characters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:karjasoft:sami_ftp_server:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"410F8CAC-F2C6-4FAA-BC71-2AA23371C55E"}]}]}],"references":[{"url":"http://www.karja.com/samiftp/news.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/353753","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9657","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15204","source":"cve@mitre.org"},{"url":"http://www.karja.com/samiftp/news.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/353753","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15204","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2083","sourceIdentifier":"cve@mitre.org","published":"2004-02-11T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka \"File Download Extension Spoofing.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndIncluding":"7.23","matchCriteriaId":"E7572660-4181-43C3-AE4F-C47A3389585B"}]}]}],"references":[{"url":"http://secunia.com/Internet_Explorer_File_Download_Extension_Spoofing_Test/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10760","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/750b1/","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/3917","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9640","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21698","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/Internet_Explorer_File_Download_Extension_Spoofing_Test/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10760","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/750b1/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/3917","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/9640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2084","sourceIdentifier":"cve@mitre.org","published":"2004-02-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in JShop E-Commerce Server allows remote attackers to inject arbitrary web script or HTML via the xSearch parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jshop_e-commerce:jshop_professional:3.0:*:*:*:*:*:*:*","matchCriteriaId":"BECAD52C-7F13-464D-9CCE-024D27488EFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:jshop_e-commerce:jshop_professional:3.1:*:*:*:*:*:*:*","matchCriteriaId":"94AE2E29-FEDC-44BC-A446-C2BE37D6D438"},{"vulnerable":true,"criteria":"cpe:2.3:a:jshop_e-commerce:jshop_professional:3.2:*:*:*:*:*:*:*","matchCriteriaId":"8CB17F10-893B-43B9-8AAC-5128DB5844CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:jshop_e-commerce:jshop_professional:3.3:*:*:*:*:*:*:*","matchCriteriaId":"C195A388-48B8-4D24-A39A-AA351D850AE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jshop_e-commerce:jshop_professional:3.4:*:*:*:*:*:*:*","matchCriteriaId":"06C5B148-4B8A-4A4A-9C33-9FC636CFC6DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jshop_e-commerce:jshop_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"54BA072D-17B6-454C-BC0E-78910D8CB56B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jshop_e-commerce:jshop_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B022F5D7-9345-4FFA-A00D-B1B5B47BA6CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jshop_e-commerce:jshop_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"0996428C-0D43-41C1-929E-0C35D9DDCCF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jshop_e-commerce:jshop_server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"AF346A4A-8508-4A93-B482-CEA554BE6E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:jshop_e-commerce:jshop_server:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A99A20CE-70DF-478B-9099-9892EDE9EC54"},{"vulnerable":true,"criteria":"cpe:2.3:a:jshop_e-commerce:jshop_server:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B3CFCC4F-D4BF-4EE0-B47D-15AC87BC119E"}]}]}],"references":[{"url":"http://secunia.com/advisories/10825","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008988","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/3889","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/9609","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.systemsecure.org/advisories/ssadvisory09022004.php","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15100","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10825","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008988","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/3889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/9609","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.systemsecure.org/advisories/ssadvisory09022004.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15100","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2085","sourceIdentifier":"cve@mitre.org","published":"2004-02-04T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) the sid parameter to comments.php, (2) the cid, cf, or rfd parameters to category.php, or the cid parameter to (3) input.php, (4) browse.php, (5) themes/facade/header.php, or (6) themes/phpcc/header.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brad_fears:phpcodecabinet:0.1:*:*:*:*:*:*:*","matchCriteriaId":"06439566-EB5A-403D-AEE9-A9114A59FD97"},{"vulnerable":true,"criteria":"cpe:2.3:a:brad_fears:phpcodecabinet:0.2:*:*:*:*:*:*:*","matchCriteriaId":"5F3517BE-DED1-4795-9639-46818F29D3B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:brad_fears:phpcodecabinet:0.3:*:*:*:*:*:*:*","matchCriteriaId":"3D814368-ED3B-47EE-BFA2-2A547B10BD05"},{"vulnerable":true,"criteria":"cpe:2.3:a:brad_fears:phpcodecabinet:0.4:*:*:*:*:*:*:*","matchCriteriaId":"2E4B04A1-AD63-42C7-8AFC-B7AB6C323FD5"}]}]}],"references":[{"url":"http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/browse.php?r1=1.5&r2=1.6","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/category.php?r1=1.4&r2=1.5","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/comments.php?r1=1.1&r2=1.2","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/input.php?r1=1.7&r2=1.8","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/themes/facade/header.php?r1=1.4&r2=1.5","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/themes/phpcc/header.php?r1=1.4&r2=1.5","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/10862","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009012","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=214860","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/16710","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/16711","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3885","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3886","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3887","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9601","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9645","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15190","source":"cve@mitre.org"},{"url":"http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/browse.php?r1=1.5&r2=1.6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/category.php?r1=1.4&r2=1.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/comments.php?r1=1.1&r2=1.2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/input.php?r1=1.7&r2=1.8","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/themes/facade/header.php?r1=1.4&r2=1.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/themes/phpcc/header.php?r1=1.4&r2=1.5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/10862","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=214860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/16710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/16711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3885","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3887","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2086","sourceIdentifier":"cve@mitre.org","published":"2004-02-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a long query parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"671A5D3C-F894-416F-8D59-0AAFFEDB1514"},{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:6.0:beta3:*:*:*:*:*:*","matchCriteriaId":"DF4DD306-A8E6-457C-8586-2D2199057E49"}]}]}],"references":[{"url":"http://securitytracker.com/id?1008979","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5786","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.sambar.com/security.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/82/353087","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9607","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15071","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5786","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.sambar.com/security.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/82/353087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15071","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2087","sourceIdentifier":"cve@mitre.org","published":"2004-02-08T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in SandSurfer before 1.7.0 allows remote attackers to gain access as a logged-in user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sandsurfer:sandsurfer:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"227C6EA7-A61B-4A76-9FFD-F36BC5AB3144"}]}]}],"references":[{"url":"http://secunia.com/advisories/10829","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009110","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=351705","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3922","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9647","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15193","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10829","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=351705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9647","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15193","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2088","sourceIdentifier":"cve@mitre.org","published":"2004-02-12T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification (DSN) where the original email is not included in the bounce message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:sophos_anti-virus:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"22A1739A-B77D-4CD6-9943-52B336EC2F22"},{"vulnerable":true,"criteria":"cpe:2.3:a:sophos:sophos_anti-virus:3.78:*:*:*:*:*:*:*","matchCriteriaId":"40D4EB83-A8A4-48F2-A835-FA192ADB3BFD"}]}]}],"references":[{"url":"http://secunia.com/advisories/10855","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009042","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9650","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.sophos.com/support/news/#mime-378","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15192","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10855","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.sophos.com/support/news/#mime-378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2089","sourceIdentifier":"cve@mitre.org","published":"2004-02-06T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Matrix FTP Server allows remote attackers to cause a denial of service (crash) by logging in using four spaces as the username and password and then issuing a LIST command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:matrix:matrix_ftp_server:*:*:*:*:*:*:*:*","matchCriteriaId":"F27E5B74-7F3A-499C-9916-C9DC37D27C4E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1008970","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15075","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15075","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2090","sourceIdentifier":"cve@mitre.org","published":"2004-02-07T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A04FEA6-37B0-44B0-844F-55652ABA1F85"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"4D56FB8E-2553-47C1-82A2-9E59023780CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"8541EEED-94F4-42F8-9719-57F3EC85D52B"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"40372520-08CF-4F64-A7AC-7E0AE0964138"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016881.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10820","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9611","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15078","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016881.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10820","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9611","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15078","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2091","sourceIdentifier":"cve@mitre.org","published":"2004-02-10T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Baseline Security Analyzer (MBSA) 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:baseline_security_analyzer:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3027B980-7E7C-4597-A321-CDF2503B6DE8"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/353324","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9634","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/353324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9634","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-2092","sourceIdentifier":"cve@mitre.org","published":"2004-02-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"eTrust InoculateIT for Linux 6.0 uses insecure permissions for multiple files and directories, including the application's registry and tmp directories, which allows local users to delete, modify, or examine sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:inoculateit:6.0:*:*:*:*:*:*:*","matchCriteriaId":"3CAE9329-AA34-4F56-B4BE-B028F021173B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107635584431518&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10833","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.excluded.org/advisories/advisory10.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/3896","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9616","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15103","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107635584431518&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.excluded.org/advisories/advisory10.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/3896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9616","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15103","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2093","sourceIdentifier":"cve@mitre.org","published":"2004-02-09T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the open_socket_out function in socket.c for rsync 2.5.7 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long RSYNC_PROXY environment variable.  NOTE: since rsync is not setuid, this issue does not provide any additional privileges beyond those that are already available to the user.  Therefore this issue may be REJECTED in the future."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:gnu:rsync:*:*:*:*:*:*:*:*","versionEndIncluding":"2.5.7","matchCriteriaId":"1FA7DB71-7D26-452C-97D3-62B4AB00EF01"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vuln-dev/2004-q1/0091.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15108","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vuln-dev/2004-q1/0091.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15108","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2094","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in WebcamXP 1.06.945 allows remote attackers to inject arbitrary HTML or web script as other users via a URL that contains the script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:darkwet:webcam_xp:1.6.945:*:*:*:*:*:*:*","matchCriteriaId":"C89E7E91-1FBD-4980-B3E1-8EB8D9E76571"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107471195326270&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9465","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14904","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107471195326270&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9465","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14904","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2095","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Honeyd before 0.8 replies to TCP packets with the SYN and RST flags set, which allows remote attackers to identify IP addresses that are being simulated by Honeyd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:niels_provos:honeyd:0.5:*:*:*:*:*:*:*","matchCriteriaId":"8BAB9CCB-EA5A-4AF6-A6B0-2AEF29AD2BEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels_provos:honeyd:0.6:*:*:*:*:*:*:*","matchCriteriaId":"C658CB38-C14B-417C-A4B5-7E62A70F4478"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels_provos:honeyd:0.6a:*:*:*:*:*:*:*","matchCriteriaId":"D0682334-D4EE-4272-9DDA-E8462113C25A"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels_provos:honeyd:0.7:*:*:*:*:*:*:*","matchCriteriaId":"1C2A952A-F3E4-4397-9B78-4B473E354E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:niels_provos:honeyd:0.7a:*:*:*:*:*:*:*","matchCriteriaId":"671D3D8D-D731-4A9C-9FF5-7EC49D706574"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107471181426047&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107473095118505&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10694","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10695","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3690","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9464","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008818","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14905","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107471181426047&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107473095118505&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10694","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3690","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9464","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14905","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2096","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Mephistoles httpd 0.6.0 final allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mephistoles_internet_suite:mephistoles_httpd:0.6_final:*:*:*:*:*:*:*","matchCriteriaId":"9ED47762-1B6A-448D-AB9D-5C29BFC1EBAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mephistoles_internet_suite:mephistoles_httpd:0.6_p1:*:*:*:*:*:*:*","matchCriteriaId":"4714A67B-45AE-4361-A427-B4724F84B98E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mephistoles_internet_suite:mephistoles_httpd:0.6_p2:*:*:*:*:*:*:*","matchCriteriaId":"3F65ACC6-1104-4C4F-B206-234B098D9922"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107470433714179&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10693","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3689","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9470","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14899","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107470433714179&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3689","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9470","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14899","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2097","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple scripts on SuSE Linux 9.0 allow local users to overwrite arbitrary files via a symlink attack on (1) /tmp/fvwm-bug created by fvwm-bug, (2) /tmp/wmmenu created by wm-oldmenu2new, (3) /tmp/rates created by x11perfcomp, (4) /tmp/xf86debug.1.log created by xf86debug, (5) /tmp/.winpopup-new created by winpopup-send.sh, or (6) /tmp/initrd created by lvmcreate_initrd."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107461582413923&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107478920006258&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008781","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9457","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14963","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107461582413923&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107478920006258&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008781","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9457","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14963","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2098","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the banner engine (TBE) 5.0 allows remote attackers to execute arbitrary script as other users via the HTML banner view/preview capability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:native_solutions:tbe_banner_engine:4.0:*:*:*:*:*:*:*","matchCriteriaId":"D07B768D-8076-42BC-AF15-6072CABC2E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:native_solutions:tbe_banner_engine:5.0:*:*:*:*:*:*:*","matchCriteriaId":"0C108161-E549-4301-9415-DF319F7B6D2C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107479071808330&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9472","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14911","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107479071808330&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9472","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14911","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2099","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via long (1) gamename, (2) gamever, (3) hostname, (4) gametype, (5) mapname or (6) gamemode commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:electronic_arts:need_for_speed_hot_pursuit_2:*:*:*:*:*:*:*:*","versionEndIncluding":"242.0","matchCriteriaId":"2451448D-24DE-4845-8DAC-4569BE63BDE9"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/nfshp2cbof-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=107479094508691&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9473","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14909","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/nfshp2cbof-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=107479094508691&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14909","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2100","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GeoHttpServer, when configured to authenticate users, allows remote attackers to bypass authentication and access unauthorized files via a URL that contains %0a%0a (encoded newlines)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geovision:geohttpserver:*:*:*:*:*:*:*:*","matchCriteriaId":"5ACE1CA3-3656-49C3-89F6-46FA351DCF3E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107480261825214&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107480261825214&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2101","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The sysinfo script in GeoHttpServer allows remote attackers to cause a denial of service (crash) via a long pwd parameter, possibly triggering a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:geovision:geohttpserver:*:*:*:*:*:*:*:*","matchCriteriaId":"5ACE1CA3-3656-49C3-89F6-46FA351DCF3E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107480261825214&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008807","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14913","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107480261825214&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14913","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2102","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in FREESCO 2.05, a modified version of thttpd, allows remote attackers to inject arbitrary web script or HTML via the test parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:freesco:freesco:2.05:*:*:*:*:*:*:*","matchCriteriaId":"355179AD-ADA5-4424-9312-D84FC974F1C2"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107480309925905&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14916","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107480309925905&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14916","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2103","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to process arbitrary script or HTML as other users via (1) a malformed request for a Perl program with script in the filename, (2) the User.id parameter to the webacc servlet, (3) the GWAP.version parameter to webacc, or (4) a URL request for a .bas file with script in the filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.1:*:*:*:*:*:*:*","matchCriteriaId":"455ED4E4-8033-4043-BF10-20188BF0B8B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE9F2EF1-D7CB-4D76-BAC0-EA28E5F9D82E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107487862304440&w=2","source":"cve@mitre.org"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10091529.htm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4949","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14919","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107487862304440&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10091529.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14919","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2104","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to (1) snoop.jsp, (2) SnoopServlet, (3) env.bas, or (4) lcgitest.nlm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.1:*:*:*:*:*:*:*","matchCriteriaId":"455ED4E4-8033-4043-BF10-20188BF0B8B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE9F2EF1-D7CB-4D76-BAC0-EA28E5F9D82E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107487862304440&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10711","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3715","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3720","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3721","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3722","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4952","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9479","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14921","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107487862304440&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3720","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3722","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4952","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14921","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2105","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt files via a full pathname in the error parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.1:*:*:*:*:*:*:*","matchCriteriaId":"455ED4E4-8033-4043-BF10-20188BF0B8B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE9F2EF1-D7CB-4D76-BAC0-EA28E5F9D82E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107487862304440&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107487862304440&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2106","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to list directories via a direct request to (1) /com/, (2) /com/novell/, (3) /com/novell/webaccess, or (4) /ns-icons/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:5.1:*:*:*:*:*:*:*","matchCriteriaId":"455ED4E4-8033-4043-BF10-20188BF0B8B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE9F2EF1-D7CB-4D76-BAC0-EA28E5F9D82E"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107487862304440&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/13402","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/13403","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/13404","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21749","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107487862304440&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/13402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/13403","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/13404","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/21749","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2107","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which allows remote attackers to use the finjan-parameter-type header to (1) restart the service, (2) use the getlastmsg command to view log information, or (3) use the online command to force a policy update from the database server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:finjan_software:surfingate:6.0:*:*:*:*:*:*:*","matchCriteriaId":"4E454259-93F6-4D13-9EF7-5F6F17F95F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:finjan_software:surfingate:6.0_1:*:*:*:*:*:*:*","matchCriteriaId":"FF6DBAC4-9536-4E7A-B66A-7E093391DC7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:finjan_software:surfingate:6.0_5:*:*:*:*:*:*:*","matchCriteriaId":"3C4E6081-6915-4F08-9AFE-69C02F9641A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:finjan_software:surfingate:7.0:*:*:*:*:*:*:*","matchCriteriaId":"43B5CB53-8F1C-4EB0-9188-AEEC7075B4F4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0929.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=107487999406339&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107522480913629&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10714","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/9478","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14934","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0929.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=107487999406339&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107522480913629&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10714","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/9478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14934","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2108","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to (1) search.asp, (2) browse.asp, (3) details.asp, (4) showcat.asp, (5) users.asp, (6) addtomylist.asp, (7) modline.asp, (8) cart.asp, or (9) newuser.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quadcomm:q-shop:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D08E518-BCCA-4855-813D-4FEC4E671C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:quadcomm:q-shop:2.1:*:*:*:*:*:*:*","matchCriteriaId":"33D4BECA-5A38-48CA-8933-B8DF2DC4167F"},{"vulnerable":true,"criteria":"cpe:2.3:a:quadcomm:q-shop:2.5:*:*:*:*:*:*:*","matchCriteriaId":"BB05B9BE-3BCE-40E0-864C-642DC073EFFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:quadcomm:q-shop:2.5_beta:*:*:*:*:*:*:*","matchCriteriaId":"00480860-FE38-4107-A157-20015F19046B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107488132208229&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10704","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Jan/1008837.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3698","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3699","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3700","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3701","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3702","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3703","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3704","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3705","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3706","source":"cve@mitre.org"},{"url":"http://www.s-quadra.com/advisories/Adv-20040123.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9481","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14922","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107488132208229&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2004/Jan/1008837.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3698","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3700","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3702","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s-quadra.com/advisories/Adv-20040123.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14922","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2109","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and steal the user session ID via Javascript in a URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:quadcomm:q-shop:2.0:*:*:*:*:*:*:*","matchCriteriaId":"9D08E518-BCCA-4855-813D-4FEC4E671C9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:quadcomm:q-shop:2.1:*:*:*:*:*:*:*","matchCriteriaId":"33D4BECA-5A38-48CA-8933-B8DF2DC4167F"},{"vulnerable":true,"criteria":"cpe:2.3:a:quadcomm:q-shop:2.5:*:*:*:*:*:*:*","matchCriteriaId":"BB05B9BE-3BCE-40E0-864C-642DC073EFFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:quadcomm:q-shop:2.5_beta:*:*:*:*:*:*:*","matchCriteriaId":"00480860-FE38-4107-A157-20015F19046B"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107488132208229&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10704","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3696","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3697","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9480","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14923","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107488132208229&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3696","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9480","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14923","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2110","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the hide_email parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4.5","matchCriteriaId":"1628D391-59B4-4D58-8409-5D099D45E8B4"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107487971405960&w=2","source":"cve@mitre.org"},{"url":"http://phorum.org/","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107487971405960&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://phorum.org/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2111","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1.0.3","matchCriteriaId":"75EF6508-446D-440A-B84A-CB79A7289248"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0CB703F7-4806-4E3F-850E-ACC127892899"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"D6E3F784-86CB-46FC-97FB-1F43F140C9ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"022E0AF9-48FA-41C4-A109-4A3284A721BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"397E88A4-9E82-4818-B176-1C049993F1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D7DD649F-E290-4E8E-B61F-3950A2157938"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:4.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"51BE6EDE-C7BC-4730-9602-160A027D8F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:4.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7DE0A612-CF94-4DBE-808C-AE4CA9DD2C3B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-01/0249.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=107513654005840&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008841","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9483","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9675","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14931","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-01/0249.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=107513654005840&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008841","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14931","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2112","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in BremsServer 1.2.4 allows remote attackers to read arbitrary files via \"..\" (dot dot) sequences in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:herberlin:bremsserver:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"028E34CE-F63F-4F5F-9F8F-5278EF41C546"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107513747107031&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10731","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3755","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9493","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1008853","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14954","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107513747107031&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1008853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14954","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2113","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:herberlin:bremsserver:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"028E34CE-F63F-4F5F-9F8F-5278EF41C546"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107513747107031&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10731","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3754","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9491","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1008853","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14953","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107513747107031&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1008853","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14953","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2114","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based and heap-based buffer overflows in ProxyNow! 2.75 and earlier allow remote attackers to execute arbitrary code via a GET request with a long ftp:// URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internetnow:proxynow:2.6:*:*:*:*:*:*:*","matchCriteriaId":"B5DC04C6-D0C4-4464-B7F2-674CC3038B5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:internetnow:proxynow:2.75:*:*:*:*:*:*:*","matchCriteriaId":"EE4633DA-1992-406B-B4C4-AE6378A62CB5"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107515550931508&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9500","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14955","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107515550931508&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9500","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14955","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2115","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:8.1.7:*:*:*:*:*:*:*","matchCriteriaId":"54FCC402-401B-4830-8181-78E49E1F1F72"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:9.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8B72A661-9EAA-4B9B-8865-17C8A29871BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:http_server:9.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7485BFF1-6863-4165-BE36-D656F39CF5EF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107496560106967&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9484","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14930","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107496560106967&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9484","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14930","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2116","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Tiny Server 1.1 allows remote attackers to read or download arbitrary files via a .. (dot dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tinyserver:tinyserver:1.1:*:*:*:*:*:*:*","matchCriteriaId":"3C825933-4274-4A6F-9C3D-4CE1C957D609"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107496530806730&w=2","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.com/files/129320/Tiny-Server-1.1.9-Arbitrary-File-Disclosure.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10707","source":"cve@mitre.org"},{"url":"http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3708","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9485","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14927","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99048","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107496530806730&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.com/files/129320/Tiny-Server-1.1.9-Arbitrary-File-Disclosure.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14927","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/99048","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2117","sourceIdentifier":"cve@mitre.org","published":"2004-01-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via malformed HTTP requests such as (1) a GET request without the HTTP version (HTTP/1.1), or (2) a request without GET or the HTTP version."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tinyserver:tinyserver:1.1:*:*:*:*:*:*:*","matchCriteriaId":"3C825933-4274-4A6F-9C3D-4CE1C957D609"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107496530806730&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10707","source":"cve@mitre.org"},{"url":"http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3709","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9485","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14928","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107496530806730&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2118","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via a GET request with a long filename, possibly due to a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tinyserver:tinyserver:1.1:*:*:*:*:*:*:*","matchCriteriaId":"3C825933-4274-4A6F-9C3D-4CE1C957D609"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107496530806730&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10707","source":"cve@mitre.org"},{"url":"http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9485","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14928","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107496530806730&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14928","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2119","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Tiny Server 1.1 allows remote attackers to inject arbitrary web script or HTML via the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tinyserver:tinyserver:1.1:*:*:*:*:*:*:*","matchCriteriaId":"3C825933-4274-4A6F-9C3D-4CE1C957D609"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107496530806730&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10707","source":"cve@mitre.org"},{"url":"http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3710","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9485","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14929","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107496530806730&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10707","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3710","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9485","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14929","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2120","sourceIdentifier":"cve@mitre.org","published":"2004-01-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Reptile Web Server allows remote attackers to cause a denial of service (CPU consumption) via multiple incomplete GET requests without the HTTP version."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:reptile_web_server:reptile_web_server:2002-01-05:*:*:*:*:*:*:*","matchCriteriaId":"CF6A4636-0B13-47F3-8F99-3C9ECE2AED36"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107497355713434&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008842","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.autistici.org/fdonato/advisory/reptilewsDailyVersion-adv.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9482","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14932","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107497355713434&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008842","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.autistici.org/fdonato/advisory/reptilewsDailyVersion-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9482","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14932","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2121","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot \"......\" sequences, or (2) \"%5c%2e%2e\" (encoded \"\\..\") sequences, in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:borland_software:web_server_for_corel_paradox:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0_b3","matchCriteriaId":"BD748E6D-5D99-4535-97D6-DB376C358242"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107497413413907&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008840","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9486","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14948","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107497413413907&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14948","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2122","sourceIdentifier":"cve@mitre.org","published":"2004-01-24T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in intraforum_db.cgi in Intra Forum allows remote attackers to inject arbitrary web script or HTML via the (1) use_last_read or (2) forum parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intra_forum:intra_forum:*:*:*:*:*:*:*:*","matchCriteriaId":"9E1065D9-546E-4B94-9E09-86D435DF00EF"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107497803617071&w=2","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008839","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14933","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107497803617071&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008839","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14933","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2123","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Nextplace.com E-Commerce ASP Engine allow remote attackers to inject arbitrary web script or HTML via the (1) level parameter of productdetail.asp, (2) searchKey parameter of searchresults.asp, and possibly (3) level parameter of ListCategories.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nextplace:e-commerce_asp_engine:*:*:*:*:*:*:*:*","matchCriteriaId":"D0747007-4747-4216-8FBF-59122BF4270C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107513601805018&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14952","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107513601805018&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14952","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2124","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP remote file inclusion attack via the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"D2DB56C3-40B6-42DB-8ABB-277BC60B7C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"017FB4AC-DCC3-404A-92D5-7F34205DBF05"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"133FA40B-D8DA-4F1B-9FDB-E70C3EDAAF03"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.4:*:*:*:*:*:*:*","matchCriteriaId":"B821AEB0-7C0C-407E-9CCB-EEB16E1A2719"},{"vulnerable":true,"criteria":"cpe:2.3:a:gallery_project:gallery:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"F517D6BA-9793-4A4D-BDC6-2F5349F0B354"}]}]}],"references":[{"url":"http://gallery.menalto.com/modules.php?op=modload&name=News&file=index","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=107524414317693&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10712/","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200402-04.xml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3737","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9490","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14950","source":"cve@mitre.org"},{"url":"http://gallery.menalto.com/modules.php?op=modload&name=News&file=index","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://marc.info/?l=bugtraq&m=107524414317693&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10712/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200402-04.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14950","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2125","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_agent_server:3.6eca:*:*:*:*:*:*:*","matchCriteriaId":"68D71B50-D280-4735-BFFE-2548C3117D70"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:3.6cbd:*:*:*:*:*:*:*","matchCriteriaId":"D62AC2AC-E7ED-498B-805F-2300B9793C2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_server_protection:3.6cbz:*:*:*:*:*:*:*","matchCriteriaId":"E33242A8-7BE6-4A69-A7CC-81BAFC2ADD50"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:3.6eca:*:*:*:*:*:*:*","matchCriteriaId":"CF2247F3-0287-40DC-8CE8-3D0E15910056"},{"vulnerable":true,"criteria":"cpe:2.3:a:iss:realsecure_desktop:7.0ebg:*:*:*:*:*:*:*","matchCriteriaId":"1F9233FA-D30A-4D0B-9605-CAA119C97CC9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/iss/2004-q1/0157.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107530966524193&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10739","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3740","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9514","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14965","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/iss/2004-q1/0157.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=107530966524193&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2126","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as (1) blackice.ini, (2) firewall.ini, (3) protect.ini, or (4) sigs.ini, which allows local users to modify BlackICE configuration or possibly execute arbitrary code by exploiting vulnerabilities in the .INI parsers."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iss:blackice_pc_protection:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6cbz","matchCriteriaId":"FE8F68BC-CCD1-475C-96DF-FF684D5AE823"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107530966524193&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9513","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107530966524193&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2127","sourceIdentifier":"cve@mitre.org","published":"2004-01-20T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leif_m._wright:web_blog:1.1:*:*:*:*:*:*:*","matchCriteriaId":"42CF0335-87F5-4789-90DB-CC44F99B5745"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107531194527602&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10740","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3739","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9517","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.zone-h.org/en/advisories/read/id=3822/","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14978","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107531194527602&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.zone-h.org/en/advisories/read/id=3822/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2128","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 allows remote attackers to execute arbitrary script as other users via the query string to ISAPISkeleton.dll."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:brs:webweaver:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A66705B4-C6CA-4478-95D4-89F203AB6FDA"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107531020924977&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10741","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.brswebweaver.com/modules.php?op=modload&name=News&file=article&sid=1","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3741","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9516","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1008880","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14977","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107531020924977&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.brswebweaver.com/modules.php?op=modload&name=News&file=article&sid=1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1008880","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14977","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2129","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SurfNOW 2.2 allows remote attackers to cause a denial of service (crash) via a series of long HTTP GET requests, possibly triggering a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:loom_software:surfnow_professional:1.2:*:*:*:*:*:*:*","matchCriteriaId":"785C9068-EA50-4EC4-A54A-EFA26571FF86"},{"vulnerable":true,"criteria":"cpe:2.3:a:loom_software:surfnow_professional:1.4:*:*:*:*:*:*:*","matchCriteriaId":"71FE7823-1F9D-4872-9814-40F480BA67FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:loom_software:surfnow_professional:1.5:*:*:*:*:*:*:*","matchCriteriaId":"A061EF0D-7D63-4067-B9B0-C6FD5507B36B"},{"vulnerable":true,"criteria":"cpe:2.3:a:loom_software:surfnow_professional:1.6:*:*:*:*:*:*:*","matchCriteriaId":"89A96E43-6856-41AF-BF04-F9623516167A"},{"vulnerable":true,"criteria":"cpe:2.3:a:loom_software:surfnow_professional:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2A694BB7-2471-4F3F-BD39-64A838A48388"},{"vulnerable":true,"criteria":"cpe:2.3:a:loom_software:surfnow_professional:2.1:*:*:*:*:*:*:*","matchCriteriaId":"FB5270AD-6F51-4809-BCA5-3B807C0566FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:loom_software:surfnow_professional:2.2:*:*:*:*:*:*:*","matchCriteriaId":"61330280-5A47-48F9-8500-651BC7B90FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:loom_software:surfnow_standard:1.2:*:*:*:*:*:*:*","matchCriteriaId":"1FE2F3EB-ADBF-4AB0-BCCF-06971CEC8FF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:loom_software:surfnow_standard:1.4:*:*:*:*:*:*:*","matchCriteriaId":"F692209C-BDDF-409D-B758-CEE94CCD6A11"},{"vulnerable":true,"criteria":"cpe:2.3:a:loom_software:surfnow_standard:1.5:*:*:*:*:*:*:*","matchCriteriaId":"A36CA146-12B8-4C30-A231-3F04846215DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:loom_software:surfnow_standard:1.6:*:*:*:*:*:*:*","matchCriteriaId":"468AAA83-DBF2-4E4E-89FB-773E82C0E4B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:loom_software:surfnow_standard:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8C613114-87BC-4BA2-BC0C-BCEF6631F1D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:loom_software:surfnow_standard:2.1:*:*:*:*:*:*:*","matchCriteriaId":"5DEB052B-5B44-4DC8-BB77-1C9793EE99BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:loom_software:surfnow_standard:2.2:*:*:*:*:*:*:*","matchCriteriaId":"DA816FDE-8875-49FF-9838-CCB4CBE07366"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107530924723559&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9519","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14976","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107530924723559&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9519","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14976","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2130","sourceIdentifier":"cve@mitre.org","published":"2004-12-23T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arbitrary script or HTML via the (1) folder or (2) mode variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A8F12660-10A7-4B66-94B0-954C9CD7D36C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107530946123822&w=2","source":"cve@mitre.org"},{"url":"http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9290","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107530946123822&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9290","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-2131","sourceIdentifier":"cve@mitre.org","published":"2004-01-27T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*","matchCriteriaId":"910D9A17-43A7-4F9E-98E0-2C465AC8BD2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*","matchCriteriaId":"1E61711D-4C3E-4A6D-89A8-85B7CDD7FAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_extended_parallel_server:8.40_uc1:*:*:*:*:*:*:*","matchCriteriaId":"E8EBF74C-A519-4C0E-B885-5C036047D610"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107539878804074&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10737/","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21153336","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9512","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14970","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107539878804074&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10737/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21153336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2132","sourceIdentifier":"cve@mitre.org","published":"2004-01-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in PJreview_Neo.cgi in PJ CGI Neo review allows remote attackers to read arbitrary files via a ..  (dot dot) in the p parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pj_cgi_neo_review:pj_cgi_neo_review:*:*:*:*:*:*:*:*","matchCriteriaId":"835C8655-3FA5-47E6-BB75-66D9074E4658"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107539804702913&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3746","source":"cve@mitre.org"},{"url":"http://www.secunia.com/advisories/10734/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9524","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zone-h.org/advisories/read/id=3824","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14980","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107539804702913&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3746","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secunia.com/advisories/10734/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zone-h.org/advisories/read/id=3824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2133","sourceIdentifier":"cve@mitre.org","published":"2004-01-29T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by causing cvsup to link against malicious libraries that are created in world-writable directories such as /usr/src/packages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cvsup:cvsup:cvsup-16.1h-2.i386.rpm:*:*:*:*:*:*:*","matchCriteriaId":"07629432-BEC4-442C-929B-5F11AC3A7C37"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvsup:cvsup:cvsup-16.1h-36.i586.rpm:*:*:*:*:*:*:*","matchCriteriaId":"1F9762EE-77FF-4F24-88F3-C21F10038A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cvsup:cvsup:cvsup-16.1h-43.i586.rpm:*:*:*:*:*:*:*","matchCriteriaId":"B93F581B-72AB-43CB-BF54-C1AB43E93248"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0025.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107539776002450&w=2","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9523","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14994","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0025.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107539776002450&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14994","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2134","sourceIdentifier":"cve@mitre.org","published":"2004-01-28T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CFAE1E8A-644B-42FD-B149-89AD420BD7A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8075E330-5819-4105-9BB7-4DCC3C0EAEF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"CB346764-EDF2-4BE1-A273-C2CE9A173CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E59B89D9-AAF9-40CB-931C-EB4958491B99"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C64888FB-133F-4930-8368-1BD2A4FB11A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.2.3:*:*:*:*:*:*:*","matchCriteriaId":"87DEB7BD-FB71-4C22-A0FF-89923B263DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BAAD1A33-4333-4AFB-8D49-1274AE345BA9"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107531028325112&w=2","source":"cve@mitre.org"},{"url":"http://www.planet-source-code.com/vb/scripts/ShowCode.asp?txtCodeId=803&lngWId=5","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/352315/30/21430/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/82/351719","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9515","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107531028325112&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.planet-source-code.com/vb/scripts/ShowCode.asp?txtCodeId=803&lngWId=5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/352315/30/21430/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/82/351719","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9515","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-2135","sourceIdentifier":"cve@mitre.org","published":"2004-05-26T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain \"IV computation\" weaknesses that allow watermarked files to be detected without decryption."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*","matchCriteriaId":"6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*","matchCriteriaId":"C5FE15BF-91C7-452A-BE1B-7EC9632421C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*","matchCriteriaId":"15C1923C-D9C4-400D-9F0F-20B519EEC9C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*","matchCriteriaId":"E51913F9-FC7D-450A-9A82-5084AA74A5B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*","matchCriteriaId":"B62E02D5-9EEE-439B-A510-BEEE28A9F358"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*","matchCriteriaId":"02278C07-E649-427D-9E5C-F1738A01BCBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*","matchCriteriaId":"E120257D-346B-4BA6-A431-E6F820FBB5FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*","matchCriteriaId":"361D407D-A4BE-491D-BC8E-32E78DC4A8F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*","matchCriteriaId":"4F83D55B-3106-4907-A75F-A7EBF0EC6974"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*","matchCriteriaId":"0AFD594E-48BA-4281-8DEE-306E3008ABB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*","matchCriteriaId":"A3CD7983-4EB2-4D17-9332-493ECBADC284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*","matchCriteriaId":"AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*","matchCriteriaId":"637A08D0-E382-4DE8-AEEC-6A53A72849B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*","matchCriteriaId":"2D3D2AA2-05B2-46E3-96EE-27EB29795E04"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D6F04081-D672-488E-A91D-5088DD04AA5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"9BDB59EF-74EF-462E-BC84-89201F734380"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"0755A136-3DE3-4B61-B5EF-F6282AACD38E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"B1531AD3-2525-4F6E-B77D-FE8863CBD3EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"81D950C3-0DDC-4549-99F8-1E206768219A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5C7E2A5B-6CF3-4748-BE4F-F63A4E59CB64"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.6:*:*:*:*:*:*:*","matchCriteriaId":"195A133A-26C9-401E-913F-285BA220D1D2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"B8D68E21-6C58-46A7-96F2-9A79DD880803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.8:*:*:*:*:*:*:*","matchCriteriaId":"1E975B63-3D9C-4FA9-A6D0-C9865FDA7AC5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.9:*:*:*:*:*:*:*","matchCriteriaId":"38D11B12-AFD7-4055-A366-D932CA1BA8C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.10:*:*:*:*:*:*:*","matchCriteriaId":"BC990132-9DF2-4D23-B9DA-0819809A3CAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.11:*:*:*:*:*:*:*","matchCriteriaId":"FFA51D40-E72C-40A4-B238-70F6806FA1B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.12:*:*:*:*:*:*:*","matchCriteriaId":"1E1B7D68-E41E-4A5A-9606-F14F057B39E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.13:*:*:*:*:*:*:*","matchCriteriaId":"7799A9CE-1948-4D71-BADB-A4A7ECAFF5FF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.14:*:*:*:*:*:*:*","matchCriteriaId":"70BCB10C-FD72-4F18-84C9-AE0603402426"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.15:*:*:*:*:*:*:*","matchCriteriaId":"54A74CAB-2BD1-48BC-BCEB-983E72B3C56D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.16:*:*:*:*:*:*:*","matchCriteriaId":"CF742FF1-5504-41BB-8FAA-D71B83C791B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.17:*:*:*:*:*:*:*","matchCriteriaId":"901C6D04-3226-4654-9A41-0325B48A2F7F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.18:*:*:*:*:*:*:*","matchCriteriaId":"072A77AD-BB27-4C24-91A0-A12D6E741593"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.19:*:*:*:*:*:*:*","matchCriteriaId":"BF900D1D-E351-4407-8269-80E5403432B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.20:*:*:*:*:*:*:*","matchCriteriaId":"44915F9F-88DF-4304-8F66-58A869654BDA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.21:*:*:*:*:*:*:*","matchCriteriaId":"4CC2D90D-2115-406C-B609-870B241F00B6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.22:*:*:*:*:*:*:*","matchCriteriaId":"EF681CC1-B3EC-467A-A10D-10840D3D4575"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.23:*:*:*:*:*:*:*","matchCriteriaId":"8660C030-328E-4221-847E-AC4BDA08CE79"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.24:*:*:*:*:*:*:*","matchCriteriaId":"0EE83E4E-DBA6-47EB-80FF-9A41A2978DDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.25:*:*:*:*:*:*:*","matchCriteriaId":"B58DE3A3-2BE0-45E3-8EFD-5A4439EAD6DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.26:*:*:*:*:*:*:*","matchCriteriaId":"47AEC277-F9A4-412F-B2EA-C1AEA336A46C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.27:*:*:*:*:*:*:*","matchCriteriaId":"7234AF29-BCDA-4728-A141-C169EE59CEC6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.28:*:*:*:*:*:*:*","matchCriteriaId":"E7D9064F-466F-4D66-AD5E-8BC2D31CD80D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.29:*:*:*:*:*:*:*","matchCriteriaId":"374851C5-C61D-4964-8B4A-473B0A008F11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.30:*:*:*:*:*:*:*","matchCriteriaId":"1FD55C81-3687-46BF-880E-58D7E005A185"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.31:*:*:*:*:*:*:*","matchCriteriaId":"2953267F-16BF-404F-83F1-73E0908979B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.32:*:*:*:*:*:*:*","matchCriteriaId":"9D953B61-3457-4A0E-A668-BA4937B79784"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.33:*:*:*:*:*:*:*","matchCriteriaId":"5F5F3607-C0DD-494C-AB6E-46E383A6B17D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.34:*:*:*:*:*:*:*","matchCriteriaId":"19138F52-25EA-42B6-89DC-692A8AF0A720"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.35:*:*:*:*:*:*:*","matchCriteriaId":"4C2EBADC-0817-4E38-9F49-8446D8A20CDE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.36:*:*:*:*:*:*:*","matchCriteriaId":"340368E7-0005-4F8A-8AF1-C20A1198288C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.37:*:*:*:*:*:*:*","matchCriteriaId":"0DC860DD-57DF-4474-AE2B-9AADB9060175"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.38:*:*:*:*:*:*:*","matchCriteriaId":"DC1D576A-0763-4611-B3CF-CD8514F18783"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.39:*:*:*:*:*:*:*","matchCriteriaId":"4A61F3C5-EA3A-4AA2-8F4E-02E07864801F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.40:*:*:*:*:*:*:*","matchCriteriaId":"6F570226-CA89-46F4-8C68-9A59BC0602A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.41:*:*:*:*:*:*:*","matchCriteriaId":"162A88DA-E2EA-4E92-B174-9AD86BE8D983"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.42:*:*:*:*:*:*:*","matchCriteriaId":"EBE19B6B-9537-4C76-80B2-98DAF2C15B5F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.43:*:*:*:*:*:*:*","matchCriteriaId":"5EE5C4F5-C64D-4714-B02E-689B435E3E5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.44:*:*:*:*:*:*:*","matchCriteriaId":"BE4F20D3-77E7-4FC2-AF18-6A5E3AE08615"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.45:*:*:*:*:*:*:*","matchCriteriaId":"164F4483-9F28-491A-8F99-4242C9B9CBD3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.46:*:*:*:*:*:*:*","matchCriteriaId":"34803A7D-45C4-4DBE-BF18-19CE9DE62A96"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.47:*:*:*:*:*:*:*","matchCriteriaId":"1178D6EE-A462-4CC1-B430-9A44C75D2336"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.48:*:*:*:*:*:*:*","matchCriteriaId":"4360530E-6E07-48F9-B8F8-B36622331052"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.49:*:*:*:*:*:*:*","matchCriteriaId":"17508D09-AE14-4458-93A2-E2764452EA8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.50:*:*:*:*:*:*:*","matchCriteriaId":"05F2CD4A-CCA9-4743-86C4-7675D2487E16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.51:*:*:*:*:*:*:*","matchCriteriaId":"75C1504C-03C5-49E4-8192-E1E698CF07A1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.52:*:*:*:*:*:*:*","matchCriteriaId":"DB7CB4B0-1CF5-4AA7-A977-9C24AD6C486D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.53:*:*:*:*:*:*:*","matchCriteriaId":"37A3172A-E663-42F6-90E7-51C3850AF9E0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.54:*:*:*:*:*:*:*","matchCriteriaId":"16F6692C-494F-44ED-97C6-A6CD05334DA7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.55:*:*:*:*:*:*:*","matchCriteriaId":"3B61C93E-84FE-46CE-A7DD-ACFEFB96BB62"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.56:*:*:*:*:*:*:*","matchCriteriaId":"5E79FB38-5AE5-4ACD-B4F5-F533C0E1D503"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.57:*:*:*:*:*:*:*","matchCriteriaId":"77231F8B-137F-4FAE-BCD9-658F32943CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.58:*:*:*:*:*:*:*","matchCriteriaId":"552ED77A-F09A-4923-A907-8E0DF8445363"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.59:*:*:*:*:*:*:*","matchCriteriaId":"CDD8EDD0-7817-4A5E-AE97-DA1941E859BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.60:*:*:*:*:*:*:*","matchCriteriaId":"5DF940EA-676A-42C8-A6E0-7F53C8A34340"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.61:*:*:*:*:*:*:*","matchCriteriaId":"BDC8FDE8-DB5A-4B2D-810D-73E91194E00E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.62:*:*:*:*:*:*:*","matchCriteriaId":"5CF7304E-AAA9-4BC3-AEF0-C9509E95ECA9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.63:*:*:*:*:*:*:*","matchCriteriaId":"29DCCFB1-054F-4BF0-92F1-78A2063415D7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.64:*:*:*:*:*:*:*","matchCriteriaId":"D3D3222C-7469-42F6-984D-3223BCD8080E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.65:*:*:*:*:*:*:*","matchCriteriaId":"697B7069-D08D-41BD-8285-A1ABA0E1142F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.66:*:*:*:*:*:*:*","matchCriteriaId":"72173CFB-BAB6-456C-B5F2-3AA31D799E74"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.67:*:*:*:*:*:*:*","matchCriteriaId":"FDD08A67-195F-431B-98A5-42B2966055DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.68:*:*:*:*:*:*:*","matchCriteriaId":"658C7317-D50B-475A-9E0E-E68AECD49B5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.5.69:*:*:*:*:*:*:*","matchCriteriaId":"1270F454-8E05-413C-BAF4-35D062CA5803"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A0934C49-5F88-4189-BD88-2F32C39C2F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*","matchCriteriaId":"14B0A230-4054-4483-A3A7-9A5A286C7552"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*","matchCriteriaId":"F90242EF-048B-4539-AA41-87AA84875A9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*","matchCriteriaId":"3C4E9325-2A70-4E15-9AAF-5588BF218055"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*","matchCriteriaId":"01402A85-B681-4DE0-B7BB-F52567DA29E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*","matchCriteriaId":"1FC53528-A67F-42DF-B8DA-778A65893F9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:rc2:*:*:*:*:*:*","matchCriteriaId":"4B130EB7-A951-4717-A906-E2F602F7B69F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*","matchCriteriaId":"9D90502F-EC45-4ADC-9428-B94346DA660B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc2:*:*:*:*:*:*","matchCriteriaId":"2422569B-02ED-4028-83D8-D778657596B7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc3:*:*:*:*:*:*","matchCriteriaId":"E66E4653-1A55-4827-888B-E0776E32ED28"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11:rc4:*:*:*:*:*:*","matchCriteriaId":"6C8994CB-7F94-43FB-8B84-06AEBB34EAE0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*","matchCriteriaId":"5F87AA89-F377-4BEB-B69F-809F5DA6176C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*","matchCriteriaId":"C27AF62E-A026-43E9-89E6-CD807CE9DF51"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*","matchCriteriaId":"79C2AE0E-DAE8-4443-B33F-6ABA9019AA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*","matchCriteriaId":"D343B121-C007-49F8-9DE8-AA05CE58FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*","matchCriteriaId":"6AC88830-A9BC-4607-B572-A4B502FC9FD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"}]}]}],"references":[{"url":"http://marc.info/?l=linux-kernel&m=107719798631935&w=2","source":"cve@mitre.org"},{"url":"http://mareichelt.de/pub/notmine/diskenc.pdf","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/exploits/5UP0P1PFPM.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13775","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=linux-kernel&m=107719798631935&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mareichelt.de/pub/notmine/diskenc.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/exploits/5UP0P1PFPM.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-2136","sourceIdentifier":"cve@mitre.org","published":"2004-02-19T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"dm-crypt on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain \"IV computation\" weaknesses that allow watermarked files to be detected without decryption."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"}]}]}],"references":[{"url":"http://marc.info/?l=linux-kernel&m=107719798631935&w=2","source":"cve@mitre.org"},{"url":"http://mareichelt.de/pub/notmine/diskenc.pdf","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/exploits/5UP0P1PFPM.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=linux-kernel&m=107719798631935&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mareichelt.de/pub/notmine/diskenc.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/exploits/5UP0P1PFPM.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-2137","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Outlook Express 6.0, when sending multipart e-mail messages using the \"Break apart messages larger than\" setting, leaks the BCC recipients of the message to the addresses listed in the To and CC fields, which may allow remote attackers to obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*","matchCriteriaId":"85FD3557-956D-4A96-8AA5-5FD9DB87FD11"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"D45F2775-A10B-4834-A2EF-7498EEAB155D"}]}]}],"references":[{"url":"http://secunia.com/advisories/12376","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011067","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.microsoft.com/kb/843555","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.networksecurity.fi/advisories/outlook-bcc.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9167","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11040","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17098","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.microsoft.com/kb/843555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.networksecurity.fi/advisories/outlook-bcc.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9167","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17098","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2138","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in AWSguest.php in AllWebScripts MySQLGuest allows remote attackers to inject arbitrary HTML and PHP code via the (1) Name, (2) Email, (3) Homepage or (4) Comments field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:allwebscripts:mysqlguest:*:*:*:*:*:*:*:*","matchCriteriaId":"0DFFA849-219B-4649-B78E-47659C0CBB54"}]}]}],"references":[{"url":"http://securitytracker.com/id?1011376","source":"cve@mitre.org"},{"url":"http://www.computerknights.org/forum_viewtopic.php?2.122","source":"cve@mitre.org","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/11234","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17462","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011376","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.computerknights.org/forum_viewtopic.php?2.122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/11234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17462","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2139","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Adminedit.pl YaBB 1 Gold before 1.3.2 allows attackers to execute arbitrary code via settings.pl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3:*:*:*:*:*:*:*","matchCriteriaId":"29C236ED-4AD6-427F-B077-0E918FC47986"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1D28B213-1BC7-4FB1-84B1-31A5EB87F886"}]}]}],"references":[{"url":"http://secunia.com/advisories/12609/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/10222","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11235","source":"cve@mitre.org"},{"url":"http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17459","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12609/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/10222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17459","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2140","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in YaBB 1 Gold before 1.3.2 allows remote attackers to modify text file contents via the subject variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3:*:*:*:*:*:*:*","matchCriteriaId":"29C236ED-4AD6-427F-B077-0E918FC47986"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1D28B213-1BC7-4FB1-84B1-31A5EB87F886"}]}]}],"references":[{"url":"http://secunia.com/advisories/12609/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12609/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2141","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2023-11-07T01:57:01.147","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-1827.  Reason: This candidate is a duplicate of CVE-2004-1827.  Notes: All CVE users should reference CVE-2004-1827 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-2142","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the remote tape support (remote.c) in the RMT client for Jorg Schilling sdd 1.28 and 1.31 has unknown impact and attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jorg_schilling:sdd:1.28:*:*:*:*:*:*:*","matchCriteriaId":"9211E518-59B0-4E2C-B932-4BB369DE4409"},{"vulnerable":true,"criteria":"cpe:2.3:a:jorg_schilling:sdd:1.31:*:*:*:*:*:*:*","matchCriteriaId":"38C9306F-159C-4AA1-8DBE-A21F2BA45A7B"}]}]}],"references":[{"url":"ftp://ftp.berlios.de/pub/sdd/AN-1.52","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12584/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17442","source":"cve@mitre.org"},{"url":"ftp://ftp.berlios.de/pub/sdd/AN-1.52","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12584/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17442","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2143","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09) and earlier allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in the com_remository option."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mambo:mambo_portal:*:*:*:*:*:*:*:*","versionEndIncluding":"4.5.1_1.0.9","matchCriteriaId":"2DDF773E-9D3D-4952-A62F-9FB73E97F8CB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-09/0215.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-09/0249.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12597/","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011356","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.mamboportal.com/content/view/1615/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/10040","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11219","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17441","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-09/0215.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-09/0249.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12597/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011356","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.mamboportal.com/content/view/1615/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/10040","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17441","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2144","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Baal Smart Forms before 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-425"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:baalsystems:baal_smart_forms:*:*:*:*:*:*:*:*","versionEndExcluding":"3.2","matchCriteriaId":"0CDB35C3-3ABA-4772-A3E7-58E981F97BF1"}]}]}],"references":[{"url":"http://secunia.com/advisories/12649/","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011416","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17499","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/12649/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2145","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows remote attackers to execute arbitrary SQL commands via the (1) sortdir or (2) criteria parameter to ladder-log.asp or the (3) memberid or (4) teamid parameter to view-profile.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pd9_software:megabbs:2:*:*:*:*:*:*:*","matchCriteriaId":"EF76DFD7-70E8-4437-8088-C0AB17B620A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pd9_software:megabbs:2.1:*:*:*:*:*:*:*","matchCriteriaId":"76865EDA-44F1-467E-9AA2-39017EB73868"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0962.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109631200701134&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17497","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0962.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109631200701134&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2146","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attacks via the fid parameter in a writenew action to thread-post.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pd9_software:megabbs:2:*:*:*:*:*:*:*","matchCriteriaId":"EF76DFD7-70E8-4437-8088-C0AB17B620A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:pd9_software:megabbs:2.1:*:*:*:*:*:*:*","matchCriteriaId":"76865EDA-44F1-467E-9AA2-39017EB73868"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0962.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109631200701134&w=2","source":"cve@mitre.org"},{"url":"http://www.pd9soft.com/megabbs/forums/thread-view.asp?tid=4924","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17495","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0962.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109631200701134&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pd9soft.com/megabbs/forums/thread-view.asp?tid=4924","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17495","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2147","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a denial of service (crash) via malformed e-mail messages (1) without a body or (2) without a carriage return (\"\\n\") separating the headers from the body."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2.1:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"A9415109-C554-40F6-851E-CC016951BDF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2001:*:*:*:*:*:*:*","matchCriteriaId":"19595AF4-8C85-4646-B42B-4B5863798AB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:*","matchCriteriaId":"8F6F3B3C-7C60-4A38-91F0-E09148DB4FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:2003:*:*:*:*:*:*:*","matchCriteriaId":"34B1D862-2CB4-4D50-9BBA-0507FEAA1924"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:corporate_7.0:*:*:*:*:*:*:*","matchCriteriaId":"FBB23AB8-EA3E-4749-9FD2-4FD4E10E0195"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:corporate_7.2:*:*:*:*:*:*:*","matchCriteriaId":"25852A39-DCB8-4EBC-A422-BAC59C4CBE0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:corporate_7.5:*:*:*:*:*:*:*","matchCriteriaId":"0055CC22-AE2D-491F-B2D0-C105EC7B8E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:corporate_7.6:*:*:*:*:*:*:*","matchCriteriaId":"62448809-BC4E-4F56-9531-3B756AA02BCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:corporate_7.51:*:*:*:*:*:*:*","matchCriteriaId":"B04C5A60-588C-418A-915E-3E8995A4DC25"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:corporate_7.60.build_926:*:*:*:*:*:*:*","matchCriteriaId":"392B5DCB-4CBE-40AC-B57E-980EBAC47724"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:corporate_7.61:*:*:*:*:*:*:*","matchCriteriaId":"59D68A94-DC46-4014-9840-0FEF32FB1886"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:corporate_8.0:*:*:*:*:*:*:*","matchCriteriaId":"207B1907-C8C0-4DEE-9AA2-643EE6FFE6FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:professional_2001:*:*:*:*:*:*:*","matchCriteriaId":"81A399DB-F782-4BF3-9713-935CEF66EF58"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:professional_2002:*:*:*:*:*:*:*","matchCriteriaId":"0D5BF9C3-68D1-4A18-8939-8B3A406BD89F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:professional_2003:*:*:*:*:*:*:*","matchCriteriaId":"45F11F92-A2F4-4B66-9CE3-EB11694E0608"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:norton_antivirus:professional_2004:*:*:*:*:*:*:*","matchCriteriaId":"51F3761A-5688-4E72-80FE-0F150C2C2707"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/82/376487/2004-09-24/2004-09-30/0","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11259","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/82/376487/2004-09-24/2004-09-30/0","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11259","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2148","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown local vulnerability in the \"change user\" feature of Slava Astashonok Fprobe 1.0.5 and earlier has unknown impact and attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:slava_astashonok:fprobe:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7B2DE663-E09A-416B-B86C-6EC9203A80C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:slava_astashonok:fprobe:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A30FB436-C152-4643-BC36-4FB2F438BD3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:slava_astashonok:fprobe:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1D423AE0-8924-4CDD-AF4E-BCB040F45D29"},{"vulnerable":true,"criteria":"cpe:2.3:a:slava_astashonok:fprobe:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"DBDA6654-4CF5-49FF-BDD0-E0AE4A84F316"},{"vulnerable":true,"criteria":"cpe:2.3:a:slava_astashonok:fprobe:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"8C47774F-D38C-498E-A03A-D34744F82099"},{"vulnerable":true,"criteria":"cpe:2.3:a:slava_astashonok:fprobe:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"3F42B044-0D28-41B6-919D-4C3BF32FE784"}]}]}],"references":[{"url":"http://secunia.com/advisories/12648/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011417","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=269807","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11255","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17494","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12648/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=269807","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17494","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2149","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the prepared statements API in libmysqlclient for MySQL 4.1.3 beta and 4.1.4 allows remote attackers to cause a denial of service via a large number of placeholders."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.3:beta:*:*:*:*:*:*","matchCriteriaId":"14DDA057-D211-42BD-B8AF-F250F1C5B88C"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:mysql:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"32CA2F70-77E4-4280-B845-4CE5774162C9"}]}]}],"references":[{"url":"http://bugs.mysql.com/bug.php?id=5194","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://dev.mysql.com/doc/mysql/en/news-4-1-5.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011408","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/10244","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11261","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17493","source":"cve@mitre.org"},{"url":"http://bugs.mysql.com/bug.php?id=5194","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://dev.mysql.com/doc/mysql/en/news-4-1-5.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/10244","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11261","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17493","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2150","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nettica Corporation INTELLIPEER Email Server 1.01 displays different error messages for valid and invalid account names, which allows remote attackers to determine valid account names."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nettica:intellipeer_email_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.01","matchCriteriaId":"93482DF0-19CA-4DDF-B074-4018C16AAE9A"}]}]}],"references":[{"url":"http://secunia.com/advisories/12661/","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011425","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/10349","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/11257","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17510","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/12661/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011425","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/10349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/11257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17510","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2151","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Chatman 1.1.1 RC1 and earlier allows remote attackers to cause a denial of service (memory consumption or application crash) via a very large data size."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_projects:chatman:1.0.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"BAFEF1D0-5FC0-4541-8197-6548E2BED59C"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_projects:chatman:1.0.2_beta:*:*:*:*:*:*:*","matchCriteriaId":"BEE55EAE-076A-44B8-926B-9193C456CB55"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_projects:chatman:1.0.3_beta:*:*:*:*:*:*:*","matchCriteriaId":"5BCC47C2-7ACF-426C-902A-B685EF0AD345"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_projects:chatman:1.0.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"0CA13012-E443-4200-B092-6088D4200B2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_projects:chatman:1.1.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"78182034-2ADC-43F2-9AD1-3570C9406898"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_projects:chatman:1.1.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"B38AD148-5ACC-4157-8B7E-0982504B573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_projects:chatman:1.1.2_beta:*:*:*:*:*:*:*","matchCriteriaId":"62CB5531-FD80-4C79-8D2C-7A7B74E3E02D"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_projects:chatman:1.1.3_beta:*:*:*:*:*:*:*","matchCriteriaId":"11E6BDE7-D896-4474-B628-69645FD17566"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_projects:chatman:1.1.4_beta:*:*:*:*:*:*:*","matchCriteriaId":"05208F71-C594-4841-8F09-8E15D0FF743F"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_projects:chatman:1.1.5_beta:*:*:*:*:*:*:*","matchCriteriaId":"95A2CE6B-9A95-497A-98DA-62DF34B92DC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_projects:chatman:1.2.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"80D33D1A-C1CA-415D-BC2D-7B5476FB2BC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_projects:chatman:1.3.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"BAE1FF42-105A-4AEA-9F55-953D74F2ADCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_projects:chatman:1.3.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"9DE1ADAE-8B5E-4064-A3AA-908A580B5634"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_projects:chatman:1.4.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"3B97CF4F-8BA6-4236-BDEC-302CD061C936"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_projects:chatman:1.5.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"4087D37B-D540-479C-8E57-4FDE785D4E38"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_projects:chatman:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"14307C0C-7900-4E4E-AED3-E9346B9E031E"}]}]}],"references":[{"url":"http://secunia.com/advisories/12665/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011431","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/10365","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/376569","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11263","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17513","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12665/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/10365","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/376569","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11263","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17513","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2152","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in 'raw' page output mode for MediaWiki 1.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1C96D337-1D37-4ADE-871D-9829928EE80B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"1DFB843C-4513-4569-9746-DA9FDD7A5CD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"377F0F7A-8E50-4803-9670-F719D17400D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"4B4CCA5C-3594-41B4-99F3-FC99BA0495BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"AD0A0C81-CDB6-4A11-B6B0-DECB12558DE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"40BD0855-A9C8-47CD-BB50-E422E0C4A1EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"42A9DCC7-CF58-44CC-9489-51FA79EECDF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"80D651C6-116D-448A-8569-BAB9BAEC7D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"30F54837-5004-4D10-B3B0-502CED4F6592"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A09F36C1-CBC0-489E-B62D-4590A2E5A4E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"A9F0067D-534A-4238-A244-D92A73845432"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"3BEC422E-49BC-41D4-9F71-B834D4108EF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"6D854161-28AA-4386-B90A-97F9692CE37F"}]}]}],"references":[{"url":"http://secunia.com/advisories/12692/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=34373&release_id=271848","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/10454","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11302","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17578","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12692/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=34373&release_id=271848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/10454","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17578","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2153","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unknown vulnerabilities in Real Estate Management Software 1.0 have unknown impact and attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:real_estate_management_software:real_estate_management_software:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CE8FD3FF-D272-4314-9697-D5A00049289E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2004-09/0030.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12721","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/10480","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11304","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17598","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2004-09/0030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/10480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17598","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2154","sourceIdentifier":"secalert@redhat.com","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-178"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-178"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*","versionEndExcluding":"1.1.21","matchCriteriaId":"5F835149-D8DC-4086-8A1A-6DA6F0B1641F"},{"vulnerable":true,"criteria":"cpe:2.3:a:apple:cups:1.1.21:-:*:*:*:*:*:*","matchCriteriaId":"1AE87AA4-1F4C-46CC-8365-6390B5E9C2D7"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:canonical:ubuntu_linux:4.10:*:*:*:*:*:*:*","matchCriteriaId":"778A6957-455B-420A-BAAF-E7F88FF4FB1E"}]}]}],"references":[{"url":"http://www.cups.org/str.php?L700","source":"secalert@redhat.com","tags":["Broken Link","Patch"]},{"url":"http://www.novell.com/linux/security/advisories/2005_18_sr.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-571.html","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-185-1","source":"secalert@redhat.com","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162405","source":"secalert@redhat.com","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=163274","source":"secalert@redhat.com","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9940","source":"secalert@redhat.com","tags":["Broken Link"]},{"url":"http://www.cups.org/str.php?L700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.novell.com/linux/security/advisories/2005_18_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-571.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.ubuntu.com/usn/usn-185-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=163274","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9940","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]}]}},{"cve":{"id":"CVE-2004-2155","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Online-bookmarks before 0.4.6 allows remote attackers to bypass its authentication mechanism via a direct request to (1) config/*, (2) bookmarks.php, (3) footer.php, (4) main.php, (5) tree.php, or (6) functions.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:online-bookmarks:web_based_bookmark_application:0.4:*:*:*:*:*:*:*","matchCriteriaId":"87936C6D-C761-460C-B444-F78ED9384A55"},{"vulnerable":false,"criteria":"cpe:2.3:a:online-bookmarks:web_based_bookmark_application:0.4.2:*:*:*:*:*:*:*","matchCriteriaId":"9C1A9A08-A7B2-4BCC-A2A9-ADEC681A64B3"},{"vulnerable":false,"criteria":"cpe:2.3:a:online-bookmarks:web_based_bookmark_application:0.4.4:*:*:*:*:*:*:*","matchCriteriaId":"358F0A3D-9497-4733-B2C2-FC78AE444253"}]}]}],"references":[{"url":"http://freshmeat.net/projects/onlinebookmarks/?branch_id=34962&release_id=174401","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12728/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11305","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17602","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/onlinebookmarks/?branch_id=34962&release_id=174401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12728/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17602","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2156","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unknown vulnerabilities in Online Recruitment Agency 1.0 have unknown impact and attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:recruitment_agency_software:online_recruitment_agency:1.0:*:*:*:*:*:*:*","matchCriteriaId":"2F034201-4E2A-44DB-BE37-4046D34EA829"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2004-09/0030.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/12720/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011539","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10479","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11306","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17586","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2004-09/0030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/12720/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10479","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17586","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2157","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Comment.php in Serendipity 0.7 beta1, and possibly other versions before 0.7-beta3, allows remote attackers to inject arbitrary HTML and PHP code via the (1) email or (2) username field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7_beta1:*:*:*:*:*:*:*","matchCriteriaId":"62C28957-2724-406D-BAD4-DDCDE8CFA843"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026955.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12673/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011448","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/11269","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17536","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026955.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12673/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/11269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17536","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2158","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Serendipity 0.7-beta1 allows remote attackers to execute arbitrary SQL commands via the entry_id parameter to (1) exit.php or (2) comment.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7_beta1:*:*:*:*:*:*:*","matchCriteriaId":"62C28957-2724-406D-BAD4-DDCDE8CFA843"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026955.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12673/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011448","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/10370","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10371","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11269","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17533","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026955.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12673/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/10370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17533","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2159","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in XMLStarlet Command Line XML Toolkit 0.9.3 have unknown impact and attack vectors via (1) xml_elem.c and (2) xml_select.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlstarlet:command_line_xml_toolkit:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9F39B59D-2315-4121-8399-77B81C7D7EE4"}]}]}],"references":[{"url":"http://securitytracker.com/id?1011496","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=268962","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/10074","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11270","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17580","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=268962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/10074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17580","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2160","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in xml_elem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmlstarlet:command_line_xml_toolkit:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"9F39B59D-2315-4121-8399-77B81C7D7EE4"}]}]}],"references":[{"url":"http://cvs.sourceforge.net/viewcvs.py/xmlstar/xmlstarlet/src/xml_elem.c?r1=1.17&r2=1.18","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=268962","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://cvs.sourceforge.net/viewcvs.py/xmlstar/xmlstarlet/src/xml_elem.c?r1=1.17&r2=1.18","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=268962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2161","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the link_id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tutos:tutos:1.1_2004-04-14:*:*:*:*:*:*:*","matchCriteriaId":"01DB9B96-D962-492B-8AB9-6CFEB0B7CA79"}]}]}],"references":[{"url":"http://cvs.sourceforge.net/viewcvs.py/tutos/tutos/php/file/file_overview.php?r1=1.11.2.1&r2=1.11.2.2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12606/","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/18954","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011363","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-980","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10164","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/375757","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11221","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17444","source":"cve@mitre.org"},{"url":"http://cvs.sourceforge.net/viewcvs.py/tutos/tutos/php/file/file_overview.php?r1=1.11.2.1&r2=1.11.2.2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12606/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/18954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/375757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2162","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the search field of the Address Module or (2) the t parameter to app_new.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tutos:tutos:1.1_2004-04-14:*:*:*:*:*:*:*","matchCriteriaId":"01DB9B96-D962-492B-8AB9-6CFEB0B7CA79"}]}]}],"references":[{"url":"http://cvs.sourceforge.net/viewcvs.py/tutos/tutos/php/app_new.php?r1=1.58&r2=1.59","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12606/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/18954","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-980","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/375757","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11221","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17445","source":"cve@mitre.org"},{"url":"http://cvs.sourceforge.net/viewcvs.py/tutos/tutos/php/app_new.php?r1=1.58&r2=1.59","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12606/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/18954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/375757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11221","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17445","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2163","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote attackers to bypass authentication by spoofing server replies."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1957B3C0-7F25-469B-BC3F-7B09260837ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0058.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12617","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata35.html#radius","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/10203","source":"cve@mitre.org"},{"url":"http://www.reseau.nl/advisories/0400-openbsd-radius.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11227","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17456","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0058.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12617","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.openbsd.org/errata35.html#radius","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/10203","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.reseau.nl/advisories/0400-openbsd-radius.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17456","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2164","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"shoprestoreorder.asp in VP-ASP 5.0 does not close the database connection when a user restores a previous order, which allows remote attackers to cause a denial of service (connection consumption)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_programming:vp-asp:5.0:*:*:*:*:*:*:*","matchCriteriaId":"AD70583E-49D6-4C31-B8B6-FA9ED0F65DFF"}]}]}],"references":[{"url":"http://secunia.com/advisories/12611","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10071","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11228","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/alerts/2004/Sep/1011359.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vpasp.com/virtprog/info/faq_securityfixes.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17436","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12611","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11228","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/alerts/2004/Sep/1011359.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vpasp.com/virtprog/info/faq_securityfixes.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2165","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Lords of the Realm III 1.01 and earlier, when in the lobby stage, allows remote attackers to cause a denial of service (crash from unallocated memory write) via a long user nickname."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:impressions_games:lords_of_the_realm_iii:*:*:*:*:*:*:*:*","versionEndIncluding":"1.01","matchCriteriaId":"3D89CDA4-E2ED-499B-BE63-6C24C683CF6B"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/lotr3boom-adv.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://seclists.org/lists/fulldisclosure/2004/Sep/0660.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12589/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011361","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10078","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11223","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17438","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/lotr3boom-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://seclists.org/lists/fulldisclosure/2004/Sep/0660.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12589/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011361","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11223","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17438","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2166","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The print-from-email feature in the Canon ImageRUNNER (iR) 5000i and C3200 digital printer, when not using IP address range filtering, allows remote attackers to print arbitrary text without authentication via a text/plain email to TCP port 25."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner_5000i:*:*:*:*:*:*:*:*","matchCriteriaId":"83EB4A89-5470-4B7E-B09D-3CC1D7CC7F4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:canon:imagerunner_c3200:*:*:*:*:*:*:*:*","matchCriteriaId":"714DD889-AFDB-4300-9A72-F46A6263733C"}]}]}],"references":[{"url":"http://secunia.com/advisories/12659/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/376242","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11247","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17512","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12659/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/376242","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11247","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17512","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2167","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via (1) the expandmacro function, and possibly (2) Environments and (3) TranslateCommand."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:latex2rtf:latex2rtf:1.9.15:*:*:*:*:*:*:*","matchCriteriaId":"C0EE5020-FDD7-47B7-9208-CEDDF36D6D8F"}]}]}],"references":[{"url":"http://cvs.sourceforge.net/viewcvs.py/latex2rtf/latex2rtf/definitions.c?rev=1.22&view=log","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=10216","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11233","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securitytracker.com/alerts/2004/Sep/1011367.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17460","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17487","source":"cve@mitre.org"},{"url":"http://cvs.sourceforge.net/viewcvs.py/latex2rtf/latex2rtf/definitions.c?rev=1.22&view=log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=10216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securitytracker.com/alerts/2004/Sep/1011367.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2168","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BaSoMail 1.24 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections to TCP port (1) 25 (SMTP) or (2) 110 (POP3)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:baardsen_software:basomail_server:1.24:*:*:*:*:*:*:*","matchCriteriaId":"04F4775A-EABA-4726-8963-F0CBA97BB672"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/Baso_mail/Baso_1.24.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1008912","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3789","source":"cve@mitre.org"},{"url":"http://www.secunia.com/advisories/10761/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15002","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/Baso_mail/Baso_1.24.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1008912","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3789","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secunia.com/advisories/10761/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15002","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2169","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Application Access Server (A-A-S) 1.0.37 and earlier allows remote authenticated users to cause a denial of service (application crash) via a long file request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:a-a-s_application_access_server:a-a-s_application_access_server:1.0.37:*:*:*:*:*:*:*","matchCriteriaId":"B3D6474B-C12E-4F39-A53A-F11A99E6D849"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/A-A-S/AAS1_0_3.TXT","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.secunia.com/advisories/10762/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15003","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/A-A-S/AAS1_0_3.TXT","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.secunia.com/advisories/10762/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15003","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2170","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in sample_showcode.html in Caravan 2.00/03d and earlier allows remote attackers to read arbitrary files via the fname parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:niti_telecom:caravan_business_server:2.00-03d:*:*:*:*:*:*:*","matchCriteriaId":"328E1675-BFAE-4D13-B762-77AF7AA96F5C"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/Caravan/Caravan.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008913","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3787","source":"cve@mitre.org"},{"url":"http://www.secunia.com/advisories/10763/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9555","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15004","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/Caravan/Caravan.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008913","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3787","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secunia.com/advisories/10763/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15004","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2171","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting error page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.1:*:*:*:*:*:*:*","matchCriteriaId":"457F777C-8D4C-452D-99CA-0E4CFC138329"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"94AA7EEB-1C4B-46AB-AD24-BE9792C25EBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"F0683D6F-D6D9-4FC2-9998-75835360BC37"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.2:*:*:*:*:*:*:*","matchCriteriaId":"59A280D4-7FD9-4304-8C3C-2C0B2056D652"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C05C1EF5-92D1-4CA2-99F9-BF51B5435028"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.2.6:*:*:*:*:*:*:*","matchCriteriaId":"7C954154-BADA-4C53-A957-A118747C503A"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.2.7:*:*:*:*:*:*:*","matchCriteriaId":"05E355F5-54EB-4C99-B1F6-CEE94F023155"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.4.6:*:*:*:*:*:*:*","matchCriteriaId":"4077B4B5-A47F-43A5-9A65-E05BA5C4F735"},{"vulnerable":true,"criteria":"cpe:2.3:a:cherokee:cherokee_httpd:0.4.7:*:*:*:*:*:*:*","matchCriteriaId":"A47CC514-2FE0-43CE-ADD6-3CC89EF4E8B9"}]}]}],"references":[{"url":"http://secunia.com/advisories/10701/","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/3707","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9496","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14936","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10701/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/3707","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14936","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2172","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-326"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netsourcecommerce:productcart:*:*:*:*:*:*:*:*","versionEndExcluding":"2.53","matchCriteriaId":"1464CA9B-AA47-414A-8DD0-6D95E1A2819B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0503.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0871.html","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10898","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://securitytracker.com/alerts/2004/Feb/1009085.html","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.earlyimpact.com/productcart/support/updates/ReadMe_ProductCart_Security_Patch_013004.txt","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.osvdb.org/3979","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.s-quadra.com/advisories/Adv-20040216.txt","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/354288","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9669","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15231","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0503.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0871.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://securitytracker.com/alerts/2004/Feb/1009085.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.earlyimpact.com/productcart/support/updates/ReadMe_ProductCart_Security_Patch_013004.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.osvdb.org/3979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.s-quadra.com/advisories/Adv-20040216.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/354288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2173","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in advSearch_h.asp in EarlyImpact ProductCart allows remote attackers to execute arbitrary SQL commands via the priceUntil parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.5:*:*:*:*:*:*:*","matchCriteriaId":"187A49C7-29D2-4288-BC2C-1C341970DA3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6b:*:*:*:*:*:*:*","matchCriteriaId":"95937001-3EE3-433D-B713-582E996F0519"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6b001:*:*:*:*:*:*:*","matchCriteriaId":"36E8BEC1-2B71-4276-A4D9-6E9E4AB386BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6b002:*:*:*:*:*:*:*","matchCriteriaId":"3F73F4B7-552A-4B39-AE4E-9719E54EC127"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6b003:*:*:*:*:*:*:*","matchCriteriaId":"621827C0-88A6-4401-9089-11C69A6415D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6br:*:*:*:*:*:*:*","matchCriteriaId":"8E656346-5C64-4728-99AA-788E907EC102"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6br001:*:*:*:*:*:*:*","matchCriteriaId":"A41B3128-5AAB-4569-9671-C414B00750D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6br003:*:*:*:*:*:*:*","matchCriteriaId":"02478E47-A2DC-46D3-9688-1C169E53D061"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.5002:*:*:*:*:*:*:*","matchCriteriaId":"4BA9179C-B8E8-4AD8-96A3-C5A266CF3A6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.5003:*:*:*:*:*:*:*","matchCriteriaId":"2633071B-D162-4F9B-962F-849AC7787A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.5003r:*:*:*:*:*:*:*","matchCriteriaId":"8963787A-0A12-4817-9131-75D25A2701E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.5004:*:*:*:*:*:*:*","matchCriteriaId":"3CA232AA-BDD2-4B9A-8AB8-E4B1C507C807"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6002:*:*:*:*:*:*:*","matchCriteriaId":"A8468FBB-4275-4051-9499-896EA3B2E53B"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6003:*:*:*:*:*:*:*","matchCriteriaId":"D013E775-C9FE-46E1-8DF3-414306EE7826"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1D025C09-267E-4510-9462-88220B421AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:2.0br000:*:*:*:*:*:*:*","matchCriteriaId":"92BC3955-F17C-49B2-B833-F39BB7844BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:2.5:*:*:*:*:*:*:*","matchCriteriaId":"A19732B3-7734-40BF-8D25-0C3D0E0D60B3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0503.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0871.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/10898","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Feb/1009085.html","source":"cve@mitre.org"},{"url":"http://www.earlyimpact.com/productcart/support/updates/ReadMe_ProductCart_Security_Patch_013004.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3981","source":"cve@mitre.org"},{"url":"http://www.s-quadra.com/advisories/Adv-20040216.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/354288","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9669","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15233","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0503.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0871.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/10898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2004/Feb/1009085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.earlyimpact.com/productcart/support/updates/ReadMe_ProductCart_Security_Patch_013004.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s-quadra.com/advisories/Adv-20040216.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/354288","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15233","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2174","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Custva.asp in EarlyImpact ProductCart allows remote attackers to inject arbitrary Javascript via the redirectUrl parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.5:*:*:*:*:*:*:*","matchCriteriaId":"187A49C7-29D2-4288-BC2C-1C341970DA3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6b:*:*:*:*:*:*:*","matchCriteriaId":"95937001-3EE3-433D-B713-582E996F0519"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6b001:*:*:*:*:*:*:*","matchCriteriaId":"36E8BEC1-2B71-4276-A4D9-6E9E4AB386BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6b002:*:*:*:*:*:*:*","matchCriteriaId":"3F73F4B7-552A-4B39-AE4E-9719E54EC127"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6b003:*:*:*:*:*:*:*","matchCriteriaId":"621827C0-88A6-4401-9089-11C69A6415D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6br:*:*:*:*:*:*:*","matchCriteriaId":"8E656346-5C64-4728-99AA-788E907EC102"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6br001:*:*:*:*:*:*:*","matchCriteriaId":"A41B3128-5AAB-4569-9671-C414B00750D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6br003:*:*:*:*:*:*:*","matchCriteriaId":"02478E47-A2DC-46D3-9688-1C169E53D061"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.5002:*:*:*:*:*:*:*","matchCriteriaId":"4BA9179C-B8E8-4AD8-96A3-C5A266CF3A6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.5003:*:*:*:*:*:*:*","matchCriteriaId":"2633071B-D162-4F9B-962F-849AC7787A8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.5003r:*:*:*:*:*:*:*","matchCriteriaId":"8963787A-0A12-4817-9131-75D25A2701E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.5004:*:*:*:*:*:*:*","matchCriteriaId":"3CA232AA-BDD2-4B9A-8AB8-E4B1C507C807"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6002:*:*:*:*:*:*:*","matchCriteriaId":"A8468FBB-4275-4051-9499-896EA3B2E53B"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:1.6003:*:*:*:*:*:*:*","matchCriteriaId":"D013E775-C9FE-46E1-8DF3-414306EE7826"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1D025C09-267E-4510-9462-88220B421AAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:2.0br000:*:*:*:*:*:*:*","matchCriteriaId":"92BC3955-F17C-49B2-B833-F39BB7844BAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:early_impact:productcart:2.5:*:*:*:*:*:*:*","matchCriteriaId":"A19732B3-7734-40BF-8D25-0C3D0E0D60B3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0503.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0871.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/10898","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Feb/1009085.html","source":"cve@mitre.org"},{"url":"http://www.earlyimpact.com/productcart/support/updates/ReadMe_ProductCart_Security_Patch_013004.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3980","source":"cve@mitre.org"},{"url":"http://www.s-quadra.com/advisories/Adv-20040216.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9669","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15234","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0503.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0871.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/10898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2004/Feb/1009085.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.earlyimpact.com/productcart/support/updates/ReadMe_ProductCart_Security_Patch_013004.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3980","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.s-quadra.com/advisories/Adv-20040216.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2175","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the (1) product parameter to showproduct.php or (2) cat parameter to showcat.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:all_enthusiast_inc:reviewpost_php_pro:2.5:*:*:*:*:*:*:*","matchCriteriaId":"4C351A3A-93D7-4E71-ACC0-5F28EB07AAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:all_enthusiast_inc:reviewpost_php_pro:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"A7AA6DCB-36C6-45EB-BDF5-B9FE02A06EC5"}]}]}],"references":[{"url":"http://secunia.com/advisories/10786/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/352598","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/9574","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.zone-h.org/en/advisories/read/id=3864/","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15035","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10786/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/352598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/9574","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.zone-h.org/en/advisories/read/id=3864/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2176","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe to create a local listening port that bypasses the ICF access controls."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*","matchCriteriaId":"E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*","matchCriteriaId":"7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/378508","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11410","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/378508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11410","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-2177","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:devoybb:devoybb_web_forum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6A6DEEE2-1902-4603-A523-A36DF7CE8E14"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?release_id=273104","source":"cve@mitre.org"},{"url":"http://www.maxpatrol.com/advdetails.asp?id=11","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11428","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=273104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.maxpatrol.com/advdetails.asp?id=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2178","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:devoybb:devoybb_web_forum:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6A6DEEE2-1902-4603-A523-A36DF7CE8E14"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?release_id=273104","source":"cve@mitre.org"},{"url":"http://www.maxpatrol.com/advdetails.asp?id=11","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11428","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=273104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.maxpatrol.com/advdetails.asp?id=11","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2179","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service (hang) via a JPEG image with maximum height and width values."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:97:*:*:*:*:*:*:*","matchCriteriaId":"74459B0D-BF34-4F46-BE89-7D720EA520EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:frontpage:98:*:*:*:*:*:*:*","matchCriteriaId":"A5F2F998-5866-4DA7-88CF-7987E971947E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:3.0.1:*:windows_95:*:*:*:*:*","matchCriteriaId":"731F2F05-A1BB-4BE8-B761-EE04ED6ABBE1"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/378431","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/378619","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11412","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/378431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/378619","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-2180","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in WowBB Forum 1.61 allow remote attackers to inject arbitrary web script or HTML via the (1) country parameter to view_user.php, (2) show parameter to view_forum.php, (3) letter parameter to view_user.php, (4) highlight parameter to view_topic.php, (5) show parameter to index.php, (6) q parameter to search.php, (7) Referer header to admin.php, or the (8) user_email parameter to login.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wowbb:wowbb_web_forum:1.61:*:*:*:*:*:*:*","matchCriteriaId":"C529C1C8-35C5-44AF-B2B5-342DE11F968E"}]}]}],"references":[{"url":"http://www.maxpatrol.com/advdetails.asp?id=7","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11429","source":"cve@mitre.org"},{"url":"http://www.maxpatrol.com/advdetails.asp?id=7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2181","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in WowBB Forum 1.61 allow remote attackers to execute arbitrary SQL commands via the (1) sort_by or (2) page parameters to view_user.php, or the (3) forum_id parameter to view_topic.php.  NOTE: the sort_by vector was later reported to be present in WowBB 1.65."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wowbb:wowbb_web_forum:1.61:*:*:*:*:*:*:*","matchCriteriaId":"C529C1C8-35C5-44AF-B2B5-342DE11F968E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wowbb:wowbb_web_forum:1.65:*:*:*:*:*:*:*","matchCriteriaId":"FEEA8CAC-CD2D-46D6-B95B-96D657E70CAB"}]}]}],"references":[{"url":"http://pridels0.blogspot.com/2005/11/wowbb-165-sql-vuln.html","source":"cve@mitre.org"},{"url":"http://www.maxpatrol.com/advdetails.asp?id=7","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11429","source":"cve@mitre.org"},{"url":"http://pridels0.blogspot.com/2005/11/wowbb-165-sql-vuln.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.maxpatrol.com/advdetails.asp?id=7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11429","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2182","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user session ID information used by the session server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*","matchCriteriaId":"4361030D-230A-45CD-AC84-9603DADC75BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"7C101B23-DD69-4020-A252-A808925DB093"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0:sp1a:*:*:*:*:*:*","matchCriteriaId":"7490205B-E8CF-4088-8FD7-3CEE672E2A10"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:jrun:4.0_build_61650:*:*:*:*:*:*:*","matchCriteriaId":"75E7B136-FAC8-4105-825F-6CC31A76E64B"}]}]}],"references":[{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11414","source":"cve@mitre.org"},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11414","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2183","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in WeHelpBUS 0.1 allows remote attackers to execute arbitrary shell commands via the query string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wehelpbus:wehelpbus:0.1:*:*:*:*:*:*:*","matchCriteriaId":"8B86DF05-3560-4231-BC00-1694EDAB47C8"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?release_id=275295","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11431","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=275295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2184","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Digicraft Yak! server 2.0 through 2.1.2 allows remote attackers to read or write arbitrary files via \"../\" or \"..\\\" sequences in commands such as (1) dir or (2) put."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:digicraft_software:yak:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7AC498B9-A215-451F-9C66-EA5F9277FDA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:digicraft_software:yak:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9DA073D3-FBF6-492A-A97E-95D221805BD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:digicraft_software:yak:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"04C9AFC0-B732-4E33-A88C-793032AF7BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:digicraft_software:yak:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"CB8A1181-1E57-4CF3-B42A-EF051EF497A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:digicraft_software:yak:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FBDB8E27-1B5D-48AA-817A-F731A43740BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:digicraft_software:yak:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"B318450C-2B4F-4B41-8E37-DE203AFB5152"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/yak-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=full-disclosure&m=109788315103778&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12849","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011708","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10763","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/378533","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11433","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17740","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/yak-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=full-disclosure&m=109788315103778&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10763","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/378533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17740","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2185","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki 1.3.5 allow remote attackers to execute arbitrary scripts and/or SQL queries via (1) the UnicodeConverter extension, (2) raw page views, (3) SpecialIpblocklist, (4) SpecialEmailuser, (5) SpecialMaintenance, and (6) ImagePage."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"D5A0FA49-99DC-4691-968F-6AEB76B74370"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?release_id=275099","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11416","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=275099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2186","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in MediaWiki 1.3.5 allows remote attackers to execute arbitrary SQL commands via SpecialMaintenance."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"D5A0FA49-99DC-4691-968F-6AEB76B74370"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?release_id=275099","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11416","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=275099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2187","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in ImagePage for MediaWiki 1.3.5, related to \"filename validation,\" has unknown impact and attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mediawiki:mediawiki:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"D5A0FA49-99DC-4691-968F-6AEB76B74370"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?release_id=275099","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11416","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=275099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2188","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in DMXReady Site Chassis Manager allows remote attackers to inject arbitrary web script or HTML via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dmxready:dmxready_site_chassis_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"045FF471-0F84-4CF6-9504-43543345BC83"}]}]}],"references":[{"url":"http://www.maxpatrol.com/advdetails.asp?id=10","source":"cve@mitre.org"},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11434","source":"cve@mitre.org"},{"url":"http://www.maxpatrol.com/advdetails.asp?id=10","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2189","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in DMXReady Site Chassis Manager allows remote attackers to execute arbitrary SQL commands via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dmxready:dmxready_site_chassis_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"045FF471-0F84-4CF6-9504-43543345BC83"}]}]}],"references":[{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11434","source":"cve@mitre.org"},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2190","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Unzoo 4.4-2 has unknown impact and attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:unzoo:unzoo:4.4-2:*:*:*:*:*:*:*","matchCriteriaId":"39B4958F-69F3-4E80-A163-16E1037F5BF5"}]}]}],"references":[{"url":"http://secunia.com/advisories/12857","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011673","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-10/0466.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11417","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12857","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011673","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-10/0466.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11417","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2191","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in ttt-webmaster.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) msg[0] or (2) siteurl parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turbotraffictrader:turbotraffictrader_php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CBB656DC-81B0-4C38-99FE-4279ACAE9BE7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0296.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12785","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1011609","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=10638","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11358","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17673","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0296.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1011609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=10638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17673","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2192","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in tttadmin/settings.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the ttt_admin parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:turbotraffictrader:turbotraffictrader_php:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CBB656DC-81B0-4C38-99FE-4279ACAE9BE7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0296.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12785","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011609","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10639","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11358","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17676","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0296.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12785","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011609","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10639","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11358","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17676","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2193","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in trade.php for CJOverkill 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) tms[0] or (2) url parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cjoverkill:cjoverkill:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2E6B87FA-04F0-4D7C-BDF5-E097EEE90533"}]}]}],"references":[{"url":"http://bbs.icefire.org/viewtopic.php?t=573","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/12786","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011604","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-10/0306.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/10640","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11359","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17675","source":"cve@mitre.org"},{"url":"http://bbs.icefire.org/viewtopic.php?t=573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/12786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-10/0306.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/10640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11359","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17675","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2194","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MailEnable Professional Edition before 1.53 and Enterprise Edition before 1.02 allows remote attackers to cause a denial of service (crash) via malformed (1) SMTP or (2) IMAP commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*","versionEndIncluding":"1.26","matchCriteriaId":"51327559-08C8-4957-925C-B1DCE15C9423"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_enterprise:1.0:*:*:*:*:*:*:*","matchCriteriaId":"1E228B31-0D62-41E3-A475-550BBFAA4336"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_enterprise:1.00:*:*:*:*:*:*:*","matchCriteriaId":"FCAA0B95-5875-41CF-90BA-EF07D240FF08"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_enterprise:1.01:*:*:*:*:*:*:*","matchCriteriaId":"724E8638-CF5A-480B-89D7-0E029A0C5965"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_professional:1.2:*:*:*:*:*:*:*","matchCriteriaId":"8CFAF9C8-DB67-446E-B63C-530CB0C170B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_professional:1.2a:*:*:*:*:*:*:*","matchCriteriaId":"08F30383-D23F-4CA5-BC02-7716398BC042"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_professional:1.5:*:*:*:*:*:*:*","matchCriteriaId":"7ADEF40C-4C56-4893-B757-15966ED5A925"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_professional:1.17:*:*:*:*:*:*:*","matchCriteriaId":"F32956E6-A13B-4663-BBC9-FEB08A1DCC3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_professional:1.18:*:*:*:*:*:*:*","matchCriteriaId":"1AABE2F0-FEC1-4BDE-B1C0-92FF2CEA48E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_professional:1.19:*:*:*:*:*:*:*","matchCriteriaId":"652F54CA-1CCA-4BC9-8728-A0F6FABF8817"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_professional:1.51:*:*:*:*:*:*:*","matchCriteriaId":"269BCB9D-9AEF-40E2-8291-50EC2A083775"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_professional:1.52:*:*:*:*:*:*:*","matchCriteriaId":"88435083-D7A8-4679-BEB1-4B6526454C3D"}]}]}],"references":[{"url":"http://www.mailenable.com/enterprisehistory.asp","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mailenable.com/professionalhistory.asp","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11418","source":"cve@mitre.org"},{"url":"http://www.mailenable.com/enterprisehistory.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mailenable.com/professionalhistory.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11418","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2195","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in index.php in Zanfi CMS lite 1.1 allows remote attackers to execute arbitrary PHP code via the inc parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zanfi_solutions:zanfi_cms_lite:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5C1B911A-FA2F-4A91-8A99-63A8EDAA9C2C"}]}]}],"references":[{"url":"http://secunia.com/advisories/12792","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011612","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10676","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/378053","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11362","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17691","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10676","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/378053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17691","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2196","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zanfi CMS lite 1.1 allows remote attackers to obtain the full path of the web server via direct requests without required arguments to (1) adm_pages.php, (2) corr_pages.php, (3) del_block.php, (4) del_page.php, (5) footer.php, (6) home.php, and others."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zanfi_solutions:zanfi_cms_lite:1.1:*:*:*:*:*:*:*","matchCriteriaId":"5C1B911A-FA2F-4A91-8A99-63A8EDAA9C2C"}]}]}],"references":[{"url":"http://secunia.com/advisories/12792","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011612","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10677","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10678","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10679","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10680","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10681","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10682","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/378053","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zanfi.nl/index1.php?flag=cmslite","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17687","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011612","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10678","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10679","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10681","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10682","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/378053","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zanfi.nl/index1.php?flag=cmslite","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17687","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2197","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"kdocker.cpp in kdocker 0.1 through 0.8 does not properly check the ownership of files, which could allow local users to execute arbitrary programs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kdocker:kdocker:0.1:*:*:*:*:*:*:*","matchCriteriaId":"9C7A8464-1B2B-4E5A-AF35-40426EB614BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:kdocker:kdocker:0.2:*:*:*:*:*:*:*","matchCriteriaId":"E99CDD0D-9488-41C5-8411-43C3870138FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:kdocker:kdocker:0.3:*:*:*:*:*:*:*","matchCriteriaId":"ECD80605-7133-429F-B8FF-D8B92AA972F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kdocker:kdocker:0.4:*:*:*:*:*:*:*","matchCriteriaId":"3D217B2C-6323-4746-B723-502BD34AF11D"},{"vulnerable":true,"criteria":"cpe:2.3:a:kdocker:kdocker:0.5:*:*:*:*:*:*:*","matchCriteriaId":"EF3B8118-1629-4024-94C2-38215D9663E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kdocker:kdocker:0.6:*:*:*:*:*:*:*","matchCriteriaId":"DA1B219A-9602-480B-B5C5-5997E247D303"},{"vulnerable":true,"criteria":"cpe:2.3:a:kdocker:kdocker:0.7:*:*:*:*:*:*:*","matchCriteriaId":"9D3D1E98-989E-429C-92A7-A2FD2BE2E662"},{"vulnerable":true,"criteria":"cpe:2.3:a:kdocker:kdocker:0.8:*:*:*:*:*:*:*","matchCriteriaId":"FD8DB94E-29B1-444C-8613-6D9EF9D0B746"}]}]}],"references":[{"url":"http://cvs.sourceforge.net/viewcvs.py/kdocker/kdocker/src/kdocker.cpp?r1=1.10&r2=1.11&sortby=log","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12828","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011688","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=414631","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/10729","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11419","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17718","source":"cve@mitre.org"},{"url":"http://cvs.sourceforge.net/viewcvs.py/kdocker/kdocker/src/kdocker.cpp?r1=1.10&r2=1.11&sortby=log","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12828","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=414631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/10729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17718","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2198","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by modifying the MM_recordId parameter on the \"My Account\" page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:duware:duclassmate:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F8A62DE7-1470-4164-896C-F1B4BB3F938F"},{"vulnerable":true,"criteria":"cpe:2.3:a:duware:duclassmate:1.1:*:*:*:*:*:*:*","matchCriteriaId":"6C0663F7-AD56-413C-AB19-012295A49F33"}]}]}],"references":[{"url":"http://www.osvdb.org/10663","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11363","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/alerts/2004/Oct/1011597.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17682","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/alerts/2004/Oct/1011597.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17682","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2199","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in DUware DUclassified 4.0 allows remote attackers to inject arbitrary web script or HTML via the message text."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:duware:duclassified:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7A32C8E1-A205-4293-B1EA-300136CC7826"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/11363","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/alerts/2004/Oct/1011596.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17686","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/alerts/2004/Oct/1011596.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17686","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2200","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to inject arbitrary web script or HTML via via the message text."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:duware:duforum:3.0:*:*:*:*:*:*:*","matchCriteriaId":"9E513D87-B88E-41A6-B856-4C6E0F27FBE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:duware:duforum:3.1:*:*:*:*:*:*:*","matchCriteriaId":"EDDF05BF-1997-4D2C-9DA4-B13EA7E7495E"}]}]}],"references":[{"url":"http://www.osvdb.org/10667","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11363","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/alerts/2004/Oct/1011595.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17681","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/alerts/2004/Oct/1011595.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17681","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2201","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to execute arbitrary SQL commands via the FOR_ID parameter in messages.asp, (2) MSG_ID parameter in messageDetail.asp, or (3) password parameter in the login form."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:duware:duforum:3.0:*:*:*:*:*:*:*","matchCriteriaId":"9E513D87-B88E-41A6-B856-4C6E0F27FBE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:duware:duforum:3.1:*:*:*:*:*:*:*","matchCriteriaId":"EDDF05BF-1997-4D2C-9DA4-B13EA7E7495E"}]}]}],"references":[{"url":"http://www.osvdb.org/10664","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10665","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10666","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11363","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/alerts/2004/Oct/1011595.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17680","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/alerts/2004/Oct/1011595.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17680","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2202","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authentication and execute other commands on the server's underlying database via the (1) cat_id or (2) sub_id parameters in adDetail.asp, or (2) the password parameter in the login form."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:duware:duclassified:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7A32C8E1-A205-4293-B1EA-300136CC7826"},{"vulnerable":true,"criteria":"cpe:2.3:a:duware:duclassified:4.1:*:*:*:*:*:*:*","matchCriteriaId":"F24704F1-3211-4320-8B30-BCB4E2A0AD0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:duware:duclassified:4.2:*:*:*:*:*:*:*","matchCriteriaId":"8B010062-02BA-4402-86B2-D069EA5C4E62"}]}]}],"references":[{"url":"http://www.osvdb.org/10668","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/10669","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11363","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/alerts/2004/Oct/1011596.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17685","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10668","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/10669","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/alerts/2004/Oct/1011596.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17685","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2203","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Ansel 1.2 through 2.0 uses insecure default permissions, which allows remote attackers to gain access to web readable directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ansel:ansel:1.2:*:*:*:*:*:*:*","matchCriteriaId":"6F3BC3CA-5A9B-45A7-B6A4-ABF03C14AD9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ansel:ansel:1.3:*:*:*:*:*:*:*","matchCriteriaId":"9F3750EF-E7E0-4B21-8D81-363B382A0DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ansel:ansel:1.4:*:*:*:*:*:*:*","matchCriteriaId":"EB7C0026-31EA-4BB0-AC35-E7F6AF294C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:ansel:ansel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B94B4650-CBBB-4B96-AEB3-F8E6E4D97757"}]}]}],"references":[{"url":"http://securitytracker.com/id?1011775","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/10898","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11420","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17767","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/10898","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17767","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2204","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macromedia ColdFusion MX 6.0 and 6.1 application server, when running with the CreateObject function or CFOBJECT tag enabled, allows local users to conduct unauthorized activities and obtain administrative passwords by creating CFML scripts that use CreateObject or CFOBJECT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B79C39FD-D9A0-4CA4-BF37-D94D9F20E4C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:*:*:*:*:*:*","matchCriteriaId":"B2C65BE0-32FA-4D51-AA2B-E7D630470D19"}]}]}],"references":[{"url":"http://secunia.com/advisories/12693","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-10.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/10718","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/377213","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11364","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17567","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12693","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-10.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/10718","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/377213","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11364","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17567","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2205","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Veritas Cluster Server 1.0.1 through 4.0 allows local users to gain root access via unspecified vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.0.1_solaris:*:*:*:*:*:*:*","matchCriteriaId":"70832FAC-C168-431E-9D5E-78400A655937"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.0.2_solaris:*:*:*:*:*:*:*","matchCriteriaId":"1B4AD454-2DF5-4CC6-B003-22CB1E7799C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.1.1_solaris:*:*:*:*:*:*:*","matchCriteriaId":"6603A1D2-C33E-41D2-B7EC-6F9F070DD3F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.1.2_solaris:*:*:*:*:*:*:*","matchCriteriaId":"82F900B3-7290-4F82-AD94-74CD39BF8D7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.1_solaris:*:*:*:*:*:*:*","matchCriteriaId":"1AF68194-C496-4589-979E-886049B12340"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.2_nt:*:*:*:*:*:*:*","matchCriteriaId":"0C055944-1396-4692-9179-87A29EF23282"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.3:*:*:*:*:*:*:*","matchCriteriaId":"6EAA9C58-CB8A-412F-AA4E-70CD8ECA27F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.3.1_hp-ux:*:*:*:*:*:*:*","matchCriteriaId":"BCB9FE48-09B3-4A99-AEC0-B7B590F072BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.3.1_p3:*:*:*:*:*:*:*","matchCriteriaId":"5AB7C84E-C042-419C-AA97-E6EAADD11EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.3_hp-ux:*:*:*:*:*:*:*","matchCriteriaId":"848F6883-F72C-4B3A-B5D9-58C719DC02DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.3_nt:*:*:*:*:*:*:*","matchCriteriaId":"03CA3B60-9EDB-4FF2-9106-D3411A5EB3B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.3_p1:*:*:*:*:*:*:*","matchCriteriaId":"913F46B8-2FBD-41EF-A33A-856D32E5111A"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.3_p2:*:*:*:*:*:*:*","matchCriteriaId":"3D03B7F3-1046-4C33-BEB7-D8B41BB8F55D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.3_p3:*:*:*:*:*:*:*","matchCriteriaId":"DF605EA1-C497-4D86-B75A-9400B4BE9573"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.3_p4:*:*:*:*:*:*:*","matchCriteriaId":"E454BFD4-8A3A-49A6-8FA5-063AB6DBF558"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.3_solaris:*:*:*:*:*:*:*","matchCriteriaId":"245260CC-E50B-40CC-88DE-94B130922E64"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:1.3_solaris_pre-ga:*:*:*:*:*:*:*","matchCriteriaId":"FAE760AD-0154-43B9-B6DD-7B0D6AE10434"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"795A7A16-930E-43DC-91EF-D87227CB18DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.0_aix:*:*:*:*:*:*:*","matchCriteriaId":"4AA448A9-2B22-4671-AFF3-37C9F6F8A071"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.0_linux:*:*:*:*:*:*:*","matchCriteriaId":"AFEB8DF3-B8DE-4791-8B51-3EDB825DD57E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.0_p1:*:*:*:*:*:*:*","matchCriteriaId":"73AE8F46-457E-45A8-9B5A-AEF8337F7800"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.0_p2:*:*:*:*:*:*:*","matchCriteriaId":"2969056D-CFA9-461E-AFA9-D7313E1D8A87"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.0_p3:*:*:*:*:*:*:*","matchCriteriaId":"403BFD6F-E1C0-4E69-BEFD-9B95D88E99FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.0_p4:*:*:*:*:*:*:*","matchCriteriaId":"B124E5A8-14F0-4D53-998A-B0ECBE20E56B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.0_solaris:*:*:*:*:*:*:*","matchCriteriaId":"07C99314-B40A-46DC-8270-FBEF53E2B6DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.0_solaris_beta:*:*:*:*:*:*:*","matchCriteriaId":"DDFF52BF-EE26-48C8-888F-75820471AE31"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.0_solaris_ga:*:*:*:*:*:*:*","matchCriteriaId":"031BED81-A1BB-4048-A40C-EF94BACA2A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"069B9867-DF6A-4580-9DCF-B8A9287DBD3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.1_linux:*:*:*:*:*:*:*","matchCriteriaId":"08F85415-A5D7-4B35-91DE-698959AD1F78"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.1_linux_p1:*:*:*:*:*:*:*","matchCriteriaId":"9CBF4CF2-3F4B-4FDF-BA29-1D985B4370EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"F804BEB2-6746-4E09-B74F-654DBBE3B48B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.2_linux:*:*:*:*:*:*:*","matchCriteriaId":"0772A28C-68C1-47CF-BDAA-BC0E900A77BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.2_linux_mp1p1:*:*:*:*:*:*:*","matchCriteriaId":"4DF2B817-5F85-49E4-BB06-C744EAE20FBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.2_mp1:*:*:*:*:*:*:*","matchCriteriaId":"E70FBFB8-68DB-47AD-856D-8E893FDDCB6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:2.2_mp2:*:*:*:*:*:*:*","matchCriteriaId":"1025ACEA-8762-4D86-91CC-EA64F01074D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:3.5:*:*:*:*:*:*:*","matchCriteriaId":"01C920F9-9D6B-42DB-9B70-7F14082B5C64"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:3.5.1_aix:*:*:*:*:*:*:*","matchCriteriaId":"9A8DE58C-ABBD-4A37-8FAD-C6CA4B44DB1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:3.5_aix:*:*:*:*:*:*:*","matchCriteriaId":"A6CA14BE-2F40-4195-818C-9C6E80B5AD41"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:3.5_hp-ux:*:*:*:*:*:*:*","matchCriteriaId":"2A2DD961-3C4C-483E-932D-7B19CC3CC1FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:3.5_hp-ux_update_1:*:*:*:*:*:*:*","matchCriteriaId":"A49FB7E6-CBD3-424E-BBE2-684B5934F84C"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:3.5_hp-ux_update_2:*:*:*:*:*:*:*","matchCriteriaId":"AB31E8E7-FDD9-4684-A794-6CC5E2B9ABDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:3.5_mp1:*:*:*:*:*:*:*","matchCriteriaId":"270B6EE8-E7F5-467D-9363-304088A9192E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:3.5_mp1j:*:*:*:*:*:*:*","matchCriteriaId":"EEAD4F45-25AD-4BF4-AD4B-07B3C8BCEB5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:3.5_mp2:*:*:*:*:*:*:*","matchCriteriaId":"2E9B676F-53FC-4CA9-8FA2-E0274A8CD2A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:3.5_p1:*:*:*:*:*:*:*","matchCriteriaId":"C17C170F-7CE0-4F3C-B6B1-4F0318B18E7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris:*:*:*:*:*:*:*","matchCriteriaId":"42673130-3B5B-412B-B25C-6D62AC7C9B4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_beta:*:*:*:*:*:*:*","matchCriteriaId":"3F04E991-2C3D-4566-B5F1-B370603045E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_mp1:*:*:*:*:*:*:*","matchCriteriaId":"3B1E0306-DAB2-44E6-9091-F9AF7E3094B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_mp2:*:*:*:*:*:*:*","matchCriteriaId":"B2272678-1BDA-4BAA-88BA-9742B8246F3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:3.5_solaris_mp3:*:*:*:*:*:*:*","matchCriteriaId":"81EFE6E3-E19B-4CF9-B8B7-DDA31138B9EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:4.0_aix:*:*:*:*:*:*:*","matchCriteriaId":"2DC7F1B0-5952-42C7-80EB-C1F2B3412D92"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:4.0_aix_beta:*:*:*:*:*:*:*","matchCriteriaId":"F762CE91-CE7F-4DD1-BC51-DB7F94EBED2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:4.0_linux:*:*:*:*:*:*:*","matchCriteriaId":"4B6940C1-2810-42BB-9E90-D22905B052EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:4.0_linux_beta:*:*:*:*:*:*:*","matchCriteriaId":"C37A3D7F-EE69-49E4-AC98-F20ECAC74805"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:4.0_solaris:*:*:*:*:*:*:*","matchCriteriaId":"15F15C22-CF20-4C19-9B50-84F5EB9093EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec_veritas:cluster_server:4.0_solaris_beta:*:*:*:*:*:*:*","matchCriteriaId":"C944D168-5A6A-4B3D-A62F-E4B33E72D7C7"}]}]}],"references":[{"url":"http://secunia.com/advisories/12833","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011693","source":"cve@mitre.org"},{"url":"http://seer.support.veritas.com/docs/271040.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/10757","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11421","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17719","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011693","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seer.support.veritas.com/docs/271040.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/10757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17719","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2206","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in NatterChat 1.12 allows remote attackers to execute arbitrary SQL commands via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:natterchat:natterchat:1.12:*:*:*:*:*:*:*","matchCriteriaId":"754CD03A-0BC5-41F8-8374-E2C2FB758D41"}]}]}],"references":[{"url":"http://www.maxpatrol.com/advdetails.asp?id=13","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10759","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11423","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/Oct/1011692.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17726","source":"cve@mitre.org"},{"url":"http://www.maxpatrol.com/advdetails.asp?id=13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11423","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/alerts/2004/Oct/1011692.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17726","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2207","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"41048CAB-2D3D-481F-BE7A-7A3FD4183620"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.4.9_beta:*:*:*:*:*:*:*","matchCriteriaId":"CB6DA9A4-6A5A-46EE-AA27-8206ABAFF5D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.4.9a:*:*:*:*:*:*:*","matchCriteriaId":"3B2E3AA5-828A-4A4B-8E76-653245B02652"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3C016844-21F0-40C6-B8A5-9CDA91859928"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5D86C38C-AA64-47EB-9142-660C3545C07B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5.2a:*:*:*:*:*:*:*","matchCriteriaId":"71B7637B-EB4A-4E08-BAF8-812F4AD3A358"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5.2c:*:*:*:*:*:*:*","matchCriteriaId":"0F0EA2D0-8DA2-4740-B092-502C4A70D957"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"10445738-9B32-403B-8D46-020719BE271A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"575D5300-AF00-4C9B-98B1-EAC0B46376AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_beta2:*:*:*:*:*:*:*","matchCriteriaId":"8A84DAFA-8CEC-453E-A17C-5452372D2103"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_beta3:*:*:*:*:*:*:*","matchCriteriaId":"E859CA87-C613-4453-8AB2-56B6952F63CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_beta4:*:*:*:*:*:*:*","matchCriteriaId":"9D67AC6B-7D47-41F6-81E9-9A355C444C24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_beta5:*:*:*:*:*:*:*","matchCriteriaId":"B7CADB9F-F217-4E57-90FC-5526D950F457"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"BB4FD41D-7C18-4330-BB50-42132BE9AEE3"}]}]}],"references":[{"url":"http://www.maxpatrol.com/advdetails.asp?id=14","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11424","source":"cve@mitre.org"},{"url":"http://www.maxpatrol.com/advdetails.asp?id=14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2208","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to conduct HTTP response splitting attacks via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"41048CAB-2D3D-481F-BE7A-7A3FD4183620"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.4.9_beta:*:*:*:*:*:*:*","matchCriteriaId":"CB6DA9A4-6A5A-46EE-AA27-8206ABAFF5D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.4.9a:*:*:*:*:*:*:*","matchCriteriaId":"3B2E3AA5-828A-4A4B-8E76-653245B02652"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3C016844-21F0-40C6-B8A5-9CDA91859928"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5D86C38C-AA64-47EB-9142-660C3545C07B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5.2a:*:*:*:*:*:*:*","matchCriteriaId":"71B7637B-EB4A-4E08-BAF8-812F4AD3A358"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5.2c:*:*:*:*:*:*:*","matchCriteriaId":"0F0EA2D0-8DA2-4740-B092-502C4A70D957"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"10445738-9B32-403B-8D46-020719BE271A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"575D5300-AF00-4C9B-98B1-EAC0B46376AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_beta2:*:*:*:*:*:*:*","matchCriteriaId":"8A84DAFA-8CEC-453E-A17C-5452372D2103"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_beta3:*:*:*:*:*:*:*","matchCriteriaId":"E859CA87-C613-4453-8AB2-56B6952F63CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_beta4:*:*:*:*:*:*:*","matchCriteriaId":"9D67AC6B-7D47-41F6-81E9-9A355C444C24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_beta5:*:*:*:*:*:*:*","matchCriteriaId":"B7CADB9F-F217-4E57-90FC-5526D950F457"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"BB4FD41D-7C18-4330-BB50-42132BE9AEE3"}]}]}],"references":[{"url":"http://www.maxpatrol.com/advdetails.asp?id=14","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11424","source":"cve@mitre.org"},{"url":"http://www.maxpatrol.com/advdetails.asp?id=14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2209","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.4.9:*:*:*:*:*:*:*","matchCriteriaId":"41048CAB-2D3D-481F-BE7A-7A3FD4183620"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.4.9_beta:*:*:*:*:*:*:*","matchCriteriaId":"CB6DA9A4-6A5A-46EE-AA27-8206ABAFF5D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.4.9a:*:*:*:*:*:*:*","matchCriteriaId":"3B2E3AA5-828A-4A4B-8E76-653245B02652"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"3C016844-21F0-40C6-B8A5-9CDA91859928"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"5D86C38C-AA64-47EB-9142-660C3545C07B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5.2a:*:*:*:*:*:*:*","matchCriteriaId":"71B7637B-EB4A-4E08-BAF8-812F4AD3A358"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5.2c:*:*:*:*:*:*:*","matchCriteriaId":"0F0EA2D0-8DA2-4740-B092-502C4A70D957"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"10445738-9B32-403B-8D46-020719BE271A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"575D5300-AF00-4C9B-98B1-EAC0B46376AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_beta2:*:*:*:*:*:*:*","matchCriteriaId":"8A84DAFA-8CEC-453E-A17C-5452372D2103"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_beta3:*:*:*:*:*:*:*","matchCriteriaId":"E859CA87-C613-4453-8AB2-56B6952F63CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_beta4:*:*:*:*:*:*:*","matchCriteriaId":"9D67AC6B-7D47-41F6-81E9-9A355C444C24"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_beta5:*:*:*:*:*:*:*","matchCriteriaId":"B7CADB9F-F217-4E57-90FC-5526D950F457"},{"vulnerable":true,"criteria":"cpe:2.3:a:ideal_science:idealbb:1.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"BB4FD41D-7C18-4330-BB50-42132BE9AEE3"}]}]}],"references":[{"url":"http://www.maxpatrol.com/advdetails.asp?id=14","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11424","source":"cve@mitre.org"},{"url":"http://www.maxpatrol.com/advdetails.asp?id=14","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2210","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Express-Web Content Management System (CMS) allow remote attackers to steal cookie-based authentication information and possibly perform other exploits via the (1) n, (2) b, (3) e, or (4) a parameters to default.asp, (5) the Referer header in an HTTP request to login.asp, or (6) the email parameter to subscribe/default.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:express-web:express-web_content_management_system:*:*:*:*:*:*:*:*","matchCriteriaId":"AAB15D37-C18C-44F4-B64A-4180CD05821F"}]}]}],"references":[{"url":"http://www.maxpatrol.com/advdetails.asp?id=12","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11426","source":"cve@mitre.org"},{"url":"http://www.maxpatrol.com/advdetails.asp?id=12","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2211","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in AliveSites Forums 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) forum_id, (2) method, or (3) forum_title parameters to post.asp, (4) the forum_title parameter to forum.asp, or (5) the id parameter to post.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alivesites:alivesites_forum:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C5C7397B-69AE-4BDD-99F5-F9DF4DB77837"}]}]}],"references":[{"url":"http://secunia.com/advisories/12844","source":"cve@mitre.org"},{"url":"http://www.maxpatrol.com/advdetails.asp?id=5","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10775","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11427","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17725","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12844","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.maxpatrol.com/advdetails.asp?id=5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17725","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2212","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in forum.asp in AliveSites Forums 2.0 allows remote attackers to execute arbitrary SQL commands via the forum_id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alivesites:alivesites_forum:2.0:*:*:*:*:*:*:*","matchCriteriaId":"C5C7397B-69AE-4BDD-99F5-F9DF4DB77837"}]}]}],"references":[{"url":"http://secunia.com/advisories/12844","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.maxpatrol.com/advdetails.asp?id=5","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10776","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11427","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17730","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.maxpatrol.com/advdetails.asp?id=5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10776","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17730","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2213","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a (1) trailing dot (\".\") or (2) trailing space in an HTTP request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BB341BC1-E42F-43D2-9FC6-9FF5B84BA055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"56F3586C-D64A-486C-8C43-377F21E3469F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"20C7E266-905C-44E8-8366-A7253F2057D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9E170D38-F3FD-4A4D-9C80-9B0BDD7474D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"25469B3F-D0F2-4500-9900-25506CEEDA5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"8C42C5AD-E17F-4FDC-B464-7EA68B4E2204"},{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E3E752BB-E6E2-4188-9D88-1EF45A9A2DAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB3BB46D-DE7E-4D35-BE58-036DF8B1ECCB"}]}]}],"references":[{"url":"http://secunia.com/advisories/12011","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7390","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10673","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16636","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16636","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2214","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-178"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis:appweb_http_server:*:*:*:*:*:*:*:*","versionEndExcluding":"1.1.3","matchCriteriaId":"5A609FD9-D98C-43B4-B05B-26183D7B3F23"}]}]}],"references":[{"url":"http://secunia.com/advisories/12011","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.osvdb.org/7391","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/10673","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16638","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/12011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.osvdb.org/7391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/10673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16638","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2215","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"RXVT-Unicode 3.4 and 3.5 does not properly close file descriptors, which allows local users to access the terminals of other users and possibly gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:marc_lehmann:rxvt-unicode:3.4:*:*:*:*:*:*:*","matchCriteriaId":"704A6FF5-F9E8-42BB-B8C9-5B348655AF51"},{"vulnerable":true,"criteria":"cpe:2.3:a:marc_lehmann:rxvt-unicode:3.5:*:*:*:*:*:*:*","matchCriteriaId":"D6365525-A87B-41B6-8F34-50C029A3BE87"}]}]}],"references":[{"url":"http://cvs.schmorp.de/browse/rxvt-unicode/Changes?view=markup","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12299","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/8710","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10959","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17000","source":"cve@mitre.org"},{"url":"http://cvs.schmorp.de/browse/rxvt-unicode/Changes?view=markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/8710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10959","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17000","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2216","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier, and Application Server 7 Update 4 and earlier, allows remote attackers to cause a denial of service (crash) via a malformed client certificate."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"EAB26B3D-4DF0-45C2-9ECA-202C829392D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:7.0:*:platform:*:*:*:*:*","matchCriteriaId":"D00790CE-CD77-4C39-80AC-5FBD298DD63A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_application_server:7.0:*:standard:*:*:*:*:*","matchCriteriaId":"BC5F2280-EC46-4D2F-8402-FE91ECEE6A1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"6E592549-5C28-4F0A-B407-06A33B3CFFF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"57DC2FBE-6556-4113-83BF-ABCAC70CBDE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"3DA512F0-B382-407E-B75D-5D2D15E185BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"16727FF1-3CD7-4667-A2BA-2241A3AFEED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.0:sp4:*:*:*:*:*:*","matchCriteriaId":"F60E165E-5B62-4D46-941D-E84603516D23"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.0:sp5:*:*:*:*:*:*","matchCriteriaId":"FF6BCC24-EADB-4EB8-9142-01D34C307C45"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.0:sp6:*:*:*:*:*:*","matchCriteriaId":"05017BA4-C9FC-4F7D-A5FE-9CE763CFE3E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.0:sp7:*:*:*:*:*:*","matchCriteriaId":"DCC700F7-8675-441A-8AB7-CEFF84639E7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"044D96F6-7A18-4295-A665-16F1A6630963"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:java_system_web_server:6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"85A181D1-C261-4C29-BC8C-A7A815A63E2E"}]}]}],"references":[{"url":"http://secunia.com/advisories/13072","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101589-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57669-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/11383","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11593","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17941","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13072","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101589-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57669-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/11383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17941","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2217","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unknown vulnerabilities in yhttpd in yChat before 0.7 allow remote attackers to cause a denial of service (segmentation fault) via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ychat:ychat:0.1:*:*:*:*:*:*:*","matchCriteriaId":"22272AB2-94D0-46A1-A2B1-6CAF99E62BD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ychat:ychat:0.2:*:*:*:*:*:*:*","matchCriteriaId":"E89E048E-1A56-4B75-9122-3F7A62E61396"},{"vulnerable":true,"criteria":"cpe:2.3:a:ychat:ychat:0.3:*:*:*:*:*:*:*","matchCriteriaId":"A007379C-C124-418B-8110-BBEF159C057E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ychat:ychat:0.4:*:*:*:*:*:*:*","matchCriteriaId":"E893F3EA-2BE1-4832-91B2-7005C94EC51F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ychat:ychat:0.5:*:*:*:*:*:*:*","matchCriteriaId":"59A9389E-1CE2-4BB0-B811-5C487F08B6ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:ychat:ychat:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"B3C9D3E3-075D-43CB-A764-8008BFF66150"},{"vulnerable":true,"criteria":"cpe:2.3:a:ychat:ychat:0.6:*:*:*:*:*:*:*","matchCriteriaId":"1BB21B8B-E4C3-430F-8735-D027568D1DD7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2004-11/0001.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1012043","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/11323","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11597","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17942","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2004-11/0001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1012043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/11323","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17942","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2218","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in pmwh.php in PHPMyWebHosting 0.3.4 and earlier allows remote attackers to modify SQL statements via the password parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmywebhosting:phpmywebhosting:*:*:*:*:*:*:*:*","versionEndIncluding":"0.3.4","matchCriteriaId":"0B17B129-6ACC-4414-A243-91B154BA352D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0207.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-09/0247.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8976","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10942","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17005","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0207.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-09/0247.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/8976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10942","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2219","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*","matchCriteriaId":"6219D36E-9E2C-4DC7-8FD5-FAD144A333F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0215.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12304","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010957","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://umbrella.name/originalvuln/msie/NullyFake/nullyfake-content.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8978","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17007","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0215.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010957","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://umbrella.name/originalvuln/msie/NullyFake/nullyfake-content.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17007","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2220","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"F-Secure Anti-Virus for Microsoft Exchange 6.30 and 6.31 does not properly detect certain password-protected files in a ZIP file, which allows remote attackers to bypass anti-virus protection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:6.30:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"97610DB9-0379-4EB3-95E6-9B5C21E5A6E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:6.30_sr1:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"5777A2C3-5EB0-495E-8E0E-94BCA86D5E4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:6.31:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"2D43D811-F305-4709-9C43-862A7FC783B3"}]}]}],"references":[{"url":"ftp://ftp.f-secure.com/support/hotfix/fsav-mse/fsavmse63x-02_readme.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/13067","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012057","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/11395","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11600","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17944","source":"cve@mitre.org"},{"url":"ftp://ftp.f-secure.com/support/hotfix/fsav-mse/fsavmse63x-02_readme.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/13067","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012057","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/11395","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2221","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mercantec:softcart:4.00b:*:*:*:*:*:*:*","matchCriteriaId":"0DC7DD2A-305A-478A-8314-9D9CBCB3445C"}]}]}],"references":[{"url":"http://metasploit.com/projects/Framework/modules/exploits/mercantec_softcart.pm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/9011","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10926","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17008","source":"cve@mitre.org"},{"url":"http://metasploit.com/projects/Framework/modules/exploits/mercantec_softcart.pm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/9011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10926","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17008","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2222","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in FsPHPGallery before 1.2 allows remote attackers to list arbitrary directories via the dir parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:fsphpgallery:fsphpgallery:0.2:*:*:*:*:*:*:*","matchCriteriaId":"72B90803-381F-4D70-8C84-1CCE79ABFF9C"},{"vulnerable":false,"criteria":"cpe:2.3:a:fsphpgallery:fsphpgallery:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F035D777-0D14-40FA-BAE1-E6DFFB4C189B"},{"vulnerable":false,"criteria":"cpe:2.3:a:fsphpgallery:fsphpgallery:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5209E11-20AF-44B1-9330-6334A30E2EF2"},{"vulnerable":false,"criteria":"cpe:2.3:a:fsphpgallery:fsphpgallery:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0F7EF80D-8B60-4458-80C4-7570F9650CB6"}]}]}],"references":[{"url":"http://gallery.devrandom.org.uk/cgi-bin/viewcvs.cgi/fsphpgallery/ChangeLog?rev=HEAD&amp%3Bcontent-type=text/vnd.viewcvs-markup","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13074","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012063","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/11378","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11594","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17950","source":"cve@mitre.org"},{"url":"http://gallery.devrandom.org.uk/cgi-bin/viewcvs.cgi/fsphpgallery/ChangeLog?rev=HEAD&amp%3Bcontent-type=text/vnd.viewcvs-markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/11378","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17950","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2223","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FsPHPGallery before 1.2 allows remote attackers to cause a denial of service via an image with a large size attribute, which causes a crash when the server attempts to resize the image."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fsphpgallery:fsphpgallery:0.2:*:*:*:*:*:*:*","matchCriteriaId":"72B90803-381F-4D70-8C84-1CCE79ABFF9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fsphpgallery:fsphpgallery:0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"F035D777-0D14-40FA-BAE1-E6DFFB4C189B"},{"vulnerable":true,"criteria":"cpe:2.3:a:fsphpgallery:fsphpgallery:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"D5209E11-20AF-44B1-9330-6334A30E2EF2"},{"vulnerable":true,"criteria":"cpe:2.3:a:fsphpgallery:fsphpgallery:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0F7EF80D-8B60-4458-80C4-7570F9650CB6"}]}]}],"references":[{"url":"http://secunia.com/advisories/13074","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012063","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/11389","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11594","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17947","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012063","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/11389","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17947","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2224","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Appfoundry Message Foundry 2.75 .0003 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that contains MS-DOS device names such as com1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:appfoundry:message_foundry:2.75.0003:*:*:*:*:*:*:*","matchCriteriaId":"BEAF1233-C2AE-43BE-BF6D-F21FD97D0BBC"}]}]}],"references":[{"url":"http://secunia.com/advisories/11351","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010047","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.oliverkarow.de/research/AppFoundryCOM1_Dos.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5886","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16063","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11351","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.oliverkarow.de/research/AppFoundryCOM1_Dos.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5886","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16063","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2225","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download directory via a crafted data: URI that is not properly handled when the user clicks the Save button."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:preview_release:*:*:*:*:*:*:*","matchCriteriaId":"CFDBA992-46F8-42A6-9428-C9E475CA69E3"}]}]}],"references":[{"url":"http://secunia.com/advisories/12708","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011501","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mozilla.org/projects/security/older-vulnerabilities.html#firefox0.10.1","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10478","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11311","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=259708","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011501","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mozilla.org/projects/security/older-vulnerabilities.html#firefox0.10.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=259708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-2226","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Mail 1.7.1 and 1.7.3, and Thunderbird before 0.9, when HTML-Mails is enabled, allows remote attackers to determine valid e-mail addresses via an HTML e-mail that references a Cascading Style Sheets (CSS) document on the attacker's server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*","matchCriteriaId":"5263F879-9B90-4582-B677-F133DEBE5259"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.1:*:*:*:*:*:*:*","matchCriteriaId":"BB1FC6D1-8D93-4D87-9D73-7C6C0F8D45C7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:thunderbird:1.7.3:*:*:*:*:*:*:*","matchCriteriaId":"0A3C27EC-5794-49C1-96E0-997E700B13DB"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0070.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13086","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/11394","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17949","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0070.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/11394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17949","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2227","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes it easier for remote attackers to trick users into downloading files with dangerous extensions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"}]}]}],"references":[{"url":"http://secunia.com/advisories/13144","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13724","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200501-03.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/11591","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=234416","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18016","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200501-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/11591","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=234416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2228","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mozilla Firefox before 1.0 is installed with world-writable permissions on Mac OS X, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*","matchCriteriaId":"93C142C5-3A85-432B-80D6-2E7B1B4694F4"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2434FCE7-A50B-4527-9970-C7224B31141C"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*","matchCriteriaId":"5633FB6E-D623-49D4-9858-4E20E64DE458"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"429ECA02-DBCD-45FB-942C-CA4BC1BC8A72"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"B5F0DC80-5473-465C-9D7F-9589F1B78E12"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"567FF916-7DE0-403C-8528-7931A43E0D18"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*","matchCriteriaId":"010B34F4-910E-4515-990B-8E72DF009578"},{"vulnerable":false,"criteria":"cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"8FAA1A89-E8D9-46D0-8E2C-9259920ACBFE"}]}]}],"references":[{"url":"http://secunia.com/advisories/13144","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13724","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200501-03.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/11592","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11644","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18017","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-200501-03.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/11592","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2229","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unknown vulnerabilities in Oracle 9i Lite Mobile Server 5.0.0.0.0 through 5.0.2.9.0 allow remote authenticated users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server_lite:5.0:*:*:*:*:*:*:*","matchCriteriaId":"3E33A069-8301-4AD5-BDD3-8371DA394EE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server_lite:5.0.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"6093302F-EE5E-4B62-8A23-D5D961C79874"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server_lite:5.0.2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0EB6A60B-69A5-4659-B8DC-9BC8A2ED9CD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server_lite:5.0.2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"7BAB55DF-D6DE-48EC-9AE3-478E49137339"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/2004alert63.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10938","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4022","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9704","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15269","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/2004alert63.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10938","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4022","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15269","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2230","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in isakmpd on OpenBSD 3.4 through 3.6 allows local users to cause a denial of service (panic) and corrupt memory via IPSEC credentials on a socket."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.5:*:*:*:*:*:*:*","matchCriteriaId":"BDA160D4-5CAB-44E7-880A-59DD98FEAD62"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.6:*:*:*:*:*:*:*","matchCriteriaId":"D4D84D7A-EB7C-4196-B8B6-7B703C8055C2"}]}]}],"references":[{"url":"http://secunia.com/advisories/13443","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012511","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openbsd.org/errata36.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/12400","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11928","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18486","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openbsd.org/errata36.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/12400","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18486","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2231","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Zero G Software InstallAnywhere 5.0.6, 5.0.7, and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) persistent_state or (2) env.properties.X temporary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:zero_g:installanywhere:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"280A4AB9-AA49-4049-B7EF-FA611390C7F5"},{"vulnerable":false,"criteria":"cpe:2.3:a:zero_g:installanywhere:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"871CE219-3034-4EB0-8A19-5E7D989FA365"}]}]}],"references":[{"url":"http://secunia.com/advisories/12129","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://vapid.dhs.org/zerogadv.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=82&type=vulnerabilities","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8236","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10808","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16791","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://vapid.dhs.org/zerogadv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.idefense.com/application/poi/display?id=82&type=vulnerabilities","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10808","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16791","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2232","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"044E2E34-470C-45C9-8136-22493077D842"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5FB2555-7146-4A75-9D24-250BBC09244A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"949F0BC0-A79E-4B1D-894D-650CF68109F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"616AE17F-F5B4-4D64-B287-0AAB189C802A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"74246580-F351-4EAE-9406-2386CFF1819D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"077FFAAB-BACD-43F4-B146-DBFFD58CE619"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"9C715839-F020-4F42-94F0-9FA34F294578"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3113CF64-DFDD-413F-BB85-5A8B251608D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"99CFB2E0-B99B-4154-8A6E-B6A8483ACEBB"}]}]}],"references":[{"url":"http://cvs.sourceforge.net/viewcvs.py/moodle/moodle/mod/glossary/sql.php?r1=1.15.2.2&amp%3Br2=1.15.2.3","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13091","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012113","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/11427","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11608","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17965","source":"cve@mitre.org"},{"url":"http://cvs.sourceforge.net/viewcvs.py/moodle/moodle/mod/glossary/sql.php?r1=1.15.2.2&amp%3Br2=1.15.2.3","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13091","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/11427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11608","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17965","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2233","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown \"front page vulnerability with Moodle servers\" for Moodle before 1.3.2 has unknown impact and attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"044E2E34-470C-45C9-8136-22493077D842"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5FB2555-7146-4A75-9D24-250BBC09244A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"949F0BC0-A79E-4B1D-894D-650CF68109F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"616AE17F-F5B4-4D64-B287-0AAB189C802A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"74246580-F351-4EAE-9406-2386CFF1819D"}]}]}],"references":[{"url":"http://moodle.org/doc/?file=releaseold.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12045","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7710","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10697","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16662","source":"cve@mitre.org"},{"url":"http://moodle.org/doc/?file=releaseold.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10697","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16662","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2234","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"044E2E34-470C-45C9-8136-22493077D842"}]}]}],"references":[{"url":"http://moodle.org/doc/?file=releaseold.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7711","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://moodle.org/doc/?file=releaseold.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2235","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"044E2E34-470C-45C9-8136-22493077D842"}]}]}],"references":[{"url":"http://moodle.org/doc/?file=releaseold.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7711","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://moodle.org/doc/?file=releaseold.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2236","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"044E2E34-470C-45C9-8136-22493077D842"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5FB2555-7146-4A75-9D24-250BBC09244A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"949F0BC0-A79E-4B1D-894D-650CF68109F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"616AE17F-F5B4-4D64-B287-0AAB189C802A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"74246580-F351-4EAE-9406-2386CFF1819D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"077FFAAB-BACD-43F4-B146-DBFFD58CE619"}]}]}],"references":[{"url":"http://moodle.org/doc/?file=releaseold.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8090","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://moodle.org/doc/?file=releaseold.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8090","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2237","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to \"strings in Moodle texts.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"044E2E34-470C-45C9-8136-22493077D842"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"F5FB2555-7146-4A75-9D24-250BBC09244A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"949F0BC0-A79E-4B1D-894D-650CF68109F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"616AE17F-F5B4-4D64-B287-0AAB189C802A"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"74246580-F351-4EAE-9406-2386CFF1819D"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"077FFAAB-BACD-43F4-B146-DBFFD58CE619"},{"vulnerable":true,"criteria":"cpe:2.3:a:moodle:moodle:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"9C715839-F020-4F42-94F0-9FA34F294578"}]}]}],"references":[{"url":"http://moodle.org/doc/?file=releaseold.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12262","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/8522","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://moodle.org/doc/?file=releaseold.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12262","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/8522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2238","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Format string vulnerability in vsybase.c in vpopmail 5.4.2 and earlier has unknown impact and attack vectors.  NOTE: in a followup post, it was observed that the source code used constants that, when compiled, became static format strings.  Thus this is not a vulnerability"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6E3049A0-442A-42F9-A13B-928F6D6C1E39"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"DE1695F4-10B3-44F9-9D76-02CAB87C7A05"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"10579675-38BE-4D42-A2F0-2221A3890F81"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"999DC38F-421E-4354-93B2-5834EC625619"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"C12E14C7-0795-45E3-9674-5C20CECC498F"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"310BD211-20B7-4EA2-A990-7059581710C4"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.7:*:*:*:*:*:*:*","matchCriteriaId":"4785BE24-37AE-4DE8-B48C-1EDCA97F794E"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"78DFE32B-D0CD-4D03-844D-F8851ED71E25"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B96E495A-09F4-4E0E-B962-5F5DF6AF66A6"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.10:*:*:*:*:*:*:*","matchCriteriaId":"9C7A3D36-5C21-40E5-9C21-C44A6C7749C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.11:*:*:*:*:*:*:*","matchCriteriaId":"032CBD2D-B314-4801-B208-9DDDFBC0E968"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.11e:*:*:*:*:*:*:*","matchCriteriaId":"87D4CE2E-6682-4A5E-B9FE-EF50CA8930BA"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):4.5:*:*:*:*:*:*:*","matchCriteriaId":"96B83AE4-7435-425A-B8EE-A11F195ADE2F"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):4.6:*:*:*:*:*:*:*","matchCriteriaId":"609BC17E-DED7-49E0-99F3-B81073CF6733"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):4.7:*:*:*:*:*:*:*","matchCriteriaId":"A8E35BE4-722F-47AE-8D1D-497F66AFA3DD"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):4.8:*:*:*:*:*:*:*","matchCriteriaId":"C1B40C9B-3859-41DD-9FD3-3972708CC65B"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):4.9:*:*:*:*:*:*:*","matchCriteriaId":"566C31E7-7662-41FC-A652-C3803A2423BA"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):4.9.10:*:*:*:*:*:*:*","matchCriteriaId":"29EDC9AC-6546-47E4-86D5-9E788BCBC5C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):4.10:*:*:*:*:*:*:*","matchCriteriaId":"CA8E8391-786D-40F2-B8B8-7626988F13C4"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F287A51D-33E3-463D-AB3C-4C914582BBB3"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8CBD201C-E4B2-4708-94DB-0F1CE1236C2D"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.20:*:*:*:*:*:*:*","matchCriteriaId":"0531E65E-0C6A-4617-B87E-5389F4B640E7"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.21:*:*:*:*:*:*:*","matchCriteriaId":"870B4D7B-F556-4190-B82A-0094A4CE53BA"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.22:*:*:*:*:*:*:*","matchCriteriaId":"63E76644-6519-4864-B4CF-459A5081C6BE"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.23:*:*:*:*:*:*:*","matchCriteriaId":"8C1154A1-ECDD-451E-B272-ED76FA7D3F69"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.24:*:*:*:*:*:*:*","matchCriteriaId":"B4043EDB-586A-4078-B1A0-68D23422B98A"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.25:*:*:*:*:*:*:*","matchCriteriaId":"876139CF-1F11-4618-A1C1-B3426C904849"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.26:*:*:*:*:*:*:*","matchCriteriaId":"C7706E6F-005E-4563-AC5C-66E7F5345C7B"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.27:*:*:*:*:*:*:*","matchCriteriaId":"94722456-07C6-4590-BC63-DE2F75A056FA"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.28:*:*:*:*:*:*:*","matchCriteriaId":"561A76B8-EB7E-4BA9-A7F6-64481EC84AAF"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.29:*:*:*:*:*:*:*","matchCriteriaId":"6992CC73-D51E-461C-8184-84A967C82592"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.30:*:*:*:*:*:*:*","matchCriteriaId":"172BC3AE-99DB-48A2-BF30-D339AB986BA0"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.4:*:*:*:*:*:*:*","matchCriteriaId":"B59EA4D5-A90C-4DC8-AC09-F84ED42DD80A"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"61EAF823-E646-48FC-96ED-A1B8A6E75E31"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"80F2EAC8-7461-4218-B3F0-0DF028D4B6A6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0226.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0264.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0286.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9147","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10962","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17017","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0226.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0264.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0286.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17017","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2239","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in vsybase.c in vpopmail 5.4.2 and earlier might allow attackers to cause a denial of service or execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"6E3049A0-442A-42F9-A13B-928F6D6C1E39"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.2:*:*:*:*:*:*:*","matchCriteriaId":"DE1695F4-10B3-44F9-9D76-02CAB87C7A05"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"10579675-38BE-4D42-A2F0-2221A3890F81"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"999DC38F-421E-4354-93B2-5834EC625619"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"C12E14C7-0795-45E3-9674-5C20CECC498F"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"310BD211-20B7-4EA2-A990-7059581710C4"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.7:*:*:*:*:*:*:*","matchCriteriaId":"4785BE24-37AE-4DE8-B48C-1EDCA97F794E"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.8:*:*:*:*:*:*:*","matchCriteriaId":"78DFE32B-D0CD-4D03-844D-F8851ED71E25"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B96E495A-09F4-4E0E-B962-5F5DF6AF66A6"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.10:*:*:*:*:*:*:*","matchCriteriaId":"9C7A3D36-5C21-40E5-9C21-C44A6C7749C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.11:*:*:*:*:*:*:*","matchCriteriaId":"032CBD2D-B314-4801-B208-9DDDFBC0E968"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):3.4.11e:*:*:*:*:*:*:*","matchCriteriaId":"87D4CE2E-6682-4A5E-B9FE-EF50CA8930BA"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):4.5:*:*:*:*:*:*:*","matchCriteriaId":"96B83AE4-7435-425A-B8EE-A11F195ADE2F"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):4.6:*:*:*:*:*:*:*","matchCriteriaId":"609BC17E-DED7-49E0-99F3-B81073CF6733"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):4.7:*:*:*:*:*:*:*","matchCriteriaId":"A8E35BE4-722F-47AE-8D1D-497F66AFA3DD"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):4.8:*:*:*:*:*:*:*","matchCriteriaId":"C1B40C9B-3859-41DD-9FD3-3972708CC65B"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):4.9:*:*:*:*:*:*:*","matchCriteriaId":"566C31E7-7662-41FC-A652-C3803A2423BA"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):4.9.10:*:*:*:*:*:*:*","matchCriteriaId":"29EDC9AC-6546-47E4-86D5-9E788BCBC5C7"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):4.10:*:*:*:*:*:*:*","matchCriteriaId":"CA8E8391-786D-40F2-B8B8-7626988F13C4"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F287A51D-33E3-463D-AB3C-4C914582BBB3"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"8CBD201C-E4B2-4708-94DB-0F1CE1236C2D"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.20:*:*:*:*:*:*:*","matchCriteriaId":"0531E65E-0C6A-4617-B87E-5389F4B640E7"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.21:*:*:*:*:*:*:*","matchCriteriaId":"870B4D7B-F556-4190-B82A-0094A4CE53BA"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.22:*:*:*:*:*:*:*","matchCriteriaId":"63E76644-6519-4864-B4CF-459A5081C6BE"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.23:*:*:*:*:*:*:*","matchCriteriaId":"8C1154A1-ECDD-451E-B272-ED76FA7D3F69"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.24:*:*:*:*:*:*:*","matchCriteriaId":"B4043EDB-586A-4078-B1A0-68D23422B98A"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.25:*:*:*:*:*:*:*","matchCriteriaId":"876139CF-1F11-4618-A1C1-B3426C904849"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.26:*:*:*:*:*:*:*","matchCriteriaId":"C7706E6F-005E-4563-AC5C-66E7F5345C7B"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.27:*:*:*:*:*:*:*","matchCriteriaId":"94722456-07C6-4590-BC63-DE2F75A056FA"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.28:*:*:*:*:*:*:*","matchCriteriaId":"561A76B8-EB7E-4BA9-A7F6-64481EC84AAF"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.29:*:*:*:*:*:*:*","matchCriteriaId":"6992CC73-D51E-461C-8184-84A967C82592"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.3.30:*:*:*:*:*:*:*","matchCriteriaId":"172BC3AE-99DB-48A2-BF30-D339AB986BA0"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.4:*:*:*:*:*:*:*","matchCriteriaId":"B59EA4D5-A90C-4DC8-AC09-F84ED42DD80A"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.4.1:*:*:*:*:*:*:*","matchCriteriaId":"61EAF823-E646-48FC-96ED-A1B8A6E75E31"},{"vulnerable":false,"criteria":"cpe:2.3:a:inter7:vpopmail_\\(vchkpw\\):5.4.2:*:*:*:*:*:*:*","matchCriteriaId":"80F2EAC8-7461-4218-B3F0-0DF028D4B6A6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0226.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0264.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0286.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9146","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10962","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17016","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0226.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0264.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0286.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17016","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2240","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via (1) the query string in read.php or (2) unknown vectors in file.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"CF5B09FF-92DF-4F8D-9A7B-E5086E2B954D"}]}]}],"references":[{"url":"http://phorum.org/cvs-changelog-5.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12980","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011921","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.maxpatrol.com/advdetails.asp?id=15","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11129","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/11538","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17847","source":"cve@mitre.org"},{"url":"http://phorum.org/cvs-changelog-5.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.maxpatrol.com/advdetails.asp?id=15","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.maxpatrol.com/mp_advisory.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11129","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/11538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17847","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2241","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Phorum 5.0.11 and earlier allows remote attackers to inject arbitrary HTML or web script via search.php. NOTE: some sources have reported that the affected file is read.php, but this is inconsistent with the vendor's patch."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.11:*:*:*:*:*:*:*","matchCriteriaId":"CF5B09FF-92DF-4F8D-9A7B-E5086E2B954D"}]}]}],"references":[{"url":"http://phorum.org/cvs-changelog-5.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12980","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011921","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11538","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17846","source":"cve@mitre.org"},{"url":"http://phorum.org/cvs-changelog-5.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12980","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011921","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11538","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17846","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2242","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in search.php in Phorum, possibly 5.0.7 beta and earlier, allows remote attackers to inject arbitrary HTML or web script via the subject parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:5.0.7_beta:*:*:*:*:*:*:*","matchCriteriaId":"01CFDB0B-6FBD-49F3-8238-81E92661297E"}]}]}],"references":[{"url":"http://phorum.org/cvs-changelog-5.txt","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010787","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10822","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16831","source":"cve@mitre.org"},{"url":"http://phorum.org/cvs-changelog-5.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10822","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16831","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2243","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Phorum allows remote attackers to hijack sessions of other users by stealing and replaying the session hash in the phorum_uriauth parameter, as demonstrated using profile.php.  NOTE: the affected version was reported to be 4.3.7, but this may be erroneous."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phorum:phorum:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"1E532A66-A12D-48DD-B405-2345E5B715C9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0999.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010219","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16215","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0999.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16215","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2244","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The XML parser in Oracle 9i Application Server Release 2 9.0.3.0 and 9.0.3.1, 9.0.2.3 and earlier, and Release 1 1.0.2.2 and 1.0.2.2.2, and Database Server Release 2 9.2.0.1 and later, allows remote attackers to cause a denial of service (CPU and memory consumption) via a SOAP message containing a crafted DTD."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DC4ED2EB-1E90-4E99-AAD6-5D838800F9B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:1.0.2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C0160E00-D722-40CE-976C-77CB91C1B94D"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BAAD1A33-4333-4AFB-8D49-1274AE345BA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:application_server:9.0.3.1:*:*:*:*:*:*:*","matchCriteriaId":"852BF209-3C6F-403B-920D-50C46D37515B"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"43C6FFA8-18A6-4EE1-BE10-A1B7F3C1A47E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"4E876825-D6E5-4958-B737-4CE43A32BEC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:enterprise_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"B8E07567-754A-40C0-9428-D151880EE6F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DA77BC6D-661F-46E9-B144-1587C1192B8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0C059683-E0A1-4E97-B393-CB6B0EACF7C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:personal_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"A5675664-7036-48D0-9524-0350F626D4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2FB2708A-58D1-4F17-8504-3748D6667788"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"B78BD7D2-7B48-438C-8C24-01C4007C1A32"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:oracle9i:standard_9.2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"0DDCC0D1-32AD-4902-8383-2AA169C3F3BA"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/2004alert65.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10936","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4011","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9703","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15270","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/2004alert65.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10936","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15270","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2245","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Goollery 0.03 allows remote attackers to inject arbitrary HTML or web script via the (1) page parameter to viewalbum.php or (2) btopage parameter to viewpic.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goollery:goollery:0.3:*:*:*:*:*:*:*","matchCriteriaId":"A0B52D12-AD5A-4D35-82DF-773977E4DEDD"}]}]}],"references":[{"url":"http://securitytracker.com/id?1012062","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/11318","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11319","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/11320","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11587","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17957","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1012062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/11318","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11319","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/11320","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/ref/11/11xxx-goollery_multiple.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17957","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2246","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or web script via the conversation_id parameter to viewpic.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goollery:goollery:0.3:*:*:*:*:*:*:*","matchCriteriaId":"A0B52D12-AD5A-4D35-82DF-773977E4DEDD"}]}]}],"references":[{"url":"http://www.osvdb.org/11624","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/ref/11/11624-goollery-viewpic.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/11624","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/ref/11/11624-goollery-viewpic.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-2247","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the \"admin of paypal email addresses\" in AudienceConnect before 1.0.beta.21 has unknown impact and attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goosequill:audienceconnect:1.0.beta.20:*:*:*:*:*:*:*","matchCriteriaId":"1C0DC087-739B-48BE-9777-9C0A44CAEB7D"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?group_id=98629&release_id=279700","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/11443","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=98629&release_id=279700","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/11443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2248","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in RemoteEditor before 0.1.1 has unknown impact and attack vectors, related to \"oversize submissions.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goosequill:remoteeditor:0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BC66B85A-87B1-4733-AA20-C8E2C3128B01"}]}]}],"references":[{"url":"http://securitytracker.com/id?1012147","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=98629&release_id=279743","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/11444","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18010","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1012147","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=98629&release_id=279743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/11444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18010","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2249","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the \"access code\" in SecureEditor before 0.1.2 has unknown impact and attack vectors, possibly involving a bypass of IP address restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goosequill:audienceconnect_secureeditor:*:*:*:*:*:*:*:*","matchCriteriaId":"0B38DFEF-936C-4632-9E0C-5108BAFCF0EC"}]}]}],"references":[{"url":"http://securitytracker.com/id?1012066","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=98629&release_id=279733","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/11445","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17958","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1012066","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=98629&release_id=279733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/11445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17958","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2250","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the \"access code\" in RemoteEditor before 0.1.6 has unknown impact and attack vectors, possibly involving a bypass of IP address restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:goosequill:audienceconnect_remoteeditor:*:*:*:*:*:*:*:*","matchCriteriaId":"B531F457-3047-427A-AD71-CF9A072C37D7"}]}]}],"references":[{"url":"http://securitytracker.com/id?1012148","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=98629&release_id=279743","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/11445","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18009","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1012148","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=98629&release_id=279743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/11445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2251","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PPTP server in Astaro Security Linux before 4.024 provides information about its version, which makes it easier for remote attackers to construct specialized attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:4.017:*:*:*:*:*:*:*","matchCriteriaId":"7F3C0573-ED41-4B3A-A3DD-47D1FE7ECCAC"},{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:4.018:*:*:*:*:*:*:*","matchCriteriaId":"3D36AB13-39FA-456F-8CE7-52B480A2B225"},{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:4.019:*:*:*:*:*:*:*","matchCriteriaId":"A01E7E5C-0FA3-4B6C-A25E-4FA3182FC027"},{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:4.020:*:*:*:*:*:*:*","matchCriteriaId":"763399B8-881F-4D03-8755-A2023DDBD939"},{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:4.021:*:*:*:*:*:*:*","matchCriteriaId":"98CD6DC4-991D-4DB7-9592-3BE513B15D34"},{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:4.022:*:*:*:*:*:*:*","matchCriteriaId":"F6B9A21C-CBDE-4177-BE19-FF41D7491B61"},{"vulnerable":true,"criteria":"cpe:2.3:o:astaro:security_linux:4.023:*:*:*:*:*:*:*","matchCriteriaId":"E69910B1-565A-4A54-8A3B-0E3E903B981B"}]}]}],"references":[{"url":"http://secunia.com/advisories/13089","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012065","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.astaro.org/showflat.php?Cat=&Number=51459&page=0&view=collapsed&sb=5&o=&fpart=1#51459","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/11406","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17959","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.astaro.org/showflat.php?Cat=&Number=51459&page=0&view=collapsed&sb=5&o=&fpart=1#51459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/11406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17959","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2252","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The firewall in Astaro Security Linux before 4.024 sends responses to SYN-FIN packets, which makes it easier for remote attackers to obtain information about the system and construct specialized attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-203"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sophos:astaro_security_linux:*:*:*:*:*:*:*:*","versionEndExcluding":"4.024","matchCriteriaId":"033272F2-95B1-4BD7-B6AD-1684C785D48B"}]}]}],"references":[{"url":"http://secunia.com/advisories/13089","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012065","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.astaro.org/showflat.php?Cat=&Number=51459&page=0&view=collapsed&sb=5&o=&fpart=1#51459","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.osvdb.org/11407","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17960","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/13089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012065","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.astaro.org/showflat.php?Cat=&Number=51459&page=0&view=collapsed&sb=5&o=&fpart=1#51459","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.osvdb.org/11407","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17960","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2253","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in user.cgi in SurgeLDAP 1.0g and earlier allows remote attackers to read arbitrary files via a .. in the page parameter of the show command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeldap:1.0d:*:*:*:*:*:*:*","matchCriteriaId":"E23EDDAB-DED3-4F5E-8B3A-3A026FE5E5E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeldap:1.0e:*:*:*:*:*:*:*","matchCriteriaId":"9712432D-F07E-4356-9729-6E2934235C34"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeldap:1.0g:*:*:*:*:*:*:*","matchCriteriaId":"283AFAA1-0A10-4B74-9236-CBB6758C3428"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/SurgeLDAP%201.0g.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11343","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10103","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15851","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/SurgeLDAP%201.0g.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11343","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15851","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2254","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to bypass authentication for the administration interface via a direct request to admin.cgi with a modified utoken parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeldap:1.0a:*:*:*:*:*:*:*","matchCriteriaId":"641E4D27-EF84-4E26-A4A7-6485C9932763"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeldap:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"3755325B-1491-44D3-9C61-C82E01BBF44D"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeldap:1.0d:*:*:*:*:*:*:*","matchCriteriaId":"E23EDDAB-DED3-4F5E-8B3A-3A026FE5E5E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeldap:1.0e:*:*:*:*:*:*:*","matchCriteriaId":"9712432D-F07E-4356-9729-6E2934235C34"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeldap:1.0f:*:*:*:*:*:*:*","matchCriteriaId":"C56EB00E-014D-4A5F-B1DF-3A385271E57E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgeldap:1.0g:*:*:*:*:*:*:*","matchCriteriaId":"283AFAA1-0A10-4B74-9236-CBB6758C3428"}]}]}],"references":[{"url":"http://netwinsite.com/surgeldap/updates.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/11549","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/May/1010113.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://securitytracker.com/id?1010068","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/5890","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/10294","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16076","source":"cve@mitre.org"},{"url":"http://netwinsite.com/surgeldap/updates.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/11549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/May/1010113.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://securitytracker.com/id?1010068","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/5890","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/10294","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2255","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used as part of a template filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.3.12:*:*:*:*:*:*:*","matchCriteriaId":"4A956F61-5116-4F9B-BD3E-F933F104F0A0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0906.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11640","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010190","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6300","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.phpmyfaq.de/advisory_2004-05-18.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10374","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16177","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0906.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.phpmyfaq.de/advisory_2004-05-18.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16177","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2256","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly execute local PHP files, via .. sequences in the lang (language) variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4_alpha1:*:*:*:*:*:*:*","matchCriteriaId":"B0B69808-C3F4-401E-996D-88091203698E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0906.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11640","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010190","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.phpmyfaq.de/advisory_2004-05-18.php","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/363636","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10377","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16223","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0906.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11640","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010190","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.phpmyfaq.de/advisory_2004-05-18.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/363636","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16223","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2257","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct request."}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM"},"exploitabilityScore":3.9,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-425"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-425"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyfaq:phpmyfaq:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"60CA0AB0-D9AE-463E-9D1B-E13B2F7B66DD"}]}]}],"references":[{"url":"http://secunia.com/advisories/12085","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010795","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/8240","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.phpmyfaq.de/advisory_2004-07-27.php","source":"cve@mitre.org","tags":["Product","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10813","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16814","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/12085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/8240","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.phpmyfaq.de/advisory_2004-07-27.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16814","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2258","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Xconfig in Hummingbird Exceed before 9.0.0.1, when the Screen Definition is password-protected, allows local users to access certain options by switching to another tab, then switching back to the original tab."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hummingbird:exceed:9.0:*:*:*:*:*:*:*","matchCriteriaId":"2C3F1215-D202-4783-A350-5E27952D7620"}]}]}],"references":[{"url":"http://secunia.com/advisories/11678","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.hummingbird.com/customer/download.asp?r2=/exceed/900/xconfig_9002.zip","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/6304","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10393","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16221","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.hummingbird.com/customer/download.asp?r2=/exceed/900/xconfig_9002.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/6304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10393","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16221","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2259","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"vsftpd before 1.2.2, when under heavy load, allows attackers to cause a denial of service (crash) via a SIGCHLD signal during a malloc or free call, which is not re-entrant."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:beasts:vsftpd:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"81D2F9DF-AC3F-4D70-AB02-986149AD6B0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:beasts:vsftpd:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E49D2A77-793B-4038-B62B-20160DFECFAF"}]}]}],"references":[{"url":"ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-1.2.2/Changelog","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=119136","source":"cve@mitre.org"},{"url":"http://rhn.redhat.com/errata/RHBA-2004-164.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/11680","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11736","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6306","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10394","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16222","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11049","source":"cve@mitre.org"},{"url":"ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-1.2.2/Changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=119136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHBA-2004-164.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/11680","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6306","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10394","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2260","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user clicks a link, which allows remote attackers to redirect to other sites via the onUnload attribute."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-601"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndExcluding":"7.50","matchCriteriaId":"3C2A60B0-579A-46F8-91E4-63275CF8595A"}]}]}],"references":[{"url":"http://secunia.com/advisories/11532","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2004-2/advisory/","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.osvdb.org/6108","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/10337","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16131","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/11532","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2004-2/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.osvdb.org/6108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/10337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16131","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2261","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in e107 allows remote attackers to inject arbitrary script or HTML via the \"login name/author\" field in the (1) news submit or (2) article submit functions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:0.545:*:*:*:*:*:*:*","matchCriteriaId":"8DDD8B3B-8580-4624-8D77-E3FD97DFF4A6"},{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:0.554:*:*:*:*:*:*:*","matchCriteriaId":"6454D949-83A2-4F69-92E1-BBCD84F21BC2"},{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:0.555_beta:*:*:*:*:*:*:*","matchCriteriaId":"CC274184-AD8E-4BC2-BC6A-4E64F354BFFD"},{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:0.603:*:*:*:*:*:*:*","matchCriteriaId":"F8692341-8DF2-4943-853A-4AAF1F313914"},{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:0.610:*:*:*:*:*:*:*","matchCriteriaId":"04C91C45-9A96-4E69-8A0A-D619AB45BC08"},{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:0.611:*:*:*:*:*:*:*","matchCriteriaId":"5F7C68F4-9ECD-41A9-B4AE-48F028841428"},{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:0.612:*:*:*:*:*:*:*","matchCriteriaId":"28B75E28-08DE-4CA2-A60B-FB2F61AEC5BA"},{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:0.613:*:*:*:*:*:*:*","matchCriteriaId":"B9AA824A-CEE6-460B-A668-92FC3A822305"},{"vulnerable":false,"criteria":"cpe:2.3:a:e107:e107:0.614:*:*:*:*:*:*:*","matchCriteriaId":"6A51FBB3-42CE-40E1-A15D-ADDFBF8E203D"}]}]}],"references":[{"url":"http://secunia.com/advisories/11567","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010084","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5982","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10293","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16087","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010084","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10293","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16087","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2262","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary code by uploading a PHP file via the upload parameter to images.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*","versionEndExcluding":"0.617","matchCriteriaId":"6978120F-CFEC-4C45-A954-792E0FB8FFD8"}]}]}],"references":[{"url":"http://e107.org/comment.php?comment.news.672","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://secunia.com/advisories/13657","source":"cve@mitre.org","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012657","source":"cve@mitre.org","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/12586","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/12111","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18670","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/704","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://e107.org/comment.php?comment.news.672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://secunia.com/advisories/13657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.osvdb.org/12586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/12111","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://www.exploit-db.com/exploits/704","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2263","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to modify SQL statements via the vc2 cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:playsms:playsms:0.6:*:*:*:*:*:*:*","matchCriteriaId":"454C1BB8-1172-4DB6-8237-F853412B9014"},{"vulnerable":true,"criteria":"cpe:2.3:a:playsms:playsms:0.7:*:*:*:*:*:*:*","matchCriteriaId":"6C31583C-61AB-4CDA-B937-E5E52A423834"}]}]}],"references":[{"url":"http://securitytracker.com/id?1010984","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=254915","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8984","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securiteam.com/unixfocus/5UP0F2ADPS.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10970","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17031","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=254915","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/8984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securiteam.com/unixfocus/5UP0F2ADPS.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2264","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Format string bug in the open_altfile function in filename.c for GNU less 382, 381, and 358 might allow local users to cause a denial of service or possibly execute arbitrary code via format strings in the LESSOPEN environment variable. NOTE: since less is not setuid or setgid, then this is not a vulnerability unless there are plausible scenarios under which privilege boundaries could be crossed"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:less:358:*:*:*:*:*:*:*","matchCriteriaId":"4116A3D4-F556-45E6-AB1D-F31250289254"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:less:381:*:*:*:*:*:*:*","matchCriteriaId":"88424082-E03D-49CF-AD32-57D194EF566D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:less:382:*:*:*:*:*:*:*","matchCriteriaId":"07E3A41B-CFC5-421E-9DF6-EE969658B0EE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0794.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0811.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010988","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9014","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17032","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0794.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0811.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010988","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2265","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:uudeview:uudeview:0.5.18:*:*:*:*:*:*:*","matchCriteriaId":"B6C944B6-112F-4914-8FAB-412C292776AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:uudeview:uudeview:0.5.19:*:*:*:*:*:*:*","matchCriteriaId":"F6CFEE2D-B4A2-4F63-8AC0-304A556FFD82"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/9857","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15492","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15492","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2266","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Ansel 2.1 and earlier allows remote attackers to modify SQL statements via the image parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ansel:ansel:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D469062A-161B-4598-9DB1-9CD5ED1B0A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:ansel:ansel:1.1:*:*:*:*:*:*:*","matchCriteriaId":"CC69A1DF-6110-4F0D-8CE6-B1F28B829F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ansel:ansel:1.2:*:*:*:*:*:*:*","matchCriteriaId":"6F3BC3CA-5A9B-45A7-B6A4-ABF03C14AD9C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ansel:ansel:1.3:*:*:*:*:*:*:*","matchCriteriaId":"9F3750EF-E7E0-4B21-8D81-363B382A0DE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ansel:ansel:1.4:*:*:*:*:*:*:*","matchCriteriaId":"EB7C0026-31EA-4BB0-AC35-E7F6AF294C04"},{"vulnerable":true,"criteria":"cpe:2.3:a:ansel:ansel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B94B4650-CBBB-4B96-AEB3-F8E6E4D97757"},{"vulnerable":true,"criteria":"cpe:2.3:a:ansel:ansel:2.1:*:*:*:*:*:*:*","matchCriteriaId":"711C875C-09AF-4F27-848A-009213B2BBB4"}]}]}],"references":[{"url":"http://secunia.com/advisories/12856","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2004-17/advisory/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012434","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/12236","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11824","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18373","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2004-17/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/12236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18373","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2267","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Ansel 2.1 and earlier allows remote attackers to inject arbitrary HTML or web script via the album name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:ansel:ansel:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D469062A-161B-4598-9DB1-9CD5ED1B0A01"},{"vulnerable":false,"criteria":"cpe:2.3:a:ansel:ansel:1.1:*:*:*:*:*:*:*","matchCriteriaId":"CC69A1DF-6110-4F0D-8CE6-B1F28B829F0E"},{"vulnerable":false,"criteria":"cpe:2.3:a:ansel:ansel:1.2:*:*:*:*:*:*:*","matchCriteriaId":"6F3BC3CA-5A9B-45A7-B6A4-ABF03C14AD9C"},{"vulnerable":false,"criteria":"cpe:2.3:a:ansel:ansel:1.3:*:*:*:*:*:*:*","matchCriteriaId":"9F3750EF-E7E0-4B21-8D81-363B382A0DE0"},{"vulnerable":false,"criteria":"cpe:2.3:a:ansel:ansel:1.4:*:*:*:*:*:*:*","matchCriteriaId":"EB7C0026-31EA-4BB0-AC35-E7F6AF294C04"},{"vulnerable":false,"criteria":"cpe:2.3:a:ansel:ansel:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B94B4650-CBBB-4B96-AEB3-F8E6E4D97757"},{"vulnerable":false,"criteria":"cpe:2.3:a:ansel:ansel:2.1:*:*:*:*:*:*:*","matchCriteriaId":"711C875C-09AF-4F27-848A-009213B2BBB4"}]}]}],"references":[{"url":"http://secunia.com/advisories/12856","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2004-17/advisory/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012434","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/12237","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11824","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18374","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2004-17/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/12237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18374","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2268","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PimenGest2 before 1.1.1 allows remote attackers to obtain the database password via debug information in rowLatex.inc.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pimentech:pimengest2:1.10.1:*:*:*:*:*:*:*","matchCriteriaId":"C57EF25A-B0CC-490F-8EE9-363120EB1EC6"}]}]}],"references":[{"url":"ftp://ftp.pimentech.net/src/pimengest2/debian/changelog","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010257","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/6324","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10408","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16234","source":"cve@mitre.org"},{"url":"ftp://ftp.pimentech.net/src/pimengest2/debian/changelog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010257","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/6324","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2269","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in pads.c in Passive Asset Detection System (Pads) might allow local users to execute arbitrary code via a long report file name argument. NOTE: since Pads is not normally installed setuid, this may not be a vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:matt_shelton:pads:1.1:*:*:*:*:*:*:*","matchCriteriaId":"1F11E8C7-F472-4AEA-82EF-0001BDE7531D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0834.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/9067","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17038","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0834.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/9067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17038","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2270","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in IBM Parallel Environment (PE) 3.2 and 4.1 allows attackers to execute arbitrary commands as root via unknown vectors in the sample code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:parallel_environment:3.2:*:*:*:*:*:*:*","matchCriteriaId":"1FE500CC-3ABA-4558-A6E7-184C2748F669"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:parallel_environment:4.1:*:*:*:*:*:*:*","matchCriteriaId":"258A96B0-ECAE-42C8-8146-08F167E1B4A7"}]}]}],"references":[{"url":"http://secunia.com/advisories/11580","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010109","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/6008","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10310","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16093","source":"cve@mitre.org"},{"url":"https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=18&ID=312","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/6008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10310","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=18&ID=312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-2271","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minishare:minimal_http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.1","matchCriteriaId":"E3B2E404-164C-424C-8584-79F1D68FB80F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0208.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/13114","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012106","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=241158","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/11530","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securiteam.com/exploits/6X00B1PBPC.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11620","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17978","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0208.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/13114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=241158","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/11530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securiteam.com/exploits/6X00B1PBPC.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17978","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2272","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the sockFinger_DataArrival function in efFingerD 0.2.12 allows remote attackers to cause a denial of service (daemon crash) via a long finger command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:evan_sims:effingerd:0.2.12:*:*:*:*:*:*:*","matchCriteriaId":"F8017203-BE41-41D3-9A29-F969AB78F49D"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/efFingerD.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010094","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/5991","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16097","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/efFingerD.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010094","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/5991","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16097","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2273","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"efFingerD 0.2.12 allows remote attackers to cause a denial of service (daemon crash) via a packet with a single byte, which triggers a \"Wrong protocol or connection state\" error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:evan_sims:effingerd:0.2.12:*:*:*:*:*:*:*","matchCriteriaId":"F8017203-BE41-41D3-9A29-F969AB78F49D"}]}]}],"references":[{"url":"http://secunia.com/advisories/11573","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5992","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11573","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5992","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2274","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors, possibly related to the parsing of the URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:jigsaw:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E5C4FA68-E26F-495B-83F6-029DA3FC14F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:jigsaw:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"30064D23-AB8B-40F0-AEA1-15791C5CAAD8"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:jigsaw:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"122FAE6C-FFBD-4923-A0E2-BB256C1B28AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:jigsaw:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"C5A3F27A-C6A2-4D76-9526-7DA378DA60DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:jigsaw:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C1B164CD-0E08-4AD9-808E-5DD5C18A3E66"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:jigsaw:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"D1C33602-EB87-4910-B575-F910FD67E995"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:jigsaw:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BC05E078-6EB9-4FB4-AF77-4E798A108F18"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:jigsaw:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"39590E6C-0C1F-41BC-808E-ADF8B137B56D"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:jigsaw:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"AF9D5A14-8408-4989-99DC-7D5AA31ED251"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:jigsaw:2.2:*:*:*:*:*:*:*","matchCriteriaId":"CD396172-E3CE-4C01-AD9B-72FE9BD143CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:jigsaw:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"081F296A-5BD8-4A3F-88E6-F27327EFE42A"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:jigsaw:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E219170-57D9-4525-89E3-9601F7A79EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:w3c:jigsaw:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"3B55F538-1449-4193-B081-36DBBBC4DE3A"}]}]}],"references":[{"url":"http://secunia.com/advisories/10975","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009169","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/4014","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9711","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.w3.org/Jigsaw/RelNotes.html#2.2.4","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15298","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009169","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/4014","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.w3.org/Jigsaw/RelNotes.html#2.2.4","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15298","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2275","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:i-mall_commerce:i-mall.cgi:*:*:*:*:*:*:*:*","matchCriteriaId":"6CE3C766-F397-4BED-A634-E844E055F5D0"}]}]}],"references":[{"url":"http://secunia.com/advisories/11972","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/7461","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/exploits/5UP0715FPC.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10626","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.zone-h.org/advisories/read/id=4904","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16540","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/7461","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/exploits/5UP0715FPC.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10626","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.zone-h.org/advisories/read/id=4904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16540","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2276","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"F-Secure Anti-Virus 5.41 and 5.42 on Windows, Client Security 5.50 and 5.52, 4.60 for Samba Servers, and 4.52 and earlier for Linux does not properly detect certain viruses in a PKZip archive, which allows viruses such as Sober.D and Sober.G to bypass initial detection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:client_security:*:*:*:*:*","matchCriteriaId":"46F72328-7B69-4A1B-A065-E65544F27A75"},{"vulnerable":false,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:file_servers:*:*:*:*:*","matchCriteriaId":"9528ACFA-2A1C-4292-BDB6-93041E9CE97E"},{"vulnerable":false,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:workstations:*:*:*:*:*","matchCriteriaId":"AC90ADFD-32FE-4EA1-9583-5EFE585152CB"},{"vulnerable":false,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:file_servers:*:*:*:*:*","matchCriteriaId":"035181DB-9366-42A7-B783-3E8415FA8FBB"},{"vulnerable":false,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:workstations:*:*:*:*:*","matchCriteriaId":"4E26052D-35B8-44E7-8F66-442BA55F4483"},{"vulnerable":false,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:client_security:*:*:*:*:*","matchCriteriaId":"CBA4A9B7-626A-4539-852F-96C49D860E41"}]}]}],"references":[{"url":"http://secunia.com/advisories/11699","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-linux-hotfixes.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.f-secure.de/ger/home/downloads/hotfixes/av5-hotfixes.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/6409","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16243","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-linux-hotfixes.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.f-secure.de/ger/home/downloads/hotfixes/av5-hotfixes.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/6409","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16243","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2277","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in aGSM Half-Life client allows remote Half-Life servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server response."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:agsm:agsm:2.35c:*:*:*:*:*:*:*","matchCriteriaId":"D3C47B10-A3B8-4B50-9BE0-5676DA95EB32"},{"vulnerable":true,"criteria":"cpe:2.3:a:agsm:agsm:2.51c:*:*:*:*:*:*:*","matchCriteriaId":"B197BAA4-3055-4E96-A5ED-44BBC442E0C6"}]}]}],"references":[{"url":"http://secunia.com/advisories/12334","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010989","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9072","source":"cve@mitre.org"},{"url":"http://www.security.nnov.ru/docs6620.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10989","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17046","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security.nnov.ru/docs6620.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10989","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17046","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2278","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown cross-site scripting (XSS) vulnerability in the web GUI in vHost before 3.10r1 has unknown impact and attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.00r1:*:*:*:*:*:*:*","matchCriteriaId":"B3285E0D-8E63-4D01-A783-AA9E16C42334"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.00r2:*:*:*:*:*:*:*","matchCriteriaId":"A3721B9F-1E7F-481E-80F2-07B34CAFDC0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.00r3:*:*:*:*:*:*:*","matchCriteriaId":"C17C1C3E-BE9B-4FC5-BCF2-E7DE7420A3ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.00r4:*:*:*:*:*:*:*","matchCriteriaId":"7CCFF871-BB76-47B4-93F0-937A458E4780"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.00r5:*:*:*:*:*:*:*","matchCriteriaId":"96AF18A7-3FBB-4C32-8B37-9B3F9B7DA8F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.00r6:*:*:*:*:*:*:*","matchCriteriaId":"E3A3F9B8-A750-48F5-99BF-4508673F5E39"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.01r1:*:*:*:*:*:*:*","matchCriteriaId":"2FB873EA-EB76-41EE-9517-B2805D486F82"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.02r1:*:*:*:*:*:*:*","matchCriteriaId":"84758258-5AF7-4E4C-B7B1-432DC846B922"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.02r2:*:*:*:*:*:*:*","matchCriteriaId":"17F76349-E2BC-4762-91CB-1A7FFD1031E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.03r1:*:*:*:*:*:*:*","matchCriteriaId":"3B98E288-285B-4C9C-BAF8-0BE4C130294C"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.04r1:*:*:*:*:*:*:*","matchCriteriaId":"77114499-2DE0-467E-AB5E-12F25121E582"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.05r1:*:*:*:*:*:*:*","matchCriteriaId":"0C9ACE7E-8E35-410C-B7B1-5BED4BCC7FEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.05r2:*:*:*:*:*:*:*","matchCriteriaId":"1E46977C-1AD3-4540-B8FC-353C33C8000B"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.05r3:*:*:*:*:*:*:*","matchCriteriaId":"D6D6D8CC-5EC9-4A1E-A447-277265BDB4C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.05r4:*:*:*:*:*:*:*","matchCriteriaId":"B45113C5-8989-4996-BA06-042963FCDED3"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.05r5:*:*:*:*:*:*:*","matchCriteriaId":"73F3F6C3-F6A4-4817-894E-C2CAA9B168E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:chaogic_systems:vhost:3.05r6:*:*:*:*:*:*:*","matchCriteriaId":"B41A934A-8B20-4DD5-BB8E-25402B352BFD"}]}]}],"references":[{"url":"http://chaogic.com/vhost/ChangeLog.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11113","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009404","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/4207","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9860","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15446","source":"cve@mitre.org"},{"url":"http://chaogic.com/vhost/ChangeLog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11113","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009404","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/4207","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15446","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2279","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Invision Power Board 1.3 Final allows remote attackers to execute arbitrary script as other users via the pop parameter in a chat action to index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:invision_power_services:invision_power_board:1.3_final:*:*:*:*:*:*:*","matchCriteriaId":"94FBF21B-CF52-41BB-BAF1-AF822586D28B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0082.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15448","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0082.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15448","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2280","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial of service (crash) via unknown vectors related to Java applets, as identified by KSPR62F4KN."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1E234AD1-7202-421E-82C8-880E84876021"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"55D037CC-1207-48E2-882E-8B236EE7138F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5059BEF2-84EB-4B5F-84F5-9E3200B068F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB71B7AA-957B-46A6-9BC9-CE23EC721189"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"46CF28C0-51AD-4783-B1F0-205DF64D133A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9C0015A2-A70E-4B0C-B59A-44F5F611293D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1360A50E-C1E1-4690-874A-04CC7C1A77CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D94927A9-61FD-459F-9A6D-E581A4AF505C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"D3B32BA2-9EB7-4294-A857-226A5B1CC401"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"EF64CA16-6C20-42E1-BA68-BD63A873BFA9"}]}]}],"references":[{"url":"http://secunia.com/advisories/12046","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=475&context=SSKTWP&q1=Java&uid=swg21173910&loc=en_US&cs=utf-8&lang=en","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8418","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10704","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=475&context=SSKTWP&q1=Java&uid=swg21173910&loc=en_US&cs=utf-8&lang=en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/8418","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2281","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, related to Java applets, as identified by (1) KSPR5YS6GR and (2) KSPR62F4D3."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1E234AD1-7202-421E-82C8-880E84876021"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"55D037CC-1207-48E2-882E-8B236EE7138F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"5059BEF2-84EB-4B5F-84F5-9E3200B068F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB71B7AA-957B-46A6-9BC9-CE23EC721189"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"46CF28C0-51AD-4783-B1F0-205DF64D133A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5:*:*:*:*:*:*:*","matchCriteriaId":"1360A50E-C1E1-4690-874A-04CC7C1A77CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D94927A9-61FD-459F-9A6D-E581A4AF505C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"D3B32BA2-9EB7-4294-A857-226A5B1CC401"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_notes:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"EF64CA16-6C20-42E1-BA68-BD63A873BFA9"}]}]}],"references":[{"url":"http://secunia.com/advisories/12046","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=475&context=SSKTWP&q1=Java&uid=swg21173910&loc=en_US&cs=utf-8&lang=en","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8416","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8417","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10704","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12046","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=475&context=SSKTWP&q1=Java&uid=swg21173910&loc=en_US&cs=utf-8&lang=en","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/8416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/8417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10704","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2282","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DansGuardian before 2.7.7-2 allows remote attackers to bypass URL filters via a \"..\" in the request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"C2D0F3B1-8F40-4604-91B9-BE7FF4ACCC58"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.7.5:*:*:*:*:*:*:*","matchCriteriaId":"609B40DB-18ED-466F-9F51-168E4E4C14E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.7.6:*:*:*:*:*:*:*","matchCriteriaId":"1D7DD99E-334F-498D-9E62-835661A162C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.7.7:*:*:*:*:*:*:*","matchCriteriaId":"D4A50318-2B85-48F2-AC9B-24EE70E425ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.7.7.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"BF9A3DB7-48CF-43BF-9979-A3D489A364FA"}]}]}],"references":[{"url":"http://dansguardian.org/?page=history","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5950","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://dansguardian.org/?page=history","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5950","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2283","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in DansGuardian before 2.6.1-13 allows remote attackers to bypass URL filters via a crafted request that causes a page to be added to the clean page cache."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.6.1.8:*:*:*:*:*:*:*","matchCriteriaId":"1D0F7939-F7EE-4409-875F-3141D963FA46"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.6.1.9:*:*:*:*:*:*:*","matchCriteriaId":"9781E812-5AB1-43A4-B1B8-A55C065F6A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.6.1.10:*:*:*:*:*:*:*","matchCriteriaId":"CDA8E83B-136C-4618-BD10-70B3050B6700"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.6.1.11:*:*:*:*:*:*:*","matchCriteriaId":"BB6611BD-5E90-45CD-B748-3193C9CA1C4D"},{"vulnerable":true,"criteria":"cpe:2.3:a:daniel_barron:dansguardian:2.6.1.12:*:*:*:*:*:*:*","matchCriteriaId":"1B7943A1-9C4F-4877-B0A3-CB0D946585C9"}]}]}],"references":[{"url":"http://dansguardian.org/?page=history","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5951","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://dansguardian.org/?page=history","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5951","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2284","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:1.7:*:*:*:*:*:*:*","matchCriteriaId":"9B94ECAA-1148-4A84-93B4-56B56A0938AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:1.8:*:*:*:*:*:*:*","matchCriteriaId":"DA86C04C-D31E-4B0B-A8E0-13A5FED7644E"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:1.71:*:*:*:*:*:*:*","matchCriteriaId":"62736A5C-7E68-4E47-9954-D62C913E3AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:1.81:*:*:*:*:*:*:*","matchCriteriaId":"02D1462D-CC70-41CC-BAF4-48CD0ECAFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:1.90:*:*:*:*:*:*:*","matchCriteriaId":"50009537-0820-4CDB-94E1-2222040F234C"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:2.20:*:*:*:*:*:*:*","matchCriteriaId":"FCEC7B40-834B-4476-8A0D-FDEA86C436D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:2.21:*:*:*:*:*:*:*","matchCriteriaId":"467BEC56-9C42-4180-B422-F0099AF77B21"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:2.30:*:*:*:*:*:*:*","matchCriteriaId":"9FCF6241-3F7C-4867-8D2E-CCA1BEFCA9D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:2.31:*:*:*:*:*:*:*","matchCriteriaId":"EC478ABF-19F8-4195-AA37-23668E2474EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:2.32:*:*:*:*:*:*:*","matchCriteriaId":"E3A87C77-5F6E-497D-A6A0-7D68D5E27E33"}]}]}],"references":[{"url":"http://openwebmail.org/openwebmail/download/cert/advisories/SA-04:04.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12017","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010605","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/7474","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10637","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16549","source":"cve@mitre.org"},{"url":"http://openwebmail.org/openwebmail/download/cert/advisories/SA-04:04.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010605","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/7474","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10637","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16549","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2285","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2023-11-07T01:57:02.447","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-2022.  Reason: This candidate is a duplicate of CVE-2004-2022.  Notes: All CVE users should reference CVE-2004-2022 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-2286","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier, which may trigger a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"946C2AD2-EAEE-473E-9A3C-827FA3D89D2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.6.1.630:*:*:*:*:*:*:*","matchCriteriaId":"4921CDAF-E4D5-4AED-8FD9-1E506105A5D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.6.2:*:*:*:*:*:*:*","matchCriteriaId":"BA1DA7BF-DAB4-47F9-BE5B-808E8FFFC83E"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.6.3:*:*:*:*:*:*:*","matchCriteriaId":"D5B92CD6-8E90-4737-B5E3-1AA61A030809"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.7.1:*:*:*:*:*:*:*","matchCriteriaId":"4DA00BED-7C68-4BEA-93CE-8A064F4A8624"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.7.2:*:*:*:*:*:*:*","matchCriteriaId":"FB52D21C-3164-40E3-80CC-3DE2F351CBC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.7.3:*:*:*:*:*:*:*","matchCriteriaId":"658D6331-3F95-4D93-A244-4AD60B109CD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.8:*:*:*:*:*:*:*","matchCriteriaId":"20B2F92E-AE6D-4C99-8835-798D52121D93"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.8.1:*:*:*:*:*:*:*","matchCriteriaId":"8C0C48FF-44CF-4F62-BC1E-D8C6AE6A774E"},{"vulnerable":true,"criteria":"cpe:2.3:a:activestate:activeperl:5.8.3:*:*:*:*:*:*:*","matchCriteriaId":"AE970B5C-AB40-46B8-A03C-C5597C06A438"},{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.3:*:*:*:*:*:*:*","matchCriteriaId":"C6D64BFC-E974-460C-A635-7319676049A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.4:*:*:*:*:*:*:*","matchCriteriaId":"8FBFF691-770C-4181-BB40-14BD1B90F705"},{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.4.5:*:*:*:*:*:*:*","matchCriteriaId":"C7EF5BB8-FFEA-4927-A289-3C9A7ADEC6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.5:*:*:*:*:*:*:*","matchCriteriaId":"AB034FE1-9575-45B4-9E8F-1B068E3ED1CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.5.3:*:*:*:*:*:*:*","matchCriteriaId":"D6D7F3D2-FE93-4F2F-B8FB-F2A7869502FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.6:*:*:*:*:*:*:*","matchCriteriaId":"EA6112C9-0E67-47D3-94A7-0D0254ECF27F"},{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.6.1:*:*:*:*:*:*:*","matchCriteriaId":"7530A863-0FFF-4332-8E6F-4329AB4DE5FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.8.0:*:*:*:*:*:*:*","matchCriteriaId":"3D30E072-9E6A-49B4-A5C7-63A328598A68"},{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.8.1:*:*:*:*:*:*:*","matchCriteriaId":"434F0580-985F-42AF-BA10-FAB7E2C23ED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:larry_wall:perl:5.8.3:*:*:*:*:*:*:*","matchCriteriaId":"18B179E0-C843-46C9-AAD2-78E998175E41"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0878.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10380","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16224","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0878.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16224","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2287","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. (dot dot) in the wdir parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dsm:light_web_file_browser:2.0:*:*:*:*:*:*:*","matchCriteriaId":"ABA759F5-26BD-4FE1-9810-97A8CF165D16"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/10381","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10381","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-2288","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Jelsoft vBulletin allows remote attackers to spoof parts of a website via the loc parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:1.0.1:*:lite:*:*:*:*:*","matchCriteriaId":"70BC7FDF-AEAD-4BCA-AB0B-36F62D3D92A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"CAC28EB5-343A-4B55-8ECE-8C46D304A1BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"7C3499B6-7DC8-4DE5-80EB-1EEA3307ABA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"B53F61D2-5FD2-4625-A9FB-8E0258924BAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"FEA26ED0-6DF8-4730-AE19-E8F4AB9AC906"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"306C6BDF-C687-4B63-998B-B520DF1D1B1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.2:*:*:*:*:*:*:*","matchCriteriaId":"DF18ED7C-80BB-4A78-8809-9AAE817876A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA385E01-7FA0-4CC3-ADFE-0B3184A9093D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"1D731A35-E0DB-4F40-A981-C38229A2EB1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"4053C8E5-5510-4814-A46E-89B81266C29D"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"8E6753AB-DFCF-4D40-8267-645810F7967E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.7:*:*:*:*:*:*:*","matchCriteriaId":"4B2B3772-A566-4A51-8B51-68E78C86CB08"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.8:*:*:*:*:*:*:*","matchCriteriaId":"DAFBBAA9-BD46-44E3-9618-D87384E959A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"31E594B0-05D5-46C2-8F06-F58E3F8BBD1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"04E0702A-9235-45BE-82A8-BFD57A0DCC9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.3.2:*:*:*:*:*:*:*","matchCriteriaId":"799F983E-908D-4B9F-9C99-6422863E7807"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BD0914B4-24A9-438F-9B44-A6809D755168"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:2.3.4:*:*:*:*:*:*:*","matchCriteriaId":"D29DB4E2-C87F-4D45-BA8A-B38835FCAD44"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"0A4E9C82-64CF-4487-8947-ED745C41945A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_beta_3:*:*:*:*:*:*:*","matchCriteriaId":"D099410F-AD78-4EF1-879E-BEED838B90E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_beta_4:*:*:*:*:*:*:*","matchCriteriaId":"B411D271-87B5-4A82-8E05-5277E8E205E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_beta_5:*:*:*:*:*:*:*","matchCriteriaId":"09FD2B80-AEB5-444D-AEC3-F59E6727BCF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_beta_6:*:*:*:*:*:*:*","matchCriteriaId":"1CA6003D-1E93-472E-B037-8D0922C4247C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_beta_7:*:*:*:*:*:*:*","matchCriteriaId":"5B366723-3598-4B4A-AFB9-E4A9616D033B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_gamma:*:*:*:*:*:*:*","matchCriteriaId":"0EFD7266-0E3B-44B3-AC8E-DE0BFC5E2939"}]}]}],"references":[{"url":"http://www.infosecurity.org.cn/article/hacker/exploit/16557.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10362","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.infosecurity.org.cn/article/hacker/exploit/16557.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10362","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-2289","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0168.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11633","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.freewebs.com/roozbeh_afrasiabi/xploit/execute.htm","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/6221","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10363","source":"cve@mitre.org"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-015","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16171","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0168.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11633","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.freewebs.com/roozbeh_afrasiabi/xploit/execute.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/6221","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16171","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2290","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows XP Explorer allows attackers to execute arbitrary code via a HTML and script in a self-executing folder that references an executable file within the folder, which is automatically executed when a user accesses the folder."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-01/0267.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10708","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008843","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/3711","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9487","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14924","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-01/0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10708","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008843","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/3711","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9487","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2291","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helper objects and a shortcut (link) to execute the target script."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*","matchCriteriaId":"8E93C22E-812E-4CDA-9850-2386CE1E817A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/348688","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9335","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/348688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-2292","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service (application crash) via a long STATUS command to the IMAP server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:2.8:*:*:*:*:*:*:*","matchCriteriaId":"63BE92A3-5320-4E68-89F7-BF977E602FB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:2.8.5.0:*:*:*:*:*:*:*","matchCriteriaId":"C6727183-BD1B-4816-A0B0-3CA24B1F41D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:2.71_sp1:*:*:*:*:*:*:*","matchCriteriaId":"7503CBFE-B6F8-457E-BA78-16414EE14789"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"74E791DD-1376-4E77-9D7B-C66E88146248"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"759C3190-DABF-4C54-8D26-A5285883BFA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AF752E6A-0AB8-4B82-A895-9AF79B0783FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"2CFA585E-4355-4497-8936-FD63E334B917"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.1_beta:*:*:*:*:*:*:*","matchCriteriaId":"6906B4D1-9336-4E52-A1D4-1402F5EF2BBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"96A1816E-0E48-4879-86A4-22E7FCCAC598"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"8B02DB57-1B98-43AF-B400-73019A747C5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"0E724258-DCD1-4F09-AD2F-3880F86FA649"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:3.5.6:*:*:*:*:*:*:*","matchCriteriaId":"772A222C-606C-42B5-A523-9584FFB9E0BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"1A537AF6-0E86-41BD-AA41-B1598DCA01D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A5162F06-31BD-4B04-8F60-A4ACBB7E16DD"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8CCADFC8-99A1-4F7E-96E6-FD6F3F35EA28"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AECE0B12-1F51-49A9-9C66-B7DC94ACE0F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"E9125B2D-3EED-4014-8622-E9EBC5B2C99A"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"ECA9FB24-DF9E-4A58-9F4B-B1613ADFCC77"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.5.2:*:*:*:*:*:*:*","matchCriteriaId":"01B10DB1-1E18-4B58-B1E4-6A09871100CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.7.5:*:*:*:*:*:*:*","matchCriteriaId":"63A828E9-31AF-4199-9642-583830A1F180"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.7.9:*:*:*:*:*:*:*","matchCriteriaId":"F5F58E3A-8C0C-43C4-BAF3-05DD4DDC81C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.8.0:*:*:*:*:*:*:*","matchCriteriaId":"437D2888-340C-48AB-815E-C04E5DE44CAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"46604A07-FBB0-4111-8B1C-2D01086BBB71"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.8.2:*:*:*:*:*:*:*","matchCriteriaId":"3AD17AD0-27FE-49F5-A23D-2DE672D87C17"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.8.3:*:*:*:*:*:*:*","matchCriteriaId":"4141E02E-C2DA-42C0-ABAB-62AFE4F869AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.8.4:*:*:*:*:*:*:*","matchCriteriaId":"32AA5447-4879-41A7-8F92-CAB0C3CD5E6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.8.5:*:*:*:*:*:*:*","matchCriteriaId":"2A9121D0-504E-444B-94C3-0E5C240376C4"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0527.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10366","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16118","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0527.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16118","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2293","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) eid parameter or (2) query parameter to the Encyclopedia module, (3) preview_review function in the Reviews module as demonstrated by the url, cover, rlanguage, and hits parameters, or (4) savecomment function in the Reviews module, as demonstrated using the uname parameter.  NOTE: the Faq/categories and Encyclopedia/ltr issues are already covered by CVE-2005-1023."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*","matchCriteriaId":"CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"}]}]}],"references":[{"url":"http://secunia.com/advisories/11852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6997","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/6998","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/6999","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/365865","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10524","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16406","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6997","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/6998","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/6999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/365865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16406","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2294","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Canonicalize-before-filter error in the send_review function in the Reviews module for PHP-Nuke 6.0 to 7.3 allows remote attackers to inject arbitrary web script or HTML via hex-encoded XSS sequences in the text parameter, which is checked for dangerous sequences before it is canonicalized, leading to a cross-site scripting (XSS) vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*","matchCriteriaId":"CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"}]}]}],"references":[{"url":"http://secunia.com/advisories/11852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6999","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/365865","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10524","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6999","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/365865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-2295","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to execute arbitrary SQL commands via the order parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"},{"vulnerable":false,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*","matchCriteriaId":"CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0310.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/7000","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/365865","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10524","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16407","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0310.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/7000","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/365865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16407","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2296","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote attackers to obtain sensitive information via an invalid date parameter, which generates an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*","matchCriteriaId":"CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"}]}]}],"references":[{"url":"http://secunia.com/advisories/11852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/7001","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/365865","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10524","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16408","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/7001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/365865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16408","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2297","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large, out-of-range score parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*","matchCriteriaId":"91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*","matchCriteriaId":"8EE03D77-9AA8-4DC6-936D-0459BD26B64B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*","matchCriteriaId":"F3E16D17-B704-4ADA-8F91-B7D96FB52909"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*","matchCriteriaId":"CA80B501-6EC3-4C8E-A83D-F08FC659CF82"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*","matchCriteriaId":"87591D05-AC0B-4047-AE5B-69EBEF63ED5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*","matchCriteriaId":"CBB90508-B7AE-4018-B88C-7A09F1EEFAB5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0310.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/7002","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7003","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/365865","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10524","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16409","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0310.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/7002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7003","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/365865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16409","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2298","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell Internet Messaging System (NIMS) 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:internet_messaging_system:2.6:*:*:*:*:*:*:*","matchCriteriaId":"0C6CC52E-D5A2-47D3-861E-B127290C1167"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:internet_messaging_system:3.0:*:*:*:*:*:*:*","matchCriteriaId":"74ABD52D-A07C-495D-92DC-18E15A5A3828"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:netmail:3.1:*:*:*:*:*:*:*","matchCriteriaId":"4332FF7C-B625-4885-84F1-95A210391A42"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:netmail:3.5:*:*:*:*:*:*:*","matchCriteriaId":"3B57CD26-1038-4959-B560-D5FE90D6A2A3"}]}]}],"references":[{"url":"http://secunia.com/advisories/13377","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10095545.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/12234","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13377","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10095545.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/12234","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2299","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a long Range header."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:omnicron:omnihttpd:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0908E70E-2609-46F7-B09B-862F85B1B5C4"},{"vulnerable":false,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D2FCE2E5-0BF5-496D-B083-553AE163C809"},{"vulnerable":false,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"671A9E75-C199-48C2-9364-5305F30C8897"},{"vulnerable":false,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"C5EBAD41-B221-4F7B-A984-40F2F0C23B5D"},{"vulnerable":false,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0FB24FDB-BE4F-4B28-8ECE-B1494082F76C"},{"vulnerable":false,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.0.8:*:*:*:*:*:*:*","matchCriteriaId":"5DBB9E17-9C38-452A-A44F-D728A5DA040D"},{"vulnerable":false,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.0_9:*:*:*:*:*:*:*","matchCriteriaId":"99B0AC74-864D-487B-AA84-F627EBD3BEA7"},{"vulnerable":false,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.0_alpha_1:*:*:*:*:*:*:*","matchCriteriaId":"E9CC76D4-8CCD-46EE-A095-196FEAED4AF5"},{"vulnerable":false,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.0_alpha_2:*:*:*:*:*:*:*","matchCriteriaId":"B88A14D9-1E0A-4DF0-8284-AE4BA42581A6"},{"vulnerable":false,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.4_pro:*:*:*:*:*:*:*","matchCriteriaId":"EC5449D6-4D3F-48AD-8560-FE40AD6567B0"},{"vulnerable":false,"criteria":"cpe:2.3:a:omnicron:omnihttpd:2.10:*:*:*:*:*:*:*","matchCriteriaId":"2394107A-012A-4065-9C2C-96883A1AD3CB"},{"vulnerable":false,"criteria":"cpe:2.3:a:omnicron:omnihttpd:3.0a:*:*:*:*:*:*:*","matchCriteriaId":"DF5773C1-8AEC-4519-B03B-5681C5EC535C"}]}]}],"references":[{"url":"http://www.osvdb.org/12944","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/363651","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10376","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16190","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12944","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/363651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16190","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2300","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument.  NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this issue should not be included in CVE."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. We did not ship snmpd setuid root in Red Hat Enterprise Linux 2.1, 3, or 4.\n","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ucd-snmp:ucd-snmp:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.6","matchCriteriaId":"92AC21AD-B51A-4205-BE6D-7EE056D2086E"}]}]}],"references":[{"url":"http://www.packetstormsecurity.org/0405-advisories/snmpdadv.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10396","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16245","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0405-advisories/snmpdadv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10396","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16245","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2301","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eudora before 6.1.1 allows remote attackers to cause a denial of service (crash) via an e-mail with a long \"To:\" field, possibly due to a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:3.0:*:*:*:*:*:*:*","matchCriteriaId":"36428240-F799-43AC-9B1D-6B1E1F408E6E"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:4.0:*:*:*:*:*:*:*","matchCriteriaId":"812A1AE1-56DE-4AA7-9AE8-FE36089189F5"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:4.2:*:*:*:*:*:*:*","matchCriteriaId":"A2A8B413-CD80-4D91-BE69-9063EA60345B"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A9F8ADFF-D7B7-4907-B5DB-3920BC6EFB7B"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E2DA75D9-846D-4B0D-9982-DD852CEBECB5"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"DC95E6A2-8EDB-459B-9051-8372C3A7AEEB"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"80460E6D-6093-44C3-91C7-BD75B3AE4351"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:5.0.2j_r2:*:*:*:*:*:*:*","matchCriteriaId":"8AEC74EC-3A6E-45F3-A2DD-1815638B4692"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E129DE88-C286-41CC-B82F-C80718E19701"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"32956E1B-E52C-4290-ABDA-B345CD0F682B"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:5.1j:*:*:*:*:*:*:*","matchCriteriaId":"B0903FE4-73CB-44D9-AC2C-DCE444ADB06C"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:5.1j_r3:*:*:*:*:*:*:*","matchCriteriaId":"A34F7255-50CD-4C6F-8F4F-C0C267DD6646"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:5.2:*:*:*:*:*:*:*","matchCriteriaId":"A8953ECC-B326-4E41-A4CE-E5F1F8D905EE"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:5.2.0.9:*:*:*:*:*:*:*","matchCriteriaId":"850E6ED5-4EBE-431A-BF7F-CF2F7B7DD440"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"D64909E5-6E9A-4873-B23C-C825B5CDBAAE"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:6.0:*:*:*:*:*:*:*","matchCriteriaId":"1AD34A80-171B-4892-A427-633BB8F2085E"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"8EEF7CAC-0603-436B-B2AD-448AA17D82F5"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F01DA3EF-92F6-470E-AE4D-4CDD2776B445"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:6.0.22:*:*:*:*:*:*:*","matchCriteriaId":"C818A9AE-446B-496C-A47B-E201B075F310"},{"vulnerable":false,"criteria":"cpe:2.3:a:qualcomm:eudora:6.1:*:*:*:*:*:*:*","matchCriteriaId":"A72C4B66-AFEC-4035-BD72-A1133E6CCD4F"}]}]}],"references":[{"url":"http://www.eudora.com/download/eudora/windows/6.1.1/RelNotes.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10398","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16246","source":"cve@mitre.org"},{"url":"http://www.eudora.com/download/eudora/windows/6.1.1/RelNotes.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16246","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2302","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in the sysfs_read_file and sysfs_write_file functions in Linux kernel before 2.6.10 allows local users to read kernel memory and cause a denial of service (crash) via large offsets in sysfs files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:N/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*","matchCriteriaId":"2CDE1E92-C64D-4A3B-95A2-384BD772B28B"}]}]}],"references":[{"url":"http://kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.10-rc1/2.6.10-rc1-mm1/broken-out/fix-race-in-sysfs_read_file-and-sysfs_write_file.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://linux.bkbits.net:8080/linux-2.6/cset%404186a4deVoR88JjTwMa3ZnIp-_YJsA","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/17826","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/18056","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2005/dsa-922","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:218","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:219","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2005_44_kernel.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13091","source":"cve@mitre.org"},{"url":"http://kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.10-rc1/2.6.10-rc1-mm1/broken-out/fix-race-in-sysfs_read_file-and-sysfs_write_file.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://linux.bkbits.net:8080/linux-2.6/cset%404186a4deVoR88JjTwMa3ZnIp-_YJsA","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/17826","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/18056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2005/dsa-922","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:218","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2005_44_kernel.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13091","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2303","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissions, which allows local users to read and overwrite files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mtools:mformat:3.9.1:*:*:*:*:*:*:*","matchCriteriaId":"7B91837D-53DD-4C28-B36B-54DA689FA433"},{"vulnerable":true,"criteria":"cpe:2.3:a:mtools:mformat:3.9.2:*:*:*:*:*:*:*","matchCriteriaId":"24126ED1-ABA5-4C43-ADC2-63C4B747758C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mtools:mformat:3.9.3:*:*:*:*:*:*:*","matchCriteriaId":"4B58BD70-2140-4FBF-874F-C6A5CD790E69"},{"vulnerable":true,"criteria":"cpe:2.3:a:mtools:mformat:3.9.4:*:*:*:*:*:*:*","matchCriteriaId":"51453F25-20F9-4BEB-94C0-2A776649BDCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mtools:mformat:3.9.5:*:*:*:*:*:*:*","matchCriteriaId":"CDDFEEF2-01DB-4BDF-B6BB-07DF33AE955B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mtools:mformat:3.9.6:*:*:*:*:*:*:*","matchCriteriaId":"E40949D2-F3D0-4A77-940D-3E244048DF11"},{"vulnerable":true,"criteria":"cpe:2.3:a:mtools:mformat:3.9.7:*:*:*:*:*:*:*","matchCriteriaId":"9ECB4C58-9CC3-4F49-B06C-BBEEC5801AE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mtools:mformat:3.9.8:*:*:*:*:*:*:*","matchCriteriaId":"46F6C0FF-37FB-4500-AD40-31D247E91DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:mtools:mformat:3.9.9:*:*:*:*:*:*:*","matchCriteriaId":"F5AB0391-3F14-49AA-AD3A-64F0D06B510E"}]}]}],"references":[{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:016","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9746","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15317","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15317","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2304","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.71:*:*:*:*:*:*:*","matchCriteriaId":"12BB96CE-AEA5-4644-A41E-F317083B11CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.73:*:*:*:*:*:*:*","matchCriteriaId":"E0376EA0-9F02-4987-A0A3-A79DE73512F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74:*:*:*:*:*:*:*","matchCriteriaId":"03C5DC92-EE8F-43A7-8F78-58D01FA4D4A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.725:*:*:*:*:*:*:*","matchCriteriaId":"6E747537-D974-48C6-8EAA-6B26F3FBDDA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0DF2FE46-C0A4-4530-9FF6-FDAA6D347E97"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F895BBC-AD93-4B9E-9306-CF45AB6C97E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:2.01:*:*:*:*:*:*:*","matchCriteriaId":"CF67D526-06A8-40DA-BD53-7E31CA1BF202"}]}]}],"references":[{"url":"http://lists.seifried.org/pipermail/security/2004-February/001869.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10973","source":"cve@mitre.org"},{"url":"http://security.e-matters.de/advisories/022004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009220","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4056","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9489","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15303","source":"cve@mitre.org"},{"url":"http://lists.seifried.org/pipermail/security/2004-February/001869.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.e-matters.de/advisories/022004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4056","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9489","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15303","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2305","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Computer Associates eTrust Antivirus EE 6.0 through 7.0 allows remote attackers to bypass virus scanning by including a password-protected file in a ZIP file, which causes eTrust to scan only the password protected file and skip the other files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_antivirus_ee:6.0:*:*:*:*:*:*:*","matchCriteriaId":"3E22BC0B-8EDE-42A8-83C8-042527239671"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:etrust_antivirus_ee:7.0:*:*:*:*:*:*:*","matchCriteriaId":"0D8E9674-8578-4757-AC1E-F91A226A43FD"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/9665","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/alerts/2004/Feb/1009074.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15230","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/alerts/2004/Feb/1009074.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15230","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2306","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has been removed as a result of security hardening, disables mail alerts from the audit_warn script, which might allow attackers to escape detection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*","matchCriteriaId":"A711CDC2-412C-499D-9FA6-7F25B06267C6"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57483-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-070.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13724","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15042","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57483-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-070.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13724","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2307","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash) via a shell: URI with double backslashes (\\\\) in an HTML tag such as IFRAME or A."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*","matchCriteriaId":"68656E52-AD8A-474E-9160-CD5F8857254B"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*","matchCriteriaId":"BC176BB0-1655-4BEA-A841-C4158167CC9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*","matchCriteriaId":"403945FA-8676-4D98-B903-48452B46F48F"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*","matchCriteriaId":"49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/358043","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9924","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15544","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/358043","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15544","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2308","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the dir parameter in dohtaccess.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:5.0:*:*:*:*:*:*:*","matchCriteriaId":"E5B33AE8-75A8-4454-A1A3-33F4034015FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:5.3:*:*:*:*:*:*:*","matchCriteriaId":"E4394768-37BE-4FC5-A65A-28C0295A33B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.0:*:*:*:*:*:*:*","matchCriteriaId":"DC52A018-43E8-4D86-A84C-81064B6ACD74"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.2:*:*:*:*:*:*:*","matchCriteriaId":"2FC66D8D-01B8-4312-A311-ACAB43699071"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.4:*:*:*:*:*:*:*","matchCriteriaId":"E892FB52-DB84-422F-ABB6-29AB95726138"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1FC5C591-69F3-411F-A53A-72D17687CA2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"92D81000-1A7C-4465-9EE2-E651AED09F82"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:6.4.2_stable_48:*:*:*:*:*:*:*","matchCriteriaId":"E4B555B5-E66F-4E37-A5BC-E04CBDFA4F8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09258895-32E6-49AC-8C96-D2838A0C8E6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:8.0:*:*:*:*:*:*:*","matchCriteriaId":"3B4F9F98-08A2-430B-BC96-B30DCA165F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:9.0:*:*:*:*:*:*:*","matchCriteriaId":"32D546C9-674B-4683-9EC5-18156CE04B63"},{"vulnerable":true,"criteria":"cpe:2.3:a:cpanel:cpanel:9.1:*:*:*:*:*:*:*","matchCriteriaId":"1E915DEA-1BA9-429D-97D5-CA3D37C969B5"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/357231","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9853","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15485","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/357231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15485","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2309","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multiple ../ (dot dot slash) in the DIR command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crob:crob_ftp_server:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"5BD643E2-6E96-4E5C-8722-3195583169D3"}]}]}],"references":[{"url":"http://secunia.com/advisories/10778/","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/352329","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9546","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/alerts/2004/Feb/1008908.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15028","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10778/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/352329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9546","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/alerts/2004/Feb/1008908.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15028","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2310","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbitrary web script or HTML via a Domino command in the Quick Console."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C00B8057-26DF-4064-A934-0AA88A0C1A6F"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/ibm_lotus_domino/lotus.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11143","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4306","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9901","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15502","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/ibm_lotus_domino/lotus.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9901","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15502","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2311","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or determine the existence of files via a .. (dot dot) in the new folder dialog."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C00B8057-26DF-4064-A934-0AA88A0C1A6F"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/ibm_lotus_domino/lotus.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11143","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9900","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15504","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/ibm_lotus_domino/lotus.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15504","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2312","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long CC argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-03/0997.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-03/1124.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11158/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4391","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9903","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15554","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-03/0997.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-03/1124.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11158/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4391","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9903","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15554","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2313","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts (such as root), which allows remote attackers to guess the root password via brute force attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:sqwebmail:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"9F35F0F1-B742-4782-A699-FA90A36D0B2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:sqwebmail:3.5.0:*:*:*:*:*:*:*","matchCriteriaId":"412DCA47-E367-42A3-BDFE-DA7CFC38663F"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:sqwebmail:3.5.1:*:*:*:*:*:*:*","matchCriteriaId":"329602D7-8D1B-4A1A-B321-84D663F7B0FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:sqwebmail:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"26EFBDF5-A875-41D9-B5D7-8DF6E699D879"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:sqwebmail:3.5.3:*:*:*:*:*:*:*","matchCriteriaId":"242D2FE6-501F-41A0-BC73-5DFD4BE57C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:sqwebmail:3.6.0:*:*:*:*:*:*:*","matchCriteriaId":"F2436AAC-E418-4ABB-8A1E-2C0FBFAA284D"},{"vulnerable":true,"criteria":"cpe:2.3:a:inter7:sqwebmail:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"03949C40-048C-4B4A-AB7C-E40DF6DE2E9C"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/352317","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9541","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15058","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/352317","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9541","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15058","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2314","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Telnet listener for Novell iChain Server before 2.2 Field Patch 3b 2.2.116 does not have a password by default, which allows remote attackers to gain access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:ichain:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"E515888D-84AA-4815-B0C1-28CE52E5CDA8"}]}]}],"references":[{"url":"http://www.ciac.org/ciac/bulletins/o-080.shtml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/alerts/2004/Feb/1008961.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15068","source":"cve@mitre.org"},{"url":"http://www.ciac.org/ciac/bulletins/o-080.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/alerts/2004/Feb/1008961.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15068","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2315","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via an empty OPTIONS request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BB341BC1-E42F-43D2-9FC6-9FF5B84BA055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"56F3586C-D64A-486C-8C43-377F21E3469F"}]}]}],"references":[{"url":"http://secunia.com/advisories/10710/","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/9494","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14926","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10710/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/9494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14926","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2316","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via a GET request containing an MS-DOS device name such as COM1."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"5ED61875-62E7-4534-8258-CEE56B79A395"}]}]}],"references":[{"url":"http://secunia.com/advisories/10710/","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/9494","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14926","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10710/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/9494","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14926","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2317","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive information via a user message that is generated when Mbedthis denies access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"BB341BC1-E42F-43D2-9FC6-9FF5B84BA055"},{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"56F3586C-D64A-486C-8C43-377F21E3469F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"20C7E266-905C-44E8-8366-A7253F2057D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"9E170D38-F3FD-4A4D-9C80-9B0BDD7474D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"25469B3F-D0F2-4500-9900-25506CEEDA5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"8C42C5AD-E17F-4FDC-B464-7EA68B4E2204"},{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"E3E752BB-E6E2-4188-9D88-1EF45A9A2DAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"FB3BB46D-DE7E-4D35-BE58-036DF8B1ECCB"}]}]}],"references":[{"url":"http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10673","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10673","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2318","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The administrative interface (surgeftpmgr.cgi) for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service (crash) via requests with two percent (%) signs in the CMD parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:netwin:surgeftp:1.0b:*:*:*:*:*:*:*","matchCriteriaId":"BE4FD50F-DDFA-40AD-BFCC-F606CEF450F1"},{"vulnerable":false,"criteria":"cpe:2.3:a:netwin:surgeftp:1.0b:*:win_95_98:*:*:*:*:*","matchCriteriaId":"691BD1B5-A764-4A81-9825-2EF10490DE66"},{"vulnerable":false,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0a:*:*:*:*:*:*:*","matchCriteriaId":"AC94C372-7536-4692-AEA7-B58B32E2A5F1"},{"vulnerable":false,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0a:*:win_95_98:*:*:*:*:*","matchCriteriaId":"99A48AB6-6307-48FE-8AA0-8F04610FE3F5"},{"vulnerable":false,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0b:*:*:*:*:*:*:*","matchCriteriaId":"59DB045D-91F6-4AFC-8331-F2155D38D5FE"},{"vulnerable":false,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0b:*:win_95_98:*:*:*:*:*","matchCriteriaId":"3FF5F8DD-1639-4F4D-AB47-FC6ED5FB47A3"},{"vulnerable":false,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0c:*:*:*:*:*:*:*","matchCriteriaId":"C38E3BA1-DD78-4CB8-A680-B7D99CAD84B8"},{"vulnerable":false,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0d:*:*:*:*:*:*:*","matchCriteriaId":"283FCBC2-3C13-491C-A145-4177F7C37EA4"},{"vulnerable":false,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0e:*:*:*:*:*:*:*","matchCriteriaId":"2DE7C06B-1376-4095-A284-14F310D7AA5E"},{"vulnerable":false,"criteria":"cpe:2.3:a:netwin:surgeftp:2.0f:*:*:*:*:*:*:*","matchCriteriaId":"9C2BB9D2-70AE-4684-B4E7-32610DD9DDC1"},{"vulnerable":false,"criteria":"cpe:2.3:a:netwin:surgeftp:2.2k1:*:*:*:*:*:*:*","matchCriteriaId":"0192C7F5-18F3-4157-BA85-8B4D7076C8AE"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/surge_FTP/surge-ftp.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008898","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3788","source":"cve@mitre.org"},{"url":"http://www.secunia.com/advisories/10758/","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9554","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15001","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/surge_FTP/surge-ftp.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secunia.com/advisories/10758/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15001","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2319","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in /tmp to onshowaudit."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*","matchCriteriaId":"910D9A17-43A7-4F9E-98E0-2C465AC8BD2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*","matchCriteriaId":"1E61711D-4C3E-4A6D-89A8-85B7CDD7FAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_extended_parallel_server:8.40_uc1:*:*:*:*:*:*:*","matchCriteriaId":"E8EBF74C-A519-4C0E-B885-5C036047D610"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_extended_parallel_server:8.40_uc2:*:*:*:*:*:*:*","matchCriteriaId":"8A52EB99-7D27-4782-BBDA-35B1D1E3AF55"}]}]}],"references":[{"url":"http://secunia.com/advisories/10737/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21153336","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3758","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3760","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/351770","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9511","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9512","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14969","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14971","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10737/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21153336","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3758","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3760","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/351770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14971","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2320","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting."}],"vendorComments":[{"organization":"Red Hat","comment":"The Apache Software Foundation do not treat this as a security issue. A configuration change can be made to disable the ability to respond to HTTP TRACE requests if required.\n\nFor more information please see:\nhttp://www.apacheweek.com/issues/03-01-24#news","lastModified":"2008-03-05T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:*:express:*:*:*:*:*","matchCriteriaId":"A8F69E7A-8BBB-4D20-AEE9-F37155AD5C3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:*:win32:*:*:*:*:*","matchCriteriaId":"F119CDFF-214B-42E3-AF10-D8172D4A18E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp1:*:*:*:*:*:*","matchCriteriaId":"2B393A66-08A6-4EBA-B01E-BB6418423F79"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp1:express:*:*:*:*:*","matchCriteriaId":"0FAB4F19-EFE0-4860-B9E9-E3938A36AE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"56955D93-989A-4746-A3FC-1C99A749FAAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp10:*:*:*:*:*:*","matchCriteriaId":"B2B4C4E8-2862-457F-BDCC-3F54B8F7AADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp10:express:*:*:*:*:*","matchCriteriaId":"16324B74-4143-473D-858F-B5B1899822B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp10:win32:*:*:*:*:*","matchCriteriaId":"6ABD1B84-730D-479B-BB39-98C7D5C2373D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp11:*:*:*:*:*:*","matchCriteriaId":"47974FFB-1B28-492B-9A83-78AF16CF62CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp11:express:*:*:*:*:*","matchCriteriaId":"DFA4200B-3877-4FC9-B2AB-E51675CAD71F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp11:win32:*:*:*:*:*","matchCriteriaId":"9787A30B-B85C-4434-AE28-03F5B5C8DEBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp12:*:*:*:*:*:*","matchCriteriaId":"6F27425D-1754-44AE-A4B5-F27D5FA6A052"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp12:express:*:*:*:*:*","matchCriteriaId":"B1C2B98A-EF68-4569-B50C-8F21D2298435"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp12:win32:*:*:*:*:*","matchCriteriaId":"F80AE1DC-B4B6-4E8C-A199-BFF64B0563F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp13:*:*:*:*:*:*","matchCriteriaId":"034C62E6-3598-4D66-A0BD-8BD2E67048C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp13:express:*:*:*:*:*","matchCriteriaId":"7D5A058C-D9DD-4B78-815E-40E27EC1C6BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp13:win32:*:*:*:*:*","matchCriteriaId":"73589C92-14F1-494E-B264-A632A03DFCCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp2:*:*:*:*:*:*","matchCriteriaId":"99D0A3A8-1444-4DA4-AEF3-08578482574C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp2:express:*:*:*:*:*","matchCriteriaId":"8B0B183B-95A3-463D-B76B-50640F554013"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"FD3C09F5-6E4A-43C4-8AEB-7DBBDE9DCC33"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp3:*:*:*:*:*:*","matchCriteriaId":"523836A4-0110-4CD3-A81E-988A02AEA68C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp3:express:*:*:*:*:*","matchCriteriaId":"36A0EFDA-409E-44F0-9F8B-167A72D2361B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp3:win32:*:*:*:*:*","matchCriteriaId":"8ACD6465-6904-4F6B-92F0-02078D0B41BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp4:*:*:*:*:*:*","matchCriteriaId":"A705EB67-3961-445F-8023-F82C7618BE2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp4:express:*:*:*:*:*","matchCriteriaId":"51A8AB95-FB23-4A7A-A6F5-EF442EAABD26"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp4:win32:*:*:*:*:*","matchCriteriaId":"BDF43AB2-1778-4B6D-B766-FF71DBE3C0A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp5:*:*:*:*:*:*","matchCriteriaId":"BD698DD8-5491-4A73-A527-8C9228992A2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp5:express:*:*:*:*:*","matchCriteriaId":"5F00947F-1804-41D5-8F2B-7E48C77B1306"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp5:win32:*:*:*:*:*","matchCriteriaId":"13C06026-2AC9-4419-A7B8-9F0ECDD8DBD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp6:*:*:*:*:*:*","matchCriteriaId":"86C4679F-F13F-4A97-AE42-BC54BD0F149C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp6:express:*:*:*:*:*","matchCriteriaId":"114E5E3E-84B2-4DD3-98FC-2ABFFA41BAD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp6:win32:*:*:*:*:*","matchCriteriaId":"883ABAC3-3D2D-4D1A-8125-96A7CC0CE93D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp7:*:*:*:*:*:*","matchCriteriaId":"EF96A26E-7284-43A0-BD6A-907E1029197D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp7:express:*:*:*:*:*","matchCriteriaId":"9B6656CF-65ED-4F8E-B9F2-75A9DC1571D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp7:win32:*:*:*:*:*","matchCriteriaId":"0DDF3D79-F7B0-4FB2-B22C-B432BDC24B04"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp8:*:*:*:*:*:*","matchCriteriaId":"C8479B6C-464F-41BC-BF81-31EA74CEF4D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp8:express:*:*:*:*:*","matchCriteriaId":"7C013AE2-4B06-437A-815F-FAADD28CFA85"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp8:win32:*:*:*:*:*","matchCriteriaId":"F13D9A20-173F-46AB-8473-E69F6D617112"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp9:*:*:*:*:*:*","matchCriteriaId":"B08241CF-0F3D-44E2-8D72-4F98413933EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp9:express:*:*:*:*:*","matchCriteriaId":"D7306C09-BFBA-4DC0-8EA1-E5A5C0BC080F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:5.1:sp9:win32:*:*:*:*:*","matchCriteriaId":"BC28783D-34C6-49B7-A02F-059DED18E71D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*","matchCriteriaId":"05AFBE78-C611-4EA2-8B00-5F8B61696CBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*","matchCriteriaId":"AC5439C1-D06F-44C6-94F5-2BD8598A506C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*","matchCriteriaId":"C3B7752C-B297-480A-B3FC-948EA081670C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"E40C38EC-ECA4-4F0C-8468-16191CDB9997"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*","matchCriteriaId":"63017BF8-D681-45EC-9C31-09D029F1126D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*","matchCriteriaId":"71892EC0-E6B1-4214-AC53-06489F711829"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"C4FD8871-680E-40F9-85AB-417B5195D4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*","matchCriteriaId":"8E0B1791-974A-4967-8CF9-33BE8183200B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*","matchCriteriaId":"696F52AE-FEB9-4090-872E-FDFD969F5604"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*","matchCriteriaId":"2B4BC3F5-BFE8-4834-B427-B6260D5B7A85"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*","matchCriteriaId":"7B12A8B1-F78E-46B3-8872-4C6484345477"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*","matchCriteriaId":"DCED03B6-7565-4F53-8D85-F3391BF66988"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*","matchCriteriaId":"D2FE768F-363B-49BC-8410-739B164FB32E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*","matchCriteriaId":"CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*","matchCriteriaId":"B70F0353-635F-465B-A7E5-AF2D017AB008"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*","matchCriteriaId":"D3DA28D0-18CC-4F99-AABB-EC7863CBD455"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*","matchCriteriaId":"6B091903-943F-4822-9F24-9D109B2D76A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*","matchCriteriaId":"CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*","matchCriteriaId":"FBDF3AC0-0680-4EEE-898C-47D194667BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*","matchCriteriaId":"8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6828CE4B-91E8-4688-977F-DC7BC21131C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*","matchCriteriaId":"BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*","matchCriteriaId":"9CD2BB36-AC0B-48E9-91E1-A4465896E87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*","matchCriteriaId":"6FB8930F-C6D8-40B9-8D08-751F5B47229B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*","matchCriteriaId":"A5C59B80-279B-45B3-9CC1-5A263681025B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"893D9D88-43C4-4F9F-A364-0585DE6FA9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*","matchCriteriaId":"D59F9859-7344-43F0-9348-E57FABB9E431"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*","matchCriteriaId":"D2D05BAB-AB3B-466E-8301-01A41644DE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"D34E2925-DE2A-437F-B349-BD7103F4C37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*","matchCriteriaId":"0A4EC87D-EF83-48C5-B516-A6A482D9F525"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*","matchCriteriaId":"935F28E3-9799-4EF6-AB83-62E9C214DD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*","matchCriteriaId":"ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*","matchCriteriaId":"A3DFE048-905E-4890-809D-F6BCEF7F83C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*","matchCriteriaId":"F7560131-A6AC-4BBB-AA2D-C7C63AB51226"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"D18E22CC-A0FC-4BC7-AD39-2645F57486C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*","matchCriteriaId":"893C2387-03E3-4F8E-9029-BC64C64239EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"D00633D1-4B38-48D9-B5CD-E8D66EA90599"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/68","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10726","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/867593","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3726","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9506","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/alerts/2004/Jan/1008866.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14959","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/68","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10726","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/867593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.osvdb.org/3726","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/alerts/2004/Jan/1008866.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14959","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2321","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic Server and Express 8.1 SP1 and earlier allows local users in the Operator role to obtain administrator passwords via MBean attributes, including (1) ServerStartMBean.Password and (2) NodeManagerMBean.CertificatePassword."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*","matchCriteriaId":"F7560131-A6AC-4BBB-AA2D-C7C63AB51226"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9505","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/alerts/2004/Jan/1008867.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14962","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9505","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/alerts/2004/Jan/1008867.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14962","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2322","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the (1) announce and (2) notes modules of phpWebSite before 0.9.3-2 allows remote attackers to execute arbitrary SQL queries, as demonstrated using the ANN_id parameter to the announce module."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"67BC3223-5F53-42FA-B872-DCB30E46032E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"F9176513-170C-4B51-8495-9ED2FB7D929F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"F0D431DA-8808-4DF2-BBD7-7BC6F5036DB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.9.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B7D4F2D0-23BE-4460-9C4A-8A30B1F06623"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"B72337C8-2B5C-4824-A3C0-D41A857DC9C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.1:*:*:*:*:*:*:*","matchCriteriaId":"454BEBD6-3EC7-4FFB-A51A-0199B5CCF097"}]}]}],"references":[{"url":"http://secunia.com/advisories/10878/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=892174&group_id=15539&atid=115539","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3852","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/Feb/1009045.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.systemsecure.org/advisories/ssadvisory13022004.php","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zone-h.com/advisories/read/id=3955","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15219","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10878/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=892174&group_id=15539&atid=115539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3852","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/alerts/2004/Feb/1009045.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.systemsecure.org/advisories/ssadvisory13022004.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.zone-h.com/advisories/read/id=3955","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15219","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2323","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to obtain sensitive information, including the SQL server username and password, via a GET request for source or configuration files such as Web.config."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4300BB9D-1A72-4005-AA68-35DB57A551E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"797726FF-24E9-415A-AC8B-2AE3301F8824"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DC6BB8DE-9497-42D7-A29D-BCAC75337A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"54AB8E47-5484-4449-88BA-90F0CCED285A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10d:*:*:*:*:*:*:*","matchCriteriaId":"B111556A-56AC-413C-A1B7-D973492BA8F5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10747","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3749","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9518","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14972","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14972","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2324","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the (1) table and (2) field parameters in LinkClick.aspx."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4300BB9D-1A72-4005-AA68-35DB57A551E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"797726FF-24E9-415A-AC8B-2AE3301F8824"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DC6BB8DE-9497-42D7-A29D-BCAC75337A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"54AB8E47-5484-4449-88BA-90F0CCED285A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10d:*:*:*:*:*:*:*","matchCriteriaId":"B111556A-56AC-413C-A1B7-D973492BA8F5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10747","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3750","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9518","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14973","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14973","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2325","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in EditModule.aspx for DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to inject arbitrary web script or HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4300BB9D-1A72-4005-AA68-35DB57A551E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"797726FF-24E9-415A-AC8B-2AE3301F8824"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"DC6BB8DE-9497-42D7-A29D-BCAC75337A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"54AB8E47-5484-4449-88BA-90F0CCED285A"},{"vulnerable":true,"criteria":"cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10d:*:*:*:*:*:*:*","matchCriteriaId":"B111556A-56AC-413C-A1B7-D973492BA8F5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10747","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3751","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9518","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14974","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9518","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14974","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2326","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in IP3 Networks NetAccess Appliance before firmware 3.1.18b13 allows remote attackers to bypass authentication via the (1) login or (2) password.  NOTE: this issue was later reported to also affect firmware 4.0.34."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:ip3_networks:ip3_netaccess:*:*:*:*:*:*:*:*","matchCriteriaId":"670F6EB1-01F9-47F1-B00B-013F7633ADA4"},{"vulnerable":true,"criteria":"cpe:2.3:h:ip3_networks:ip3_netaccess_-_hospitality:*:*:*:*:*:*:*:*","matchCriteriaId":"8C4B80F4-B55E-4AD2-8BF7-8861CBC36B9B"},{"vulnerable":true,"criteria":"cpe:2.3:h:ip3_networks:ip3_netaccess_-_wireless_hotspots:*:*:*:*:*:*:*:*","matchCriteriaId":"4EFDF7ED-E173-40FA-8C7F-24812BD2EC2E"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/432007/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9858","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26106","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/432007/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9858","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26106","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2327","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Vizer Web Server 1.9.1 allows remote attackers to cause a denial of service (crash) via multiple malformed requests including (1) requests without GET, (2) GET requests without HTTP, (3) or long GET requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vizer_web_server:vizer_web_server:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"35DFA0AB-3FA2-4CA3-9154-1A87FBF73D24"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/354156","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9678","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15239","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/354156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9678","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15239","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2328","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via an e-mail with a crafted RAR archive attached."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.0:*:*:*:*:*:*:*","matchCriteriaId":"EFE4FA19-F2EA-4292-A441-2E4A39366942"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.1:*:*:*:*:*:*:*","matchCriteriaId":"FA5D7FD1-D5AB-4987-801A-FA464C31298A"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.2:*:*:*:*:*:*:*","matchCriteriaId":"772710C7-41FE-47E2-B0D7-A3C8D36C8808"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3:*:*:*:*:*:*:*","matchCriteriaId":"7358AD98-44C1-4CC4-BD50-CFF3822F3A96"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"AAA1C283-E518-4BC6-BBF0-FCE09F9E0F17"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"5B8A74FB-07B0-42D6-ABF3-D7A073A329E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"49668AFD-4821-4D5A-BEBD-DF55A8AB58C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"57E0BFFD-D777-43A5-AEE8-765F55C86E93"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.6_sp1:*:*:*:*:*:*:*","matchCriteriaId":"DAF9A151-6EBF-4760-A154-A34FF7C9E632"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"CA12B965-672C-444D-9774-0F76FE47EA29"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.8:*:*:*:*:*:*:*","matchCriteriaId":"E6C9B32C-5EC9-46BD-AA77-F414A143576C"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.10:*:*:*:*:*:*:*","matchCriteriaId":"823C27EB-C00F-4A7E-B832-013A50A1EE2D"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.11:*:*:*:*:*:*:*","matchCriteriaId":"BD217379-28E7-465E-843D-E7204EE0E89F"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper:4.3.13:*:*:*:*:*:*:*","matchCriteriaId":"EB96CB8A-59F3-4624-B2BA-687ECF929B79"}]}]}],"references":[{"url":"http://www.osvdb.org/3742","source":"cve@mitre.org"},{"url":"http://www.secunia.com/advisories/10732/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9556","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14979","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3742","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secunia.com/advisories/10732/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14979","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2329","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:personal_firewall:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"FCE7ABB0-44E8-40DA-A94C-2F9530497D78"}]}]}],"references":[{"url":"http://secunia.com/advisories/10746/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3748","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9525","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/Jan/1008870.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.tuneld.com/_images/other/kpf_system_privileges.png","source":"cve@mitre.org"},{"url":"http://www.tuneld.com/news/?id=30","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14981","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10746/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9525","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/alerts/2004/Jan/1008870.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.tuneld.com/_images/other/kpf_system_privileges.png","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tuneld.com/news/?id=30","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14981","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2330","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to cause a denial of service via an HTTP request containing a large number of form fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:*:*:*:*:*:*","matchCriteriaId":"B2C65BE0-32FA-4D51-AA2B-E7D630470D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:j2ee_application_server:*:*:*:*:*","matchCriteriaId":"5E448558-A9F6-4506-AA6D-688C73CEC61E"}]}]}],"references":[{"url":"http://secunia.com/advisories/10743/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-02.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9522","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14983","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10743/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-02.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14983","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2331","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and obtain sensitive information by using Java reflection methods to access trusted Java objects without using the CreateObject function or cfobject tag."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-470"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:*:*:*:*:*:*","matchCriteriaId":"B2C65BE0-32FA-4D51-AA2B-E7D630470D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.1:*:j2ee_application_server:*:*:*:*:*","matchCriteriaId":"5E448558-A9F6-4506-AA6D-688C73CEC61E"}]}]}],"references":[{"url":"http://secunia.com/advisories/10743/","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-01.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9521","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14984","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/10743/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2332","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in CPAN WWW::Form before 1.13 allow remote attackers to inject arbitrary web script or HTML via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cpan:www_form:1.12:*:*:*:*:*:*:*","matchCriteriaId":"278A45D6-5FA4-435E-B0B5-463AFBC8F479"}]}]}],"references":[{"url":"http://secunia.com/advisories/10751","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securiteam.com/unixfocus/5IP0L2KBPM.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9526","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14985","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securiteam.com/unixfocus/5IP0L2KBPM.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14985","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2333","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Bodington 2.1.0 RC1 and earlier does not secure the file upload area, which allows remote attackers to read uploaded files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bodington:bodington:2.1.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D4BA4925-985D-4DCE-8C11-C28F5C94E788"},{"vulnerable":true,"criteria":"cpe:2.3:a:bodington:bodington:2.1.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"41634511-4C42-41BE-A7B8-51775EF01712"},{"vulnerable":true,"criteria":"cpe:2.3:a:bodington:bodington:2.1.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"99C00696-FECA-4374-A06D-4DD1B0BC55D8"}]}]}],"references":[{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=789761&group_id=87659&atid=583930","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3770","source":"cve@mitre.org"},{"url":"http://www.secunia.com/advisories/10749/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9528","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14986","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=789761&group_id=87659&atid=583930","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secunia.com/advisories/10749/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9528","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14986","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2334","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web script or HTML via (1) a hex-encoded value to the variable parameter in emumail.fcgi, (2) the folder parameter in emumail.fcgi, or Javascript in the (3) username or (4) password field in the login page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emumail:emu_webmail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"035A23B5-64F4-462D-A7BE-383ABDD131DD"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/emu/emu.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11110","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009397","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/4204","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/4972","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9861","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.zone-h.com/advisories/read/id=4141","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15451","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15452","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/emu/emu.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009397","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/4204","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/4972","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.zone-h.com/advisories/read/id=4141","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15452","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2335","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2, Director, Dreamweaver, Fireworks, Flash, and Studio, install the AuthenticationService setuid and writable by other users, which allows local users to gain privileges by modifying the program."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:contribute:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B8E7D7C2-9393-445E-BD3B-22357D23E25C"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:studio:2004:*:*:*:*:*:*:*","matchCriteriaId":"D230930C-5055-4209-999A-3B1C8029F9F7"}]}]}],"references":[{"url":"http://secunia.com/advisories/11123","source":"cve@mitre.org"},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-03.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9862","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15465","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.macromedia.com/devnet/security/security_zone/mpsb04-03.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15465","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2336","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running with Apache Web Server 1.3 for NetWare where Apache is loaded using GWAPACHE.CONF, allows remote attackers to read directories and files on the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*","matchCriteriaId":"194704B6-4820-4398-8906-A1E529ED65AF"},{"vulnerable":false,"criteria":"cpe:2.3:a:novell:groupwise:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"5E0DC694-0DEB-41DE-8A0D-9B649FC2F220"},{"vulnerable":false,"criteria":"cpe:2.3:a:novell:groupwise:6.0:sp2:*:*:*:*:*:*","matchCriteriaId":"174646C1-60F8-4A84-9C0D-785303EBAF6D"},{"vulnerable":false,"criteria":"cpe:2.3:a:novell:groupwise:6.0:sp3:*:*:*:*:*:*","matchCriteriaId":"5F5DFFF8-7DCF-48E0-B43E-269EA4F3AE75"},{"vulnerable":false,"criteria":"cpe:2.3:a:novell:groupwise:6.0:sp4:*:*:*:*:*:*","matchCriteriaId":"A2F5DF0E-8158-4D2E-88CC-BBD7A031054E"},{"vulnerable":false,"criteria":"cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*","matchCriteriaId":"2AD18143-9962-4C0D-AD3D-66C0CF3FB5D0"},{"vulnerable":false,"criteria":"cpe:2.3:a:novell:groupwise:6.5:sp1:*:*:*:*:*:*","matchCriteriaId":"08A78BE7-6426-41CD-BBAF-9BB951726D33"},{"vulnerable":false,"criteria":"cpe:2.3:a:novell:groupwise:6.5:sp2:*:*:*:*:*:*","matchCriteriaId":"E50599E1-45E5-443F-AAEC-F91778CA4792"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:novell:netware:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE9F2EF1-D7CB-4D76-BAC0-EA28E5F9D82E"}]}]}],"references":[{"url":"http://secunia.com/advisories/11119","source":"cve@mitre.org"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10091330.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9864","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009417.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15467","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10091330.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009417.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15467","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2337","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable permissions, which allows local users to obtain user POP3 credentials."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.6.0:*:*:*:*:*:*:*","matchCriteriaId":"4A44AEBE-BB46-4B6F-9FE3-4EB67612CDCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"72BDBC0C-538E-4450-9B24-833D4ADC1A41"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"710BADCD-CBDE-457F-A145-0E05CE3B17FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.6.3:*:*:*:*:*:*:*","matchCriteriaId":"B28B58E3-B8AC-46E7-BA2C-782B50DDA15D"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.6.4:*:*:*:*:*:*:*","matchCriteriaId":"E89A42E0-9A59-4CA0-9AB5-309941E561B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.6.5:*:*:*:*:*:*:*","matchCriteriaId":"C6A28CC8-DDCF-4A1B-A8AB-458096F51A17"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.6.6:*:*:*:*:*:*:*","matchCriteriaId":"C1E0F4B1-FD21-4883-9180-0883AF8ECACD"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.6.7:*:*:*:*:*:*:*","matchCriteriaId":"86CE654E-DAF5-4FF2-BE30-6FF49FF17638"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.6.8:*:*:*:*:*:*:*","matchCriteriaId":"2976C381-8685-46AC-9EAC-B455CE73FC0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.6.9:*:*:*:*:*:*:*","matchCriteriaId":"476642E9-898A-40F7-A0A9-434D3BEB60D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.6.10.0:*:*:*:*:*:*:*","matchCriteriaId":"A1A70115-F210-45FD-9B2C-99E433CB38BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.6.11:*:*:*:*:*:*:*","matchCriteriaId":"5A0F49D9-8CF1-4543-9B00-28E804A92E78"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.6.12:*:*:*:*:*:*:*","matchCriteriaId":"C6D2046D-A8A6-4C44-88DE-D9685BAE0C50"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.6.13:*:*:*:*:*:*:*","matchCriteriaId":"D5EA88A7-8EF8-407F-9558-2B6BC43BAF3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.6.14:*:*:*:*:*:*:*","matchCriteriaId":"DC7B2B6E-B54F-4F41-9063-1180430AD11A"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"75DCF921-82E0-4533-856D-C86FAA9B8F4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"85E1B5CA-C5FE-409B-8098-F28034C25307"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"09A40033-54BA-495A-801F-247924051981"},{"vulnerable":true,"criteria":"cpe:2.3:a:inlook:inlook:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"8D3A2CD5-F7D9-44D0-90F9-48B7C10DD4DF"}]}]}],"references":[{"url":"http://secunia.com/advisories/10752/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3771","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9527","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14990","source":"cve@mitre.org"},{"url":"https://sourceforge.net/project/shownotes.php?release_id=213427","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/10752/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/3771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9527","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14990","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sourceforge.net/project/shownotes.php?release_id=213427","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2338","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"OpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian 64-bit platforms such as SPARC64, which may allow remote attackers to bypass access restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.3:*:*:*:*:*:*:*","matchCriteriaId":"AC46909F-DDFC-448B-BCDF-1EB343F96630"},{"vulnerable":true,"criteria":"cpe:2.3:o:openbsd:openbsd:3.4:*:*:*:*:*:*:*","matchCriteriaId":"9496279F-AB43-4B53-81A6-87C651ABC4BA"}]}]}],"references":[{"url":"http://www.openbsd.org/errata33.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openbsd.org/errata34.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9867","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.openbsd.org/errata33.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openbsd.org/errata34.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9867","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2339","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl function, which does not verify its pointer arguments.  Note: this issue has been disputed, since Administrator privileges are typically required to exploit this issue, thus privilege boundaries are not crossed"}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*","matchCriteriaId":"4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0529.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0530.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/354392","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1009128","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15263","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0529.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0530.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/354392","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1009128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15263","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2340","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"** UNVERIFIABLE **  SQL injection vulnerability in PunkBuster Screenshot Database (PB-DB) Alpha 6 allows remote attackers to execute arbitrary SQL commands via the username and password fields of the login form.  NOTE: the original vulnerability report contains several significant inconsistencies that make it unclear whether the report is accurate, including (1) PB-DB is really the \"PunkBuster Screenshot Database\" and not \"PunkBuster\" itself; (2) there is no apparent association between PunkBuster and \"Punky Brewster\"; (3) the claimed source code is not anywhere in Alpha 6."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:even_balance:punkbuster_database:1.0_alpha:*:*:*:*:*:*:*","matchCriteriaId":"DED5F425-236F-4F71-8EF2-F7F5F61734E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:even_balance:punkbuster_database:2.0_alpha:*:*:*:*:*:*:*","matchCriteriaId":"0862F869-B918-4471-872D-CE653431C8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:even_balance:punkbuster_database:3.0_alpha:*:*:*:*:*:*:*","matchCriteriaId":"31F73411-C8FB-408B-A30C-ADA3872F5639"},{"vulnerable":true,"criteria":"cpe:2.3:a:even_balance:punkbuster_database:4.0_alpha:*:*:*:*:*:*:*","matchCriteriaId":"51AC43A2-1372-47AB-98E8-B6D1E3C3125C"},{"vulnerable":true,"criteria":"cpe:2.3:a:even_balance:punkbuster_database:5.0_alpha:*:*:*:*:*:*:*","matchCriteriaId":"9CBD0326-C1D8-4A7E-9420-568CB285D9C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:even_balance:punkbuster_database:6.0_alpha:*:*:*:*:*:*:*","matchCriteriaId":"4552EF0B-E930-4558-867D-0793863DA25B"}]}]}],"references":[{"url":"http://securitytracker.com/id?1009145","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/18981","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/354453","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9697","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15267","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/18981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/354453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9697","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15267","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2341","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP file include injection vulnerability in isearch.inc.php for iSearch allows remote attackers to execute arbitrary code via the isearch_path parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:isearch:isearch:*:*:*:*:*:*:*:*","matchCriteriaId":"B7F6D90E-2778-493D-9512-259105344FE0"}]}]}],"references":[{"url":"http://www.securitytracker.com/alerts/2004/Feb/1008900.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15009","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/Feb/1008900.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2342","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ChatterBox 2.0 allows remote attackers to cause a denial of service (server crash) via a malformed request to the server, as demonstrated using \"aaaaaa\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:burton_sang:chatterbox:2.0:*:*:*:*:*:*:*","matchCriteriaId":"68C0DE16-88BC-4F42-8557-DF5D52A9DEF3"}]}]}],"references":[{"url":"http://secunia.com/advisories/10775","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.autistici.org/fdonato/advisory/ChatterBox2.0-adv.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/3798","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/352341","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9532","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15011","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.autistici.org/fdonato/advisory/ChatterBox2.0-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/3798","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/352341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9532","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15011","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2343","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. NOTE: the vendor has disputed this issue, since the .htaccess mechanism is only intended to restrict external web access, and a local user already has the privileges to perform the same operations without using ErrorDocument"}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat does not consider this to be a security  issue.","lastModified":"2006-08-30T00:00:00.000"},{"organization":"Apache","comment":"The .htaccess mechanism is only intended to restrict external web access, and a local user already has the privileges to perform the same operations without using ErrorDocument.","lastModified":"2008-07-02T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.47","matchCriteriaId":"3BB63656-5AAA-4096-A971-D5F2DF91C175"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0043.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0064.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0120.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15015","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0043.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0064.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0120.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15015","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2344","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the ASN.1/H.323/H.225 stack of VocalTec VGW120 and VGW480 allows remote attackers to cause a denial of service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:vocaltec:vgw120_telephony_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"1FC75B02-FB93-4158-997B-06AA2A63846F"},{"vulnerable":true,"criteria":"cpe:2.3:h:vocaltec:vgw480_telephony_gateway:*:*:*:*:*:*:*:*","matchCriteriaId":"484875CE-F2DB-40EE-B074-B0CBA924D6D0"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/10411","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitylab.ru/45401.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16240","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10411","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitylab.ru/45401.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16240","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2345","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown multiple vulnerabilities in Oracle9i Database Server 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0.4 allow local users with the ability to invoke SQL to cause a denial of service or obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"2109201B-89F7-4FF2-BFD1-2B220E3146FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.0.1.5:*:*:*:*:*:*:*","matchCriteriaId":"B6C67572-800C-4214-AD12-E9017A9A5BAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3100BD74-28EF-49B8-AF03-B3298D25DF60"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:database_server:9.2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B4C63EC8-73D7-46AE-81E7-04DF212BC8B5"}]}]}],"references":[{"url":"http://otn.oracle.com/deploy/security/pdf/2004alert64.pdf","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9705","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15271","source":"cve@mitre.org"},{"url":"http://otn.oracle.com/deploy/security/pdf/2004alert64.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9705","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15271","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2346","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Forum Web Server 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Subject field in post1.htm and (2) the File Description field in postfile2.htm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minihttpserver.net:forum_web_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6","matchCriteriaId":"38D65E93-F93D-452A-A1A0-C672C049F95A"}]}]}],"references":[{"url":"http://www.securitytracker.com/alerts/2004/Feb/1008896.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15018","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/Feb/1008896.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15018","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2347","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metacharacters such as '|' in the file parameter of ViewFile requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leif_m._wright:web_blog:1.1:*:*:*:*:*:*:*","matchCriteriaId":"42CF0335-87F5-4789-90DB-CC44F99B5745"},{"vulnerable":true,"criteria":"cpe:2.3:a:leif_m._wright:web_blog:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"05C46B16-C257-42DD-A144-8C539FCE66FF"}]}]}],"references":[{"url":"http://leifwright.com/scripts/Blog.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10776/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3793","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/352303","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9539","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15019","source":"cve@mitre.org"},{"url":"http://leifwright.com/scripts/Blog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10776/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3793","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/352303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9539","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15019","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2348","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sybari AntiGen for Domino 7.0 Build 722 SR2 allows remote attackers to cause a denial of service (hang) via an encrypted ZIP file with the \"include full path info\" option set, as used by certain variants of the Beagle/Bagle worm."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sybari:antigen:7.0_build_722_\\(sr2\\):*:lotus_domino:*:*:*:*:*","matchCriteriaId":"FF693AE7-E327-4FAE-BFF0-A1E3F850659D"}]}]}],"references":[{"url":"http://secunia.com/advisories/11120/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009437","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9880","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15470","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11120/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009437","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9880","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15470","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2349","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Tunez before 1.20-pre2 allow remote attackers to execute arbitrary SQL queries."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tunez:tunez:0.9:*:*:*:*:*:*:*","matchCriteriaId":"36EA400E-C3FF-4257-B192-52C41D8BCA34"},{"vulnerable":true,"criteria":"cpe:2.3:a:tunez:tunez:1.0:*:*:*:*:*:*:*","matchCriteriaId":"6B0342AB-1829-46E0-8F9D-4DB3FB3FD6D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tunez:tunez:1.1:*:*:*:*:*:*:*","matchCriteriaId":"0B28AAB9-7B87-4AD5-A991-A9CE0CEAE2B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:tunez:tunez:1.15:*:*:*:*:*:*:*","matchCriteriaId":"4D45AA34-03C4-43D0-95CF-9FAE0B6323D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:tunez:tunez:1.20_pre1:*:*:*:*:*:*:*","matchCriteriaId":"3FC0D0C6-A180-4CBA-983E-DAFDE05F05F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:tunez:tunez:1.20_pre2:*:*:*:*:*:*:*","matchCriteriaId":"4BEFA55D-8C23-4CA4-8C99-843E58C7B5FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:tunez:tunez:1.20_rc1:*:*:*:*:*:*:*","matchCriteriaId":"19AB178A-BE57-4124-80F6-A48D00F614BF"}]}]}],"references":[{"url":"http://secunia.com/advisories/10770/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=879391&group_id=2266&atid=102266","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9565","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15020","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10770/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=879391&group_id=2266&atid=102266","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9565","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15020","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2350","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in search.php for phpBB 1.0 through 2.0.6 allows remote attackers to execute arbitrary SQL and gain privileges via the search_results parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E15A5879-39FE-4BFF-B391-52EAA58D1A0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"581594BF-92CE-4B16-95DC-200E11C64591"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AEBFC1B3-8C7D-4B63-8E92-F1759EACA2BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E3575646-AF8E-4D33-97DE-E6EA468D9973"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"7717E4CC-C7D1-4DB3-8F15-A6DC3C957B34"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"1B4E7219-C05D-4269-990B-4B523564BF71"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"A729BD82-D5BA-4BF9-812C-ADACEF42F68F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E3B77B44-C3C9-4BC8-8D39-2200F1BACC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7C74C78D-EEE0-48DF-9721-2A43B996EBD5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"054EFBD3-2252-4173-B37A-B8CA0218CE0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"00EB368F-5471-42E3-BBBE-EF9E623A7259"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"F65406CF-59F1-48DC-8ABC-501F210A8B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"03AC5144-140D-48E9-87FD-96F2E248D4E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"A8F12660-10A7-4B66-94B0-954C9CD7D36C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B1BACCC9-0871-4BAE-B8E1-783EF6A2DC99"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"639E102D-2BD2-42FF-999A-02135A3E5647"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"AA7F5CF1-4610-47D0-A6DD-DCB55645245D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"FB898F63-F327-44B1-B6A2-889E490E583F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"894A26BD-2D8B-4DE7-BEE3-940A0498DB74"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/357442","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9883","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15475","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/357442","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9883","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15475","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2351","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) name, (2) email, (3) city, and (4) message, which do not use the <script> and <style> tags, which are filtered by PHP-Nuke."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:martin_bauer:gbook:*:*:*:*:*:*:*:*","matchCriteriaId":"D9CEECEA-7C67-405F-8FF1-C93DADB7FE48"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_bauer:gbook:1.4:*:*:*:*:*:*:*","matchCriteriaId":"ADCDD28D-97EB-4110-8848-92558731AC21"}]}]}],"references":[{"url":"http://securitytracker.com/id?1008930","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/352373","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9559","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15027","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/352373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2352","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in GBook for PHP-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via cookies that are stored in the $_COOKIE PHP variable, which is not cleansed by PHP-Nuke."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:martin_bauer:gbook:*:*:*:*:*:*:*:*","matchCriteriaId":"D9CEECEA-7C67-405F-8FF1-C93DADB7FE48"},{"vulnerable":true,"criteria":"cpe:2.3:a:martin_bauer:gbook:1.4:*:*:*:*:*:*:*","matchCriteriaId":"ADCDD28D-97EB-4110-8848-92558731AC21"}]}]}],"references":[{"url":"http://securitytracker.com/id?1008930","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/352373","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9559","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15027","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008930","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/352373","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2353","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BugPort before 1.099 stores its configuration file (conf/config.conf) under the web document root with a file extension that is not normally parsed by web servers, which allows remote attackers to obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:incogen:bugport:1.090:*:*:*:*:*:*:*","matchCriteriaId":"82473F1D-D5B0-4F0B-8D7E-36B98EA2EC74"},{"vulnerable":false,"criteria":"cpe:2.3:a:incogen:bugport:1.091:*:*:*:*:*:*:*","matchCriteriaId":"2373F3F8-1BED-4E82-B340-082EF1A593CD"},{"vulnerable":false,"criteria":"cpe:2.3:a:incogen:bugport:1.092:*:*:*:*:*:*:*","matchCriteriaId":"CAE777C8-B746-450B-8CDB-2436F7F01F9C"},{"vulnerable":false,"criteria":"cpe:2.3:a:incogen:bugport:1.093:*:*:*:*:*:*:*","matchCriteriaId":"E2FCC309-14C4-4277-A1CE-E73676EBF17F"},{"vulnerable":false,"criteria":"cpe:2.3:a:incogen:bugport:1.094:*:*:*:*:*:*:*","matchCriteriaId":"871C202D-2CF6-4741-B69B-95608CBA2B36"},{"vulnerable":false,"criteria":"cpe:2.3:a:incogen:bugport:1.095:*:*:*:*:*:*:*","matchCriteriaId":"972A7466-F24A-4F0D-BEBF-7E60B0234D7A"},{"vulnerable":false,"criteria":"cpe:2.3:a:incogen:bugport:1.096:*:*:*:*:*:*:*","matchCriteriaId":"B2917EFF-D512-470C-ACE5-B5A1B25CF3F5"},{"vulnerable":false,"criteria":"cpe:2.3:a:incogen:bugport:1.097:*:*:*:*:*:*:*","matchCriteriaId":"248EC7DB-8887-4665-8D15-8B79A2C5E232"},{"vulnerable":false,"criteria":"cpe:2.3:a:incogen:bugport:1.098:*:*:*:*:*:*:*","matchCriteriaId":"2E63B4A6-7038-480B-B9C8-DA78FA6630F3"}]}]}],"references":[{"url":"http://secunia.com/advisories/10785/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.incogen.com/downloads/bugport/CHANGELOG.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9542","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15030","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10785/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.incogen.com/downloads/bugport/CHANGELOG.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9542","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15030","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2354","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL statements via the entry parameter to modules.php, which can also facilitate cross-site scripting (XSS) attacks when MySQL errors are triggered."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*","matchCriteriaId":"23264211-2992-4222-9B96-5ABEE1332C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*","matchCriteriaId":"B7F76C32-E24D-4B62-88CE-2D23F457573B"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*","matchCriteriaId":"F90A3E1F-0371-45C0-A165-55D94A62C3DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F80A5D98-6C48-461F-8B96-BD32A96CDCA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"92F4E55E-4424-4EC8-8013-9A0FFE7D3658"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*","matchCriteriaId":"9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*","matchCriteriaId":"8B13CCAA-839F-406D-A7F3-975B4780425A"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*","matchCriteriaId":"1D375197-0087-479C-991B-964FB83644F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*","matchCriteriaId":"70F6320E-314D-4A8F-BC9A-29F730035C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:warpspeed:4nguestbook:0.92:*:*:*:*:*:*:*","matchCriteriaId":"F843038F-A98A-4FE7-9F31-AC614C776335"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0139.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15478","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0139.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15478","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2355","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Crafty Syntax Live Help (CSLH) before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:crafty_syntax_live_help:crafty_syntax_live_help:2.7.3:*:*:*:*:*:*:*","matchCriteriaId":"3CB063B6-6CA6-4ABD-B3AE-4C963D906C81"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0054.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/11789","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.craftysyntax.com/CHANGELOG.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6744","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10463","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16321","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0054.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/11789","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.craftysyntax.com/CHANGELOG.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6744","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16321","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2356","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Early termination vulnerability in Fizmez Web Server 1.0 allows remote attackers to cause a denial of service (crash) by connecting to the server and then disconnecting without sending any data, which triggers a null pointer dereference."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fizmez:fizmez_web_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"094E5FAE-5E4E-42EC-BA70-4F7FE8355F88"}]}]}],"references":[{"url":"http://secunia.com/advisories/11141/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009451","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.autistici.org/fdonato/advisory/fws1.0-adv.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9894","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15506","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11141/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009451","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.autistici.org/fdonato/advisory/fws1.0-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15506","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2357","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The embedded MySQL 4.0 server for Proofpoint Protection Server does not require a password for the root user of MySQL, which allows remote attackers to read or modify the backend database."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proofpoint:proofpoint_protection_server:*:*:*:*:*:*:*:*","matchCriteriaId":"57068C7F-6B54-4886-BC56-ED3E7AD3F14E"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=107745676915297&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=107752568009182&w=2","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15280","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=107745676915297&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=107752568009182&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15280","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2358","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in admin_words.php for phpBB 2.0.6c allows remote attackers to inject arbitrary web script or HTML via the id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:phpbb_group:phpbb:2.0.6c:*:*:*:*:*:*:*","matchCriteriaId":"D9D9A19A-7A43-4E67-A5A7-7DF60926EB95"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0219.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9896","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15579","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0219.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9896","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15579","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2359","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started from the systray applet, which allows local users to gain privileges by accessing the Help functionality."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dell:truemobile_1300_wlan_mini-pci_card_util_trayapplet:3.10.39.0:*:*:*:*:*:*:*","matchCriteriaId":"1DD8BAC8-8F73-46FA-8D40-EC4A25FCBB68"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0042.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/10949","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009174","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9714","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15285","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/10949","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15285","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2360","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Targem Battle Mages 1.0 allows remote attackers to cause a denial of service (infinite loop) via a UDP packet with incomplete data, which causes the server to enter an infinite loop while waiting to read the rest of the data that is not sent."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:targem_games:battle_mages:1.0:*:*:*:*:*:*:*","matchCriteriaId":"223A71BA-D292-438D-852F-2EA4D7BB8B71"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/battlemages-adv.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2004/03/msg00103.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9849","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15487","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/battlemages-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://cert.uni-stuttgart.de/archive/bugtraq/2004/03/msg00103.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9849","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15487","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2361","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Digital Reality game engine, as used in Haegemonia 1.0 through 1.0.7 and Desert Rats vs. Afrika Korps 1.0, allows remote attackers to cause a denial of service (crash) via a chat message with a large message size, which triggers an out-of-bounds read."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:digital_reality:desert_rats_vs._afrika_korps:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E20AFB4F-1A80-43E0-AE77-94186565A5FD"},{"vulnerable":false,"criteria":"cpe:2.3:a:digital_reality:haegemonia:1.0:*:*:*:*:*:*:*","matchCriteriaId":"DDC16621-0167-4D6F-9150-C564B5244F59"},{"vulnerable":false,"criteria":"cpe:2.3:a:digital_reality:haegemonia:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0EB65611-F32C-478B-88BB-DF3A84BDDAFA"},{"vulnerable":false,"criteria":"cpe:2.3:a:digital_reality:haegemonia:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"A61FF833-D1EA-46A0-90DC-3A2F27CD67F3"},{"vulnerable":false,"criteria":"cpe:2.3:a:digital_reality:haegemonia:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"43E63249-E60B-492C-BC37-322D96567205"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/hgmcrash-adv.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107764783411414&w=2","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10631","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10632","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9736","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15307","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/hgmcrash-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=107764783411414&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15307","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2362","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or invalid value in the limit parameter, which leaks the pathname in a database error message, as demonstrated using forums.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"360D144F-9DD4-4558-9938-4BC4CF833E79"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"A7E59CED-0527-4070-A141-98D0D2DEF131"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:1.0.14:*:*:*:*:*:*:*","matchCriteriaId":"8F35A2D0-A4DF-4ED8-A3A3-09827DCDC49C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"DC092CC0-4D08-44B2-88E2-AF4BCBEA1DD0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"A6BFDA1A-B0FF-4C0E-8242-91B1929F3868"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"E528B61A-E33D-4E3C-9570-F8D2B19E149F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"5C56848C-0E46-4327-A6DB-63DD11FAE780"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"0C71FCFC-E6BB-484F-9311-459FDD1CCD00"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A6CEA20A-E641-4997-B35A-06EC14C83B33"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E73B574A-3307-4734-884B-A7893CEE56B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"01584023-8155-4FA8-8F37-4CCA48FCC8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8AD47CA4-A5E9-4EAB-9D9D-32892D384B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D48E8454-0808-46B7-A692-F91BF20C3733"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9D8466FC-E652-4B52-A3AB-601CFBDBE0D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D9F3A1D6-657D-46A7-9FD7-6EB43FE4D3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"3C793EC7-0B35-4C43-90B3-D39EA917E40E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"34ACF990-0A89-43B1-ACA6-54CEFB1A45EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BF48C341-2255-4A3B-8DC6-82797BBD40CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6157764-E76A-452E-8991-366224E9D6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"751ABFD4-5DCA-4D93-87B0-14D4C8A66B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BCA0E2F6-8CDC-4D70-AE79-0E4FF3D64F77"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4F9A8C2F-611E-4E2B-9B3B-E6606BCC3519"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"97DBE63F-32EC-43A0-8454-62DA124919F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D6BE8112-E8CF-4D38-B3AD-843446B26392"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A692A925-E22A-4A35-96F8-8F9E123B44E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9CC47FB8-8F61-4389-8F7F-F8397863884B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"5E28B044-1D5C-45E4-8901-057117CD0590"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"E1CE385A-D04D-4E20-9C64-9B2E4307988E"}]}]}],"references":[{"url":"http://secunia.com/advisories/11554","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010061","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5906","source":"cve@mitre.org"},{"url":"http://www.phpx.org/project.php?action=view&project_id=1","source":"cve@mitre.org","tags":["Patch","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/362230","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16064","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5906","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpx.org/project.php?action=view&project_id=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/362230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16064","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2363","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Validate-Before-Canonicalize vulnerability in the checkURI function in functions.inc.php in PHPX 3.0 through 3.2.6 allows remote attackers to conduct cross-site scripting (XSS) attacks via hex-encoded tags, which bypass the check for literal \"<\", \">\", \"(\", and \")\" characters, as demonstrated using the limit parameter to forums.php and a variety of other vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A6CEA20A-E641-4997-B35A-06EC14C83B33"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E73B574A-3307-4734-884B-A7893CEE56B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"01584023-8155-4FA8-8F37-4CCA48FCC8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8AD47CA4-A5E9-4EAB-9D9D-32892D384B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D48E8454-0808-46B7-A692-F91BF20C3733"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9D8466FC-E652-4B52-A3AB-601CFBDBE0D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D9F3A1D6-657D-46A7-9FD7-6EB43FE4D3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"3C793EC7-0B35-4C43-90B3-D39EA917E40E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"34ACF990-0A89-43B1-ACA6-54CEFB1A45EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BF48C341-2255-4A3B-8DC6-82797BBD40CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6157764-E76A-452E-8991-366224E9D6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"751ABFD4-5DCA-4D93-87B0-14D4C8A66B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BCA0E2F6-8CDC-4D70-AE79-0E4FF3D64F77"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4F9A8C2F-611E-4E2B-9B3B-E6606BCC3519"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"97DBE63F-32EC-43A0-8454-62DA124919F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D6BE8112-E8CF-4D38-B3AD-843446B26392"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A692A925-E22A-4A35-96F8-8F9E123B44E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9CC47FB8-8F61-4389-8F7F-F8397863884B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"5E28B044-1D5C-45E4-8901-057117CD0590"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"E1CE385A-D04D-4E20-9C64-9B2E4307988E"}]}]}],"references":[{"url":"http://www.phpx.org/project.php?action=view&project_id=1","source":"cve@mitre.org","tags":["Patch","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/362230","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10283","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16065","source":"cve@mitre.org"},{"url":"http://www.phpx.org/project.php?action=view&project_id=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/362230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10283","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16065","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2364","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs that are automatically executed on behalf of the administrator, as demonstrated using (1) admin/page.php, (2) admin/news.php, (3) admin/user.php, (4) admin/images.php, (5) admin/page.php, or (6) admin/forums.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A6CEA20A-E641-4997-B35A-06EC14C83B33"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"E73B574A-3307-4734-884B-A7893CEE56B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"01584023-8155-4FA8-8F37-4CCA48FCC8DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8AD47CA4-A5E9-4EAB-9D9D-32892D384B51"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"D48E8454-0808-46B7-A692-F91BF20C3733"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9D8466FC-E652-4B52-A3AB-601CFBDBE0D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D9F3A1D6-657D-46A7-9FD7-6EB43FE4D3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"3C793EC7-0B35-4C43-90B3-D39EA917E40E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"34ACF990-0A89-43B1-ACA6-54CEFB1A45EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BF48C341-2255-4A3B-8DC6-82797BBD40CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F6157764-E76A-452E-8991-366224E9D6E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"751ABFD4-5DCA-4D93-87B0-14D4C8A66B80"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"BCA0E2F6-8CDC-4D70-AE79-0E4FF3D64F77"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"4F9A8C2F-611E-4E2B-9B3B-E6606BCC3519"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"97DBE63F-32EC-43A0-8454-62DA124919F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"D6BE8112-E8CF-4D38-B3AD-843446B26392"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.3:*:*:*:*:*:*:*","matchCriteriaId":"A692A925-E22A-4A35-96F8-8F9E123B44E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.4:*:*:*:*:*:*:*","matchCriteriaId":"9CC47FB8-8F61-4389-8F7F-F8397863884B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.5:*:*:*:*:*:*:*","matchCriteriaId":"5E28B044-1D5C-45E4-8901-057117CD0590"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpx:phpx:3.2.6:*:*:*:*:*:*:*","matchCriteriaId":"E1CE385A-D04D-4E20-9C64-9B2E4307988E"}]}]}],"references":[{"url":"http://secunia.com/advisories/11554","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010061","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5907","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5908","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5909","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5910","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5911","source":"cve@mitre.org"},{"url":"http://www.phpx.org/project.php?action=view&project_id=1","source":"cve@mitre.org","tags":["Patch","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/362230","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10284","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/11554","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010061","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5907","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5908","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5910","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5911","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpx.org/project.php?action=view&project_id=1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/362230","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10284","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2004-2365","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in Microsoft Windows XP and Windows Server 2003 allows local users to cause a denial of service (memory exhaustion) by repeatedly creating and deleting directories using a non-standard tool such as smbmount."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":true,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*","matchCriteriaId":"4BF263CB-4239-4DB0-867C-9069ED02CAD7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0119.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15057","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-02/0119.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2366","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.2004.2 allows remote attackers to cause a denial of service (crash) via a SITE command with a long argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:globalscape:secure_ftp_server:2.0_build2004-03-11:*:*:*:*:*:*:*","matchCriteriaId":"8841A56E-BC67-44D8-A1EA-FAFDDCB4AEE7"}]}]}],"references":[{"url":"http://secunia.com/advisories/11159/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cuteftp.com/gsftps/history.asp","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5KP0C20CAC.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9904","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15511","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11159/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.cuteftp.com/gsftps/history.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5KP0C20CAC.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15511","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2367","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Control Panel applet in WFTPD and WFTPD Pro 3.21 R1 and R2 allows remote authenticated users to cause a denial of service (crash) via a long FTP command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.21_r1:*:*:*:*:*:*:*","matchCriteriaId":"F4466ADA-D5BF-4441-96A8-78DB55A54BF9"},{"vulnerable":false,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd:3.21_r2:*:*:*:*:*:*:*","matchCriteriaId":"31F72D6B-2D6F-4615-AB54-84FC1907FA1B"},{"vulnerable":false,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd_pro:3.21_r1:*:*:*:*:*:*:*","matchCriteriaId":"A893D145-178D-412A-9CC9-DFAEA2646F26"},{"vulnerable":false,"criteria":"cpe:2.3:a:texas_imperial_software:wftpd_pro:3.21_r2:*:*:*:*:*:*:*","matchCriteriaId":"0FF43D3B-8C2C-4BEF-9349-D339F9DD0CD0"}]}]}],"references":[{"url":"http://secunia.com/advisories/11160/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securiteam.com/windowsntfocus/5JP0B20CAY.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9908","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.wftpd.com/bug_gpf.htm","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15510","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11160/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securiteam.com/windowsntfocus/5JP0B20CAY.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9908","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.wftpd.com/bug_gpf.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15510","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2368","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP code via the systempath parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:the_opt-x_project:opt-x:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"AA01A3AE-E160-4BA7-8956-8D72CA3524A1"}]}]}],"references":[{"url":"http://www.opt-x.org/index.php","source":"cve@mitre.org","tags":["Patch","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/9732","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.zone-h.org/en/advisories/read/id=4036/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15296","source":"cve@mitre.org"},{"url":"http://www.opt-x.org/index.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","URL Repurposed"]},{"url":"http://www.securityfocus.com/bid/9732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.zone-h.org/en/advisories/read/id=4036/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15296","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2369","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a .. (dot dot) in the directory creation command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C00B8057-26DF-4064-A934-0AA88A0C1A6F"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/ibm_lotus_domino/lotus.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11143/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9900","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15503","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15504","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/ibm_lotus_domino/lotus.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11143/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15504","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2370","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Trillian 0.71 through 0.74f and Trillian Pro 1.0 through 2.01 allows remote attackers to execute arbitrary code via a Yahoo Messenger packet with a long key name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.71:*:*:*:*:*:*:*","matchCriteriaId":"12BB96CE-AEA5-4644-A41E-F317083B11CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.73:*:*:*:*:*:*:*","matchCriteriaId":"E0376EA0-9F02-4987-A0A3-A79DE73512F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74:*:*:*:*:*:*:*","matchCriteriaId":"03C5DC92-EE8F-43A7-8F78-58D01FA4D4A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74b:*:*:*:*:*:*:*","matchCriteriaId":"0D8315F3-9E85-479E-9B73-EAC11FFCC3F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74c:*:*:*:*:*:*:*","matchCriteriaId":"F28B0F08-4782-4C58-8455-835FCAD6081B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74d:*:*:*:*:*:*:*","matchCriteriaId":"7106A436-3061-4818-B8A3-A949823154B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74e:*:*:*:*:*:*:*","matchCriteriaId":"C1340171-B37F-47EF-A446-3C95EE5157A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74f:*:*:*:*:*:*:*","matchCriteriaId":"EE5CAF65-2E39-4CA8-B251-4E14B5BCB367"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.74g:*:*:*:*:*:*:*","matchCriteriaId":"5A362992-03FF-413A-805B-A9C99D86F266"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian:0.725:*:*:*:*:*:*:*","matchCriteriaId":"6E747537-D974-48C6-8EAA-6B26F3FBDDA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0DF2FE46-C0A4-4530-9FF6-FDAA6D347E97"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F895BBC-AD93-4B9E-9306-CF45AB6C97E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cerulean_studios:trillian_pro:2.01:*:*:*:*:*:*:*","matchCriteriaId":"CF67D526-06A8-40DA-BD53-7E31CA1BF202"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017766.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10973/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security.e-matters.de/advisories/022004.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009220","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4060","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15304","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017766.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/10973/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security.e-matters.de/advisories/022004.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009220","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4060","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15304","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2371","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service (hang) via packets that contain text strings with incorrect size values."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:redstorm:desert_siege:*:*:*:*:*:*:*:*","matchCriteriaId":"13D72E2D-A8F2-4041-9C1E-34080305A0B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:redstorm:ghost_recon:1.4:*:*:*:*:*:*:*","matchCriteriaId":"8B9DF11F-3922-4AFB-AC08-99A4AB9F8761"},{"vulnerable":true,"criteria":"cpe:2.3:a:redstorm:the_sum_of_all_fears:1.1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"A29CE96F-EA92-49C3-A0AE-29169A6A2CDA"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/grboom-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/355051","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9738","source":"cve@mitre.org"},{"url":"http://www.zone-h.org/advisories/read/id=4038","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15305","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/grboom-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/355051","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9738","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zone-h.org/advisories/read/id=4038","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15305","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2372","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Bochs before 2.1.1, if installed setuid, allows local users to execute arbitrary code via a long HOME environment variable, which is used if the .bochsrc, bochsrc, and bochsrc.txt cannot be found in a known path.  NOTE: some external documents recommend that Bochs be installed setuid root, so this should be treated as a vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bochs_project:bochs:*:*:*:*:*:*:*:*","versionEndExcluding":"2.1.1","matchCriteriaId":"443175FA-B659-470D-AC56-DD8198EE2C0E"}]}]}],"references":[{"url":"http://securitytracker.com/id?1009219","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=215733","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securiteam.com/unixfocus/5XP0L1FC0M.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15309","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://securitytracker.com/id?1009219","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=215733","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securiteam.com/unixfocus/5XP0L1FC0M.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2373","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.3:*:*:*:*:*:*:*","matchCriteriaId":"E81E472E-45B5-465B-B2D7-40F906AC31E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.3.2229:*:*:*:*:*:*:*","matchCriteriaId":"50A04B5F-F17B-4177-861B-66DFD4FBE225"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.4:*:*:*:*:*:*:*","matchCriteriaId":"B2D8157E-3447-44BF-AC22-5A65F4C707E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.5:*:*:*:*:*:*:*","matchCriteriaId":"FDA52A0F-2A09-4FA8-AC10-2D1B6B41D13C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.6:*:*:*:*:*:*:*","matchCriteriaId":"9C4FA9B9-E98C-435C-9F7A-D62E348D92D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7:*:*:*:*:*:*:*","matchCriteriaId":"E0ADB0D5-BD25-488D-87D3-426ABB036B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.7.2480:*:*:*:*:*:*:*","matchCriteriaId":"11FCCE0C-E6F9-4A01-872E-38C5F23C479E"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.8.2616:*:*:*:*:*:*:*","matchCriteriaId":"E80E2514-9F43-48FB-B55E-094F45088D7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.8.2646:*:*:*:*:*:*:*","matchCriteriaId":"2E553111-8B78-4B66-95BC-FD0EE897DDC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:4.8.2790:*:*:*:*:*:*:*","matchCriteriaId":"AEB04B46-B3A6-40B1-9519-EA8896033961"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:5.0.2938:*:*:*:*:*:*:*","matchCriteriaId":"81FDEE59-4E96-4AA7-BE33-9199CF9EA9BB"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:5.1.3036:*:*:*:*:*:*:*","matchCriteriaId":"FD9C099B-C975-46A4-A9A2-F1160DDC0242"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:5.2.3292:*:*:*:*:*:*:*","matchCriteriaId":"43DE333F-6793-4A80-8B61-3AF5EFD1B52F"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:5.5:*:*:*:*:*:*:*","matchCriteriaId":"6955CC4D-1130-46DB-819A-EAFB3BBDAB74"},{"vulnerable":true,"criteria":"cpe:2.3:a:aol:instant_messenger:5.5.3415_beta:*:*:*:*:*:*:*","matchCriteriaId":"1FDD88ED-D59C-4EA3-8C33-E255A39DC2F0"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/354448","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9698","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15310","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/354448","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9698","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15310","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2374","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname in the source of the resulting HTML."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:working_resources_inc.:badblue:2.40:*:*:*:*:*:*:*","matchCriteriaId":"D3076181-C24D-451E-9DCA-2AE887752687"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/355109","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9737","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15311","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/355109","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15311","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2375","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an APOP USER command with a long second parameter (digest)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:1st_class_internet_solutions:1st_class_mail_server:4.0:*:*:*:*:*:*:*","matchCriteriaId":"5E8EF7CD-7A5D-41A5-AB84-F44C86BF758C"}]}]}],"references":[{"url":"http://secunia.com/advisories/11029","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009279","source":"cve@mitre.org"},{"url":"http://www.digiti.be/jeffosz/advisories/1stclasspop3.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/4129","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9794","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.zone-h.org/advisories/read/id=4047","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15314","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11029","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.digiti.be/jeffosz/advisories/1stclasspop3.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/4129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.zone-h.org/advisories/read/id=4047","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15314","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2376","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL request with a long attfile attribute."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:twilight_utilities:twilight_utilities_web_server:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"30558053-6615-4A79-BE0C-0DCA07826402"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/TW-webserver/TWwebserver.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009443.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15515","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/TW-webserver/TWwebserver.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009443.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15515","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2377","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Alcatel OmniSwitch 7000 and 7800 allows remote attackers to cause a denial of service (reboot) via certain network scans, as demonstrated using a Nessus port scan of ports 1 through 1024 with safe-checks disabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:omniswitch:7000:*:*:*:*:*:*:*","matchCriteriaId":"A2B5A849-F52B-459F-AD21-4EAAE561D1DB"},{"vulnerable":true,"criteria":"cpe:2.3:h:alcatel:omniswitch_7800:*:*:*:*:*:*:*:*","matchCriteriaId":"E36E6C20-6CC7-45EA-9A3F-67D85E01D604"}]}]}],"references":[{"url":"http://secunia.com/advisories/10981","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009211","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4064","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/355134","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9745","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15318","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10981","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009211","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/355134","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15318","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2378","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"@Mail 3.64 for Windows allows remote attackers to cause a denial of service (\"unusable\" server) via a large number of POP3 connections to the server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:calacode:at_mail_webmail_system:3.64:*:*:*:*:*:*:*","matchCriteriaId":"1966A0EE-6BB8-4C99-AA20-842585F43C7E"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/%40mail_3.64/%40mail_3.64.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10978","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4068","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9749","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/Feb/1009208.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15320","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/%40mail_3.64/%40mail_3.64.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/alerts/2004/Feb/1009208.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15320","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2379","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in @Mail 3.64 for Windows allow remote attackers to inject arbitrary web script or HTML via (1) the Displayed Name attribute in util.pl and (2) the Folder attribute in showmail.pl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:calacode:at_mail_webmail_system:3.64:*:*:*:*:*:*:*","matchCriteriaId":"1966A0EE-6BB8-4C99-AA20-842585F43C7E"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/%40mail_3.64/%40mail_3.64.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10978","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4066","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4067","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9748","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/Feb/1009208.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15324","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/%40mail_3.64/%40mail_3.64.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4066","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4067","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9748","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/alerts/2004/Feb/1009208.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15324","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2380","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to write arbitrary files via a .. (dot dot) in the attfile parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:twilight_utilities:twilight_utilities_web_server:2.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"30558053-6615-4A79-BE0C-0DCA07826402"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/TW-webserver/TWwebserver.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009443.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15523","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/TW-webserver/TWwebserver.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009443.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15523","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2381","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"D9B24CDC-1E5B-47C9-8192-F0D1116D90A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"F45803E0-D1A7-400D-9CA5-50253AC32401"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.1_rc0:*:*:*:*:*:*:*","matchCriteriaId":"EA393091-0662-48B2-8907-99F26477244C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"22D6CFD2-DBAF-4B4A-B235-98BB4826DBF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.1_rc2:*:*:*:*:*:*:*","matchCriteriaId":"E0CB88D1-A7C1-47A4-9478-B47D945B3905"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7F059700-FAAF-4F9B-9973-C79A0F6D8299"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3446B000-66B2-42F7-B16D-1D0F06B5A874"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"C0E83837-A974-42B8-8E0B-2DCFE55F6B7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.5:*:*:*:*:*:*:*","matchCriteriaId":"38AD7BA2-57EA-42DA-9CFE-FED77A912FFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.6:*:*:*:*:*:*:*","matchCriteriaId":"71842778-8CE8-4545-B527-994D4BEB92AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.b0:*:*:*:*:*:*:*","matchCriteriaId":"464C37F4-F1EC-4827-8C02-0F7253A29FCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.b1:*:*:*:*:*:*:*","matchCriteriaId":"81965444-CC2B-4002-A7FB-D3EE91AC4AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.b2:*:*:*:*:*:*:*","matchCriteriaId":"CB7A0330-CDC2-4D95-BF70-E846C480C025"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.d0:*:*:*:*:*:*:*","matchCriteriaId":"5E4A7F11-5826-45BE-9E69-717BCE5DAF45"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.d1:*:*:*:*:*:*:*","matchCriteriaId":"E4528F32-6D57-46CF-B9CF-EB6097033477"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.d2:*:*:*:*:*:*:*","matchCriteriaId":"5DE9B195-5072-4CA6-984B-A97398789131"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.d3:*:*:*:*:*:*:*","matchCriteriaId":"B156DC85-BD41-49CD-995E-5F144934BE74"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0.d4:*:*:*:*:*:*:*","matchCriteriaId":"F6C484A2-DDBF-4BEC-89D1-EED071680AE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"A338593D-C6A7-429C-B440-26F3CCC54C68"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"94FADCB4-DE60-463D-8B59-7392CD734603"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"65CD5D1D-259D-4CA5-A07C-ECEBE8540265"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"85E64C7C-84FA-4AF0-ADA3-3708DADF35C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.0_rc0:*:*:*:*:*:*:*","matchCriteriaId":"641E07B7-6433-41D5-B420-29FA254F2D27"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"268613F8-F1D5-4691-A8B9-6AD7B639D4E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.0_rc2:*:*:*:*:*:*:*","matchCriteriaId":"CC344802-D51B-4256-B52A-29789ACCF4EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.0_rc3:*:*:*:*:*:*:*","matchCriteriaId":"79B4593B-8780-4774-BC1B-923824AB7B7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"FD27A440-D06A-47D5-97FF-4B56EDD3E8B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.0_rc5:*:*:*:*:*:*:*","matchCriteriaId":"1651BA40-57D1-40BC-AAFE-4ECE34FF1254"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.0_rc6:*:*:*:*:*:*:*","matchCriteriaId":"C62CDC27-A264-4E8E-894D-92AD10DC8C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"35508567-7C83-4C4B-961B-1BE9B8F3D1D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"16AF5579-7763-4851-B7A2-B50A4D589AD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"44BED546-DD64-457E-B93A-CD2069C2068B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"83D7E37B-448A-4B49-ABC7-57253B43126C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.b0:*:*:*:*:*:*:*","matchCriteriaId":"07346177-D7DE-4545-8BB1-D64D1BDBAAAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.b1:*:*:*:*:*:*:*","matchCriteriaId":"65225643-46E4-4B93-BF3A-29DC98BBA92C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.d0:*:*:*:*:*:*:*","matchCriteriaId":"DF6E1FE3-A09D-4593-A3DA-7700D5021EB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.d1:*:*:*:*:*:*:*","matchCriteriaId":"50D5991E-8CAE-4FDC-A4D7-79D14BB2A4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.d2:*:*:*:*:*:*:*","matchCriteriaId":"0D93288E-4ED1-4F4D-875A-AA85F6B853C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.0:*:*:*:*:*:*:*","matchCriteriaId":"33B61642-A3F1-4F13-8A3F-A369E1D47F1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.0_beta0:*:*:*:*:*:*:*","matchCriteriaId":"8575A31A-DD09-494F-895E-1740ABF4F671"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.0_rc0:*:*:*:*:*:*:*","matchCriteriaId":"9622FA39-20BD-4F92-A10A-56B1273A8FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"74666A8D-0B36-47BF-8873-267C8FD228E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"B612838A-DD83-4E67-890E-165692DA4532"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"247F0030-0598-4ADF-8B5D-91BD7CFF7E44"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"61AD076A-D4C5-4149-94DE-E43BE78DE83B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C276FEC9-68B0-46BC-92A0-65C3B8401FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.4_rc0:*:*:*:*:*:*:*","matchCriteriaId":"937F124D-1CE3-405D-A981-760199DA9ED1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"44D01183-FC99-4FD3-965B-38B1FC39048F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A3154BBA-DF19-458F-B8D0-CFCAC7DB366A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"512BF3AF-4013-48E7-9546-5052CFBF0B11"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.8_01:*:*:*:*:*:*:*","matchCriteriaId":"9965B682-2CFE-4881-8C0A-26B161731904"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"09FD2684-87CF-4B4D-B3D1-7DE43609D2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.9_rc1:*:*:*:*:*:*:*","matchCriteriaId":"96E75206-5C22-47CE-ABC4-960C7D80407B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.9_rc2:*:*:*:*:*:*:*","matchCriteriaId":"EA45888D-E2C9-4A17-B699-0C775EFC5FDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.10:*:*:*:*:*:*:*","matchCriteriaId":"B0DD62AB-DA57-48B6-9D00-1DBCD4AF111E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.10_pre0:*:*:*:*:*:*:*","matchCriteriaId":"3D10D8BC-8C63-45CD-836E-08CC5E6C1676"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.10_pre1:*:*:*:*:*:*:*","matchCriteriaId":"C3E86801-E8C2-4DA3-92FD-F89FBB7B53D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.11:*:*:*:*:*:*:*","matchCriteriaId":"B82462AC-665D-41C0-B198-AA52784DF4C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.12:*:*:*:*:*:*:*","matchCriteriaId":"6B21ED45-9C48-4547-BDCE-7EB12B03AAEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.14:*:*:*:*:*:*:*","matchCriteriaId":"BA62A170-2544-4D3D-8E22-21F35D2E9944"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.14_rc0:*:*:*:*:*:*:*","matchCriteriaId":"A8750DB2-F9CE-4CD6-9C11-733546D56EB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.14_rc1:*:*:*:*:*:*:*","matchCriteriaId":"1B72963C-FF0B-4F3F-8D93-8C99C1F43460"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.15:*:*:*:*:*:*:*","matchCriteriaId":"DF5CEA1C-1EC7-49D7-9485-FA8773DA2D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.15_rc0:*:*:*:*:*:*:*","matchCriteriaId":"991A0243-5F9E-4E2B-8780-F58B17F9F73C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.16:*:*:*:*:*:*:*","matchCriteriaId":"3F68F8E1-BF3C-4C99-BE93-985BB8AD51FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.17:*:*:*:*:*:*:*","matchCriteriaId":"D0F5EF68-A6FC-4FD7-8C36-4A8623C60622"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.18:*:*:*:*:*:*:*","matchCriteriaId":"858FCD10-5B40-4EA8-BA16-081EFC734695"}]}]}],"references":[{"url":"http://cvs.sourceforge.net/viewcvs.py/jetty/Jetty/src/org/mortbay/http/HttpRequest.java?r1=1.75&r2=1.76","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11166/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=224743","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/4387","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9917","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15537","source":"cve@mitre.org"},{"url":"http://cvs.sourceforge.net/viewcvs.py/jetty/Jetty/src/org/mortbay/http/HttpRequest.java?r1=1.75&r2=1.76","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11166/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=224743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/4387","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9917","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15537","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2382","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The PerfectNav plugin for Microsoft Internet Explorer allows remote attackers to cause a denial of service (browser crash) via a malformed URL such as \"?\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perfectnav:perfectnav:*:*:*:*:*:*:*:*","matchCriteriaId":"2AFD2DC3-68F7-4952-B58A-2358A6A449FC"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017830.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securetarget.net/advisory.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009218","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9753","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15326","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017830.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securetarget.net/advisory.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9753","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15326","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2383","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML document with Javascript that is outside a frameset that includes the target domain, then forcing the frameset to maintain focus.  NOTE: the discloser claimed that the vendor does not categorize this as a vulnerability, but it can be used in a spoofing scenario; the discloser provides alternate scenarios. Spoofing scenarios are currently included in CVE."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*","matchCriteriaId":"40F8042F-C621-45AE-9F8C-70469579643A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*","matchCriteriaId":"2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*","matchCriteriaId":"D05ED9D0-CF78-4FAD-9371-6FB3D5825148"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A19F6133-25D1-44A5-B6B9-354703436783"}]}]}],"references":[{"url":"http://www.idefense.com/application/poi/display?id=77&type=vulnerabilities&flashstatus=false","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9761","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15337","source":"cve@mitre.org"},{"url":"http://www.idefense.com/application/poi/display?id=77&type=vulnerabilities&flashstatus=false","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15337","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2384","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NullSoft Winamp 5.02 allows remote attackers to cause a denial of service (crash) by creating a file with a long filename, which causes the victim's player to crash when the file is opened from the command line."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nullsoft:winamp:5.02:*:*:*:*:*:*:*","matchCriteriaId":"BAD7DE0D-1018-4E04-A771-B2C619E95C0F"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/357986","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/358097","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9920","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15541","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/357986","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/358097","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15541","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2385","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for init.emu."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:emumail:emu_webmail:5.2.7:*:*:*:*:*:*:*","matchCriteriaId":"035A23B5-64F4-462D-A7BE-383ABDD131DD"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/emu/emu.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11110","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4203","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9861","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15453","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/emu/emu.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11110","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4203","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9861","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15453","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2386","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers passed from the HandleCPCCommand function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:denis_sbragion:sredird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"32ADDB7C-9FE5-49CE-B842-54AC1212FB71"},{"vulnerable":true,"criteria":"cpe:2.3:a:denis_sbragion:sredird:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"EE757586-5AB0-4EE0-8203-B37A40CB3FFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:denis_sbragion:sredird:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F63DA438-D4E6-473B-8394-F42EF01CE0D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:denis_sbragion:sredird:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"2FD45BD1-376B-45E8-ACF4-3D6DA56778C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:denis_sbragion:sredird:2.0:*:*:*:*:*:*:*","matchCriteriaId":"59306CCF-3D54-4FF9-B15B-DB9DDC48ACFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:denis_sbragion:sredird:2.1:*:*:*:*:*:*:*","matchCriteriaId":"587DAFA3-8530-459C-AA5F-C6BD7048885A"},{"vulnerable":true,"criteria":"cpe:2.3:a:denis_sbragion:sredird:2.2:*:*:*:*:*:*:*","matchCriteriaId":"22FD4CC2-61C6-4409-9FB3-834B2423B263"},{"vulnerable":true,"criteria":"cpe:2.3:a:denis_sbragion:sredird:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"206C62C4-0C01-4D03-8828-E5CE07CF2CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_astrand:sercd:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1D50B18D-2597-41D6-83E0-4B46E6201A01"}]}]}],"references":[{"url":"http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=sercd","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12351","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011038","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8375","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/9104","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11002","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11031","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17056","source":"cve@mitre.org"},{"url":"http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=sercd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8375","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/9104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11031","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17056","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2387","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the HandleCPCCommand function of sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:denis_sbragion:sredird:1.0:*:*:*:*:*:*:*","matchCriteriaId":"32ADDB7C-9FE5-49CE-B842-54AC1212FB71"},{"vulnerable":true,"criteria":"cpe:2.3:a:denis_sbragion:sredird:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"EE757586-5AB0-4EE0-8203-B37A40CB3FFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:denis_sbragion:sredird:1.1.7:*:*:*:*:*:*:*","matchCriteriaId":"F63DA438-D4E6-473B-8394-F42EF01CE0D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:denis_sbragion:sredird:1.1.8:*:*:*:*:*:*:*","matchCriteriaId":"2FD45BD1-376B-45E8-ACF4-3D6DA56778C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:denis_sbragion:sredird:2.0:*:*:*:*:*:*:*","matchCriteriaId":"59306CCF-3D54-4FF9-B15B-DB9DDC48ACFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:denis_sbragion:sredird:2.1:*:*:*:*:*:*:*","matchCriteriaId":"587DAFA3-8530-459C-AA5F-C6BD7048885A"},{"vulnerable":true,"criteria":"cpe:2.3:a:denis_sbragion:sredird:2.2:*:*:*:*:*:*:*","matchCriteriaId":"22FD4CC2-61C6-4409-9FB3-834B2423B263"},{"vulnerable":true,"criteria":"cpe:2.3:a:denis_sbragion:sredird:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"206C62C4-0C01-4D03-8828-E5CE07CF2CF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:peter_astrand:sercd:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"1D50B18D-2597-41D6-83E0-4B46E6201A01"}]}]}],"references":[{"url":"http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=sercd","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12351","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011038","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9100","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11002","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11033","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17059","source":"cve@mitre.org"},{"url":"http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=sercd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9100","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11033","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17059","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2388","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"}]}]}],"references":[{"url":"http://secunia.com/advisories/11085","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IY53507","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-102.shtml","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/4248","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9835","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15455","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IY53507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-102.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/4248","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15455","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2389","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denial of service (infinite loop) via user re-registration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0:*:*:*:*:*:*:*","matchCriteriaId":"21080A9A-A981-4E67-A38F-8D1C984681F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"86452F05-465D-468D-B3D7-20ECD30613D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C0E2A2E6-D4D2-4AA5-968E-28B8DC361B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D36DF31B-7BF1-4155-B4C1-AAC78E2852E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B0F779DA-F84A-4BA8-B0E7-85C7BF29AB89"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EE8BEC50-F5B2-4EE8-BCD7-F5FAA7A0A32A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE43A8EA-7B0F-479F-9CB9-7B5D2DC46FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0F80728F-9829-45D0-A922-D289D2D3038E"}]}]}],"references":[{"url":"http://secunia.com/advisories/10974/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009248","source":"cve@mitre.org"},{"url":"http://www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4057","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9710","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15319","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10974/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009248","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4057","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2390","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The roster import functionality in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8, when using libgadu 1.0 and later, allows attackers to cause a denial of service via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0:*:*:*:*:*:*:*","matchCriteriaId":"21080A9A-A981-4E67-A38F-8D1C984681F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"86452F05-465D-468D-B3D7-20ECD30613D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C0E2A2E6-D4D2-4AA5-968E-28B8DC361B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D36DF31B-7BF1-4155-B4C1-AAC78E2852E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B0F779DA-F84A-4BA8-B0E7-85C7BF29AB89"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EE8BEC50-F5B2-4EE8-BCD7-F5FAA7A0A32A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE43A8EA-7B0F-479F-9CB9-7B5D2DC46FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0F80728F-9829-45D0-A922-D289D2D3038E"}]}]}],"references":[{"url":"http://secunia.com/advisories/10974/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9710","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15319","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10974/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2391","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denial of service a message with an empty <priority/> tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0:*:*:*:*:*:*:*","matchCriteriaId":"21080A9A-A981-4E67-A38F-8D1C984681F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"86452F05-465D-468D-B3D7-20ECD30613D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"C0E2A2E6-D4D2-4AA5-968E-28B8DC361B4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D36DF31B-7BF1-4155-B4C1-AAC78E2852E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"B0F779DA-F84A-4BA8-B0E7-85C7BF29AB89"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"EE8BEC50-F5B2-4EE8-BCD7-F5FAA7A0A32A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.6:*:*:*:*:*:*:*","matchCriteriaId":"AE43A8EA-7B0F-479F-9CB9-7B5D2DC46FC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jabberstudio:jabber_gadu-gadu_transport:2.0.7:*:*:*:*:*:*:*","matchCriteriaId":"0F80728F-9829-45D0-A922-D289D2D3038E"}]}]}],"references":[{"url":"http://secunia.com/advisories/10974/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9710","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15319","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10974/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2392","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors, related to read failures and other bugs."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C4AD30B9-8FBA-48B3-B2B2-014C950B9BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:ppc:*:*:*:*:*","matchCriteriaId":"EFEB74B2-3019-43CC-A1B7-8F0E66A8E410"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"052E3862-BFB7-42E7-889D-8590AFA8EF37"}]}]}],"references":[{"url":"http://securitytracker.com/id?1010187","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:044","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-770.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10368","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120168","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16188","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010187","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:044","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-770.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16188","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2393","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allows remote attackers to falsely authenticate peers for SSL/TLS."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jsse:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"432EB8F8-52C0-4FF3-97E5-92F670DFEE29"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jsse:1.0.3_01:*:*:*:*:*:*:*","matchCriteriaId":"2DC8159F-4CB2-4A94-B7DF-4D7496EBA55B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jsse:1.0.3_02:*:*:*:*:*:*:*","matchCriteriaId":"7D51B8BB-C05E-42A2-A6EC-87F73A3CDF98"}]}]}],"references":[{"url":"http://secunia.com/advisories/11639","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010193","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57560-1","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201724-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001273.1-1","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6299","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10387","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16194","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11639","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010193","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57560-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-201724-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001273.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10387","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16194","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2394","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password instead of the first 79, which results in a small reduction of the search space required for brute force attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*","matchCriteriaId":"E4F3F3BB-E004-4FD9-9580-F2D5F3ED3701"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"DEB99324-3062-426F-8E2F-44DC3A7ADB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:ppc:*:*:*:*:*","matchCriteriaId":"128F5289-E9F3-41A7-A534-FBAA8A119A9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"33F6F859-B7B8-4072-B073-6CC8291D642E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C4AD30B9-8FBA-48B3-B2B2-014C950B9BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:ppc:*:*:*:*:*","matchCriteriaId":"279317B9-AF2F-43E9-BEE5-518FC6D23A87"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"052E3862-BFB7-42E7-889D-8590AFA8EF37"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:045","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10370","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16178","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16178","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2395","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of failed read attempts from the password buffer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*","matchCriteriaId":"E4F3F3BB-E004-4FD9-9580-F2D5F3ED3701"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"DEB99324-3062-426F-8E2F-44DC3A7ADB2A"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:ppc:*:*:*:*:*","matchCriteriaId":"128F5289-E9F3-41A7-A534-FBAA8A119A9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"33F6F859-B7B8-4072-B073-6CC8291D642E"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C4AD30B9-8FBA-48B3-B2B2-014C950B9BAA"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:ppc:*:*:*:*:*","matchCriteriaId":"279317B9-AF2F-43E9-BEE5-518FC6D23A87"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":true,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"052E3862-BFB7-42E7-889D-8590AFA8EF37"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:045","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10370","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16180","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16180","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2396","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that may prevent \"safe and proper operation\" of PAM."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:mandrakesoft:mandrake_multi_network_firewall:8.2:*:*:*:*:*:*:*","matchCriteriaId":"E4F3F3BB-E004-4FD9-9580-F2D5F3ED3701"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"DEB99324-3062-426F-8E2F-44DC3A7ADB2A"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:8.2:*:ppc:*:*:*:*:*","matchCriteriaId":"128F5289-E9F3-41A7-A534-FBAA8A119A9F"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"33F6F859-B7B8-4072-B073-6CC8291D642E"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"C4AD30B9-8FBA-48B3-B2B2-014C950B9BAA"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.1:*:ppc:*:*:*:*:*","matchCriteriaId":"279317B9-AF2F-43E9-BEE5-518FC6D23A87"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"4177C378-7729-46AB-B49B-C6DAED3200E7"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*","matchCriteriaId":"2164D10D-D1A4-418A-A9C8-CA8FAB1E90A7"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A06E5CD0-8BEC-4F4C-9E11-1FEE0563946C"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"E0F0D201-B1DC-4024-AF77-A284673618F3"},{"vulnerable":false,"criteria":"cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"052E3862-BFB7-42E7-889D-8590AFA8EF37"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:045","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10370","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16179","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:045","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16179","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2397","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a private key, stores the key and its passphrase in plaintext in a log file, which allows attackers to steal digital certificates."}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:broadcom:bluecoat_security_gateway:*:*:*:*:*:*:*:*","versionStartIncluding":"3.0","versionEndIncluding":"3.1.3.13","matchCriteriaId":"9D36D10A-620C-4D8F-A4B4-50BC2C43AEF5"},{"vulnerable":true,"criteria":"cpe:2.3:o:broadcom:bluecoat_security_gateway:3.2.1:*:*:*:*:*:*:*","matchCriteriaId":"4750874F-6408-440B-B4A2-D9413CE48CE9"}]}]}],"references":[{"url":"http://secunia.com/advisories/11627","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.bluecoat.com/support/knowledge/advisory_private_key_compromise.html","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6218","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10371","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16182","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/11627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.bluecoat.com/support/knowledge/advisory_private_key_compromise.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6218","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10371","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2398","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local users to determine valid usernames and conduct brute force attacks by reading the file names from /var/lib/mysql, which is assigned world-readable permissions by cPanel 9.3.0 R5."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netenberg:fantastico_de_luxe:2.8:*:*:*:*:*:*:*","matchCriteriaId":"5E56C562-4E63-4D2E-8E66-840550265072"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0206.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10390","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16197","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0206.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10390","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16197","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2399","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service (CPU consumption) via delayed responses to DNS queries."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder_g2:6.1.0.01:*:*:*:*:*:*:*","matchCriteriaId":"B2C8F4A9-4F9B-4A33-B463-1E92497F1CCD"}]}]}],"references":[{"url":"http://www.osvdb.org/6231","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securecomputing.com/pdf/SW61002Rel_Notes_0512.pdf","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securecomputing.com/pdf/SW61002Rel_Notes_0512.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2400","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WinFTP Server 1.6 stores username and password credentials in plaintext in the data\\user.wfd file, which allows local users to gain access to the credentials."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:winftp_server:winftp_server:1.6:*:*:*:*:*:*:*","matchCriteriaId":"B2D05D69-3A6B-4557-9368-A8F4F1AAF4F2"}]}]}],"references":[{"url":"http://secunia.com/advisories/13304","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012321","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/12122","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11749","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18247","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/12122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18247","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2401","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow remote attackers to execute arbitrary code via an HTML message with long \"tag text.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail_express:8.03:*:*:*:*:*:*:*","matchCriteriaId":"67E7A419-246E-464D-8817-26B3FFF4396D"}]}]}],"references":[{"url":"http://secunia.com/advisories/11352","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.ipswitch.com/kb/IM-20031219-DF01.htm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5243","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10106","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15841","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11352","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.ipswitch.com/kb/IM-20031219-DF01.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5243","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15841","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2402","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded to parameter.  NOTE: some sources say that the board parameter is affected, but this is incorrect."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1.40:*:*:*:*:*:*:*","matchCriteriaId":"E45990B7-1AA5-450C-86B6-33653F332B2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1.41:*:*:*:*:*:*:*","matchCriteriaId":"183071C9-0D08-4A9C-8566-2F9E81742F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1:*:*:*:*:*:*:*","matchCriteriaId":"CE218CB1-11EE-4DE2-A556-8F3F9F624D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.2:*:*:*:*:*:*:*","matchCriteriaId":"517253F6-2875-4D01-9F6D-903AFBD7B06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3:*:*:*:*:*:*:*","matchCriteriaId":"29C236ED-4AD6-427F-B077-0E918FC47986"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1D28B213-1BC7-4FB1-84B1-31A5EB87F886"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"962801EC-7330-47F9-9740-BC0A236F8954"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_release:*:*:*:*:*:*:*","matchCriteriaId":"4B543E73-5055-4233-9A4B-BDD53C386CD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:2000-09-01:*:*:*:*:*:*:*","matchCriteriaId":"5B8C55BC-81D8-46E2-A303-22D379E3CC65"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:2000-09-11:*:*:*:*:*:*:*","matchCriteriaId":"3135BB83-CC1C-45F4-AB13-A93A17D89290"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-09/0227.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12593","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/10242","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11215","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17452","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-09/0227.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/10242","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11215","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17452","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2403","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the administrative user via a link or IMG tag to YaBB.pl that specifies the desired action, id, and moda parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1.40:*:*:*:*:*:*:*","matchCriteriaId":"E45990B7-1AA5-450C-86B6-33653F332B2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1.41:*:*:*:*:*:*:*","matchCriteriaId":"183071C9-0D08-4A9C-8566-2F9E81742F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1:*:*:*:*:*:*:*","matchCriteriaId":"CE218CB1-11EE-4DE2-A556-8F3F9F624D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.2:*:*:*:*:*:*:*","matchCriteriaId":"517253F6-2875-4D01-9F6D-903AFBD7B06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3:*:*:*:*:*:*:*","matchCriteriaId":"29C236ED-4AD6-427F-B077-0E918FC47986"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"1D28B213-1BC7-4FB1-84B1-31A5EB87F886"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_-_sp_1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"962801EC-7330-47F9-9740-BC0A236F8954"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:1_gold_release:*:*:*:*:*:*:*","matchCriteriaId":"4B543E73-5055-4233-9A4B-BDD53C386CD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:2000-09-01:*:*:*:*:*:*:*","matchCriteriaId":"5B8C55BC-81D8-46E2-A303-22D379E3CC65"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb:2000-09-11:*:*:*:*:*:*:*","matchCriteriaId":"3135BB83-CC1C-45F4-AB13-A93A17D89290"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-09/0227.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12593","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/10243","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11214","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17453","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-09/0227.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12593","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/10243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11214","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17453","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2404","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2023-11-07T01:57:03.633","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-2347.  Reason: This candidate is a duplicate of CVE-2004-2347.  Notes: All CVE users should reference CVE-2004-2347 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-2405","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass scanning or cause a denial of service (crash or module restart), depending on the product, via a malformed LHA archive."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:linux:*:*:*:*:*","versionEndIncluding":"4.52","matchCriteriaId":"0B513907-648B-4F67-96D1-E028C389E874"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:mimesweeper:*:*:*:*:*","versionEndIncluding":"5.42","matchCriteriaId":"D1087A49-25FB-4523-B8B6-6095BFD7BB7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:windows_servers:*:*:*:*:*","versionEndIncluding":"5.42","matchCriteriaId":"131C7D74-C1E0-47D6-8246-5B77330F7E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:workstations:*:*:*:*:*","versionEndIncluding":"5.42","matchCriteriaId":"0FA31012-C608-4157-8E9E-4A4CD291323A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:client_security:*:*:*:*:*","versionEndIncluding":"5.52","matchCriteriaId":"482547EC-5A01-43D9-9F97-11C012E0F119"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:ms_exchange:*:*:*:*:*","versionEndIncluding":"6.21","matchCriteriaId":"52BD1305-8A6C-4FF1-9966-CDE0A1A18E9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:*:*:*:*:*:*:*:*","versionEndIncluding":"2004","matchCriteriaId":"A81A600F-BD38-409D-BF4C-0DA25503E475"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.60:*:samba_servers:*:*:*:*:*","matchCriteriaId":"C8C41338-0651-425E-A823-C8CBD91977D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_for_firewalls:*:*:*:*:*:*:*:*","versionEndIncluding":"6.20","matchCriteriaId":"AD9176A3-93E8-40E6-A386-4EC5B86EEDDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:*:*:*:*:*:*:*:*","versionEndIncluding":"2004","matchCriteriaId":"7AA685D1-05A2-4036-A0D9-F2B048B26B0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:*:*:*:*:*:*:*:*","versionEndIncluding":"6.32","matchCriteriaId":"2C3DFCF8-010C-4877-A17D-59F6E58A05C0"}]}]}],"references":[{"url":"http://secunia.com/advisories/11712","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.f-secure.com/security/fsc-2004-1.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16258","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.f-secure.com/security/fsc-2004-1.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2406","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown \"overflow\" in the phpgw_config table for phpGroupWare before 0.9.14.002 has unknown attack vectors and impact."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.14","matchCriteriaId":"E6674EF9-3F9F-46C8-A916-AAE088F6D54F"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?release_id=153116","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/7620","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=153116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/7620","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2407","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in phpGroupWare before 0.9.14.002 has unknown attack vectors and impact, related to a \"security hole\" in the Setup/Config functionality."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.14","matchCriteriaId":"E6674EF9-3F9F-46C8-A916-AAE088F6D54F"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?release_id=153116","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=153116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2408","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the host server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":3.6},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"FC4E0322-CB40-4F6A-AC8D-65E88D4DCB6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"611D1000-D652-4A4E-B586-AA86CFE46037"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"659AADB3-F844-4862-9AD4-93606EE87A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B191BAB9-5A4B-44CF-B621-36A812827E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"1492C2F9-FDB8-46C6-AC31-A08DF3346690"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"3582FBC3-48A0-4634-A834-F57639FF0AA7"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"9DB2AD0E-4F6B-4495-A8E6-64738D8CD80C"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.3.7:*:*:*:*:*:*:*","matchCriteriaId":"68AFFD5E-55AA-46E0-A7DD-5E55B3AB625B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.3.8:*:*:*:*:*:*:*","matchCriteriaId":"1BF8CDFC-415E-486A-89CC-F282E3E737EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.3.9:*:*:*:*:*:*:*","matchCriteriaId":"210A080B-1DD1-4F80-93EE-76E84BBE4F17"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.9.1:*:*:*:*:*:*:*","matchCriteriaId":"4546690D-3390-4867-A27E-B36CC0DEA3F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.20:*:*:*:*:*:*:*","matchCriteriaId":"3A4697C1-A42F-4361-B551-1829CDA8BB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.21:*:*:*:*:*:*:*","matchCriteriaId":"986B4DA4-1C72-4BE1-9D41-0C1A6B908C0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.22:*:*:*:*:*:*:*","matchCriteriaId":"4A730470-F8A0-44A8-A228-935A7C8217D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.23:*:*:*:*:*:*:*","matchCriteriaId":"291CEFF8-B1B5-4124-962D-B328AC862DF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.24:*:*:*:*:*:*:*","matchCriteriaId":"D2E86CE0-63D7-4BAC-AA82-90966A6898D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.25:*:*:*:*:*:*:*","matchCriteriaId":"2085842D-8782-4D6E-BEA4-84798FFEE00B"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.26:*:*:*:*:*:*:*","matchCriteriaId":"904F270B-D19C-4E2F-BE8F-D36CBAA3F3B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.27:*:*:*:*:*:*:*","matchCriteriaId":"A2E6C095-E770-4D66-A670-BE68FFA65E71"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-07/0040.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://linux-vserver.org/ChangeLog","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12021","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010643","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/7480","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10660","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16626","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-07/0040.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://linux-vserver.org/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12021","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010643","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/7480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16626","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2409","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the sh_hash_compdata function for Samhain 1.8.9 through 2.0.1, when running in update mode (\"-t update\"), might allow attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:1.8.9:*:*:*:*:*:*:*","matchCriteriaId":"88922C8A-7F2D-4CB8-B68E-826946EBBBC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:1.8.10:*:*:*:*:*:*:*","matchCriteriaId":"32EBCA9F-B783-48EE-ABA1-8693982F569E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:1.8.10a:*:*:*:*:*:*:*","matchCriteriaId":"DFF37807-6580-4AC1-BE5A-B39537F37C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:1.8.10b:*:*:*:*:*:*:*","matchCriteriaId":"18C97BDE-EF5F-4311-8E2D-2DD807E85574"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:1.8.11:*:*:*:*:*:*:*","matchCriteriaId":"42EB5B2D-297B-46F6-90B1-393592A3CDB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:1.8.12:*:*:*:*:*:*:*","matchCriteriaId":"82FD3347-086F-4053-842F-B429D9CA0D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:1.8.12a:*:*:*:*:*:*:*","matchCriteriaId":"2EB81C47-A76B-4A3F-8554-0E7C83D55335"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:1.8.12b:*:*:*:*:*:*:*","matchCriteriaId":"57133881-916E-4D8A-AA9F-2EF7B5F4CF07"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"96DE0F6C-BB26-47C8-9A69-4E1001DDFFBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0F6601FD-E9BE-41C9-84B0-E087661A7F2D"}]}]}],"references":[{"url":"http://secunia.com/advisories/13130","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012142","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/11525","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11635","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18000","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/11525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11635","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18000","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2410","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in sh_hash_compdata for Samhain 1.8.9 through 2.0.1 might allow attackers to cause a denial of service (null pointer dereference)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:1.8.9:*:*:*:*:*:*:*","matchCriteriaId":"88922C8A-7F2D-4CB8-B68E-826946EBBBC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:1.8.10:*:*:*:*:*:*:*","matchCriteriaId":"32EBCA9F-B783-48EE-ABA1-8693982F569E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:1.8.10a:*:*:*:*:*:*:*","matchCriteriaId":"DFF37807-6580-4AC1-BE5A-B39537F37C1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:1.8.10b:*:*:*:*:*:*:*","matchCriteriaId":"18C97BDE-EF5F-4311-8E2D-2DD807E85574"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:1.8.11:*:*:*:*:*:*:*","matchCriteriaId":"42EB5B2D-297B-46F6-90B1-393592A3CDB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:1.8.12:*:*:*:*:*:*:*","matchCriteriaId":"82FD3347-086F-4053-842F-B429D9CA0D6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:1.8.12a:*:*:*:*:*:*:*","matchCriteriaId":"2EB81C47-A76B-4A3F-8554-0E7C83D55335"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:1.8.12b:*:*:*:*:*:*:*","matchCriteriaId":"57133881-916E-4D8A-AA9F-2EF7B5F4CF07"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"96DE0F6C-BB26-47C8-9A69-4E1001DDFFBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samhain_labs:samhain:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0F6601FD-E9BE-41C9-84B0-E087661A7F2D"}]}]}],"references":[{"url":"http://securitytracker.com/id?1012142","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/11594","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1012142","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/11594","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2411","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site scripting (XSS) attacks that do not use <script> tags, as demonstrated via javascript in IMG tags to (1) the cat parameter in shopdisplayproducts.asp or (2) the msg parameter in shoperror.asp, and possibly other vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_programming:vp-asp:4.0:*:*:*:*:*:*:*","matchCriteriaId":"ABED79BC-78D4-4FD7-98F6-7927517B90E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_programming:vp-asp:4.50:*:*:*:*:*:*:*","matchCriteriaId":"E6ABD9A1-F2B0-4925-996E-97D708EF9D37"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_programming:vp-asp:5.0:*:*:*:*:*:*:*","matchCriteriaId":"AD70583E-49D6-4C31-B8B6-FA9ED0F65DFF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0363.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11846","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6949","source":"cve@mitre.org"},{"url":"http://www.providesecurity.com/research/advisories/06142004-01.asp","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10530","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10534","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vpasp.com/virtprog/info/faq_securityfixes.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16411","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0363.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11846","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6949","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.providesecurity.com/research/advisories/06142004-01.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10530","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vpasp.com/virtprog/info/faq_securityfixes.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2412","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in VP-ASP Shopping Cart 4.0 through 5.0 allow remote attackers to execute arbitrary SQL commands via the catalogid parameter in (1) shopreviewlist.asp and (2) shopreviewadd.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_programming:vp-asp:4.0:*:*:*:*:*:*:*","matchCriteriaId":"ABED79BC-78D4-4FD7-98F6-7927517B90E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_programming:vp-asp:4.50:*:*:*:*:*:*:*","matchCriteriaId":"E6ABD9A1-F2B0-4925-996E-97D708EF9D37"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_programming:vp-asp:5.0:*:*:*:*:*:*:*","matchCriteriaId":"AD70583E-49D6-4C31-B8B6-FA9ED0F65DFF"}]}]}],"references":[{"url":"http://secunia.com/advisories/11201","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9967","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vpasp.com/virtprog/info/faq_securityfixes.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15588","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9967","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vpasp.com/virtprog/info/faq_securityfixes.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15588","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2413","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in VP-ASP Shopping Cart 4.0 through 5.0 allows remote attackers to execute arbitrary SQL commands via the (1) Processed0 and (2) Processed1 parameters in a POST request to shopproductselect.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_programming:vp-asp:4.0:*:*:*:*:*:*:*","matchCriteriaId":"ABED79BC-78D4-4FD7-98F6-7927517B90E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_programming:vp-asp:4.50:*:*:*:*:*:*:*","matchCriteriaId":"E6ABD9A1-F2B0-4925-996E-97D708EF9D37"},{"vulnerable":true,"criteria":"cpe:2.3:a:virtual_programming:vp-asp:5.0:*:*:*:*:*:*:*","matchCriteriaId":"AD70583E-49D6-4C31-B8B6-FA9ED0F65DFF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0363.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10536","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16400","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0363.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10536","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16400","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2414","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password information in the (1) NIOUTPUT.TXT and (2) NI.LOG log files, which might allow local users to obtain the passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.5:sp1.1a:*:*:*:*:*:*","matchCriteriaId":"0669D0E2-AB83-44AE-A87C-C7EB7AA2953A"}]}]}],"references":[{"url":"http://secunia.com/advisories/11188","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/2968534.htm","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9934","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15600","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11188","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/2968534.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2415","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Davenport before 0.9.10 allows attackers to cause a denial of service (resource consumption) via (1) a very large XML file or (2) entity expansion attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:davenport:davenport:0.8.0:*:*:*:*:*:*:*","matchCriteriaId":"A48E9283-A41B-4E5E-8F4D-2B36FF673B7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:davenport:davenport:0.9.0:*:*:*:*:*:*:*","matchCriteriaId":"6368DB0F-D86B-4A68-9C0D-89FFE13589CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:davenport:davenport:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"3E991027-71B4-4E16-A550-55B1DE835A3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:davenport:davenport:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"0CC5230E-FC92-4BD3-B9DA-5A0541B2A983"},{"vulnerable":true,"criteria":"cpe:2.3:a:davenport:davenport:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"25E55851-D57D-4AFF-A17C-62AB494E2155"},{"vulnerable":true,"criteria":"cpe:2.3:a:davenport:davenport:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"99081CC6-5D3D-4F52-A428-AE9FB4F807C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:davenport:davenport:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"774DDBFB-3865-4EAA-BE83-99D29BA937B6"}]}]}],"references":[{"url":"http://secunia.com/advisories/12337","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011030","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_id=5385243&forum_id=33977","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=262497","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/9105","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11001","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17062","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011030","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/mailarchive/forum.php?thread_id=5385243&forum_id=33977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=262497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/9105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17062","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2416","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:youngzsoft:ccproxy:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9FE1CADB-22C2-4933-8863-9CE3C2CC060B"}]}]}],"references":[{"url":"http://secunia.com/advisories/13085","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012189","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/11593","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/exploits/6E0032KBPM.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11666","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18012","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/11593","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/exploits/6E0032KBPM.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11666","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18012","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2417","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) client hostname or (2) message-id, which are injected into a syslog message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smtp.proxy:smtp.proxy:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"5D637194-E53F-4E18-9BBB-26BF48BFC869"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0267.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11823","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6838","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10509","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16378","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0267.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6838","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10509","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16378","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2418","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in SlimFTPd 3.15 and earlier allows local users to execute arbitrary code via a long command, such as (1) CWD, (2) STOR, (3) MKD, and (4) STAT."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:whitsoft_development:slimftpd:3.15:*:*:*:*:*:*:*","matchCriteriaId":"CE67BB86-1E6C-4246-817A-261042F15AAA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0293.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/13161","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012167","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/11604","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11645","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.whitsoftdev.com/slimftpd/","source":"cve@mitre.org","tags":["Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18014","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0293.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/13161","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/11604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11645","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.whitsoftdev.com/slimftpd/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory","URL Repurposed"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18014","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2419","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Keene Digital Media Server 1.0.2 allows local users to obtain usernames and passwords by reading the dmscore.db file on the local system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:keene:digital_media_server:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"D9FD1FEF-B6C1-4353-8A91-F1E661E2EA6B"}]}]}],"references":[{"url":"http://secunia.com/advisories/12272","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010928","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8591","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10933","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16964","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12272","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10933","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16964","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2420","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hitachi Job Management Partner (JP1) JP1/File Transmission Server/FTP 6 and 7 allows remote attackers to cause a denial of service (daemon halt) via a port scan involving reset packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1b41-9461:06_00_h:*:*:*:*:*:*:*","matchCriteriaId":"977E01EB-036F-49E2-BE3A-91C1A5FF26CB"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1b41-9461:06_01_d:*:*:*:*:*:*:*","matchCriteriaId":"3D556582-B310-4069-A8AB-08A705189EF6"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1b41-9461:06_02-b:*:*:*:*:*:*:*","matchCriteriaId":"90950497-D98C-4C4A-A2F3-0A6BD701046D"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1b41-9461:06_02_c:*:*:*:*:*:*:*","matchCriteriaId":"68D228A5-32F4-473C-A6DE-7B8E99EE976F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1b41-9471:07_00_a:*:*:*:*:*:*:*","matchCriteriaId":"124BCA5F-7A2E-4C7C-8BCE-8F4572B320FB"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1b41-9471:07_10:*:*:*:*:*:*:*","matchCriteriaId":"6B6A1C06-59BC-44F5-AA99-1BD64FAC60BC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1b41-9471:07_10_a:*:*:*:*:*:*:*","matchCriteriaId":"C66D7A9C-60A4-4F53-BA70-A0656AC4875F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1j41-9471:07_00:*:*:*:*:*:*:*","matchCriteriaId":"C71A731A-E284-41D7-A919-1AE46DAA48D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1j41-9471:07_10:*:*:*:*:*:*:*","matchCriteriaId":"83BDD11F-B950-470A-9A11-174E10FBD066"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1j41-9471:07_10_a:*:*:*:*:*:*:*","matchCriteriaId":"254BA743-1DE5-4BD9-8BE3-979583852321"}]}]}],"references":[{"url":"http://secunia.com/advisories/12050","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011024","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-005_e/01-e.html","source":"cve@mitre.org"},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-005_e/index-e.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11012","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17071","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-005_e/01-e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-005_e/index-e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17071","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2421","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Hitachi Job Management Partner (JP1) JP1/File Transmission Server/FTP 6 and 7, when running on HP-UX in trusted mode, allows attackers to bypass authentication and gain administrator rights."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1b41-9461:06_00_h:*:*:*:*:*:*:*","matchCriteriaId":"977E01EB-036F-49E2-BE3A-91C1A5FF26CB"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1b41-9461:06_01_d:*:*:*:*:*:*:*","matchCriteriaId":"3D556582-B310-4069-A8AB-08A705189EF6"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1b41-9461:06_02-b:*:*:*:*:*:*:*","matchCriteriaId":"90950497-D98C-4C4A-A2F3-0A6BD701046D"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1b41-9461:06_02_c:*:*:*:*:*:*:*","matchCriteriaId":"68D228A5-32F4-473C-A6DE-7B8E99EE976F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1b41-9471:07_00_a:*:*:*:*:*:*:*","matchCriteriaId":"124BCA5F-7A2E-4C7C-8BCE-8F4572B320FB"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1b41-9471:07_10:*:*:*:*:*:*:*","matchCriteriaId":"6B6A1C06-59BC-44F5-AA99-1BD64FAC60BC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1b41-9471:07_10_a:*:*:*:*:*:*:*","matchCriteriaId":"C66D7A9C-60A4-4F53-BA70-A0656AC4875F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1j41-9471:07_00:*:*:*:*:*:*:*","matchCriteriaId":"C71A731A-E284-41D7-A919-1AE46DAA48D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1j41-9471:07_10:*:*:*:*:*:*:*","matchCriteriaId":"83BDD11F-B950-470A-9A11-174E10FBD066"},{"vulnerable":true,"criteria":"cpe:2.3:h:hitachi:jp1_p-1j41-9471:07_10_a:*:*:*:*:*:*:*","matchCriteriaId":"254BA743-1DE5-4BD9-8BE3-979583852321"}]}]}],"references":[{"url":"http://secunia.com/advisories/12050","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011023","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-004_e/index-e.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11012","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17074","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12050","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-004_e/index-e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17074","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2422","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service (crash) via (1) a long sender field to the Queue Manager or (2) a long To field to the Web Messaging component."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EFEFE5A5-6589-4316-9C9F-2F8109696158"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DB3992E3-D0C8-4A48-B4E1-D31B0D79CEE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"65248233-61A3-4085-8808-6FC2FD87EAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B37214DE-41E8-4DD4-AFBF-E608B88D6EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6E11FF5E-9B3D-4818-B091-1286ECF47937"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9EADF489-0420-4C47-9F73-78114C2042F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"58084475-62DE-482E-B34B-A09EBC190C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56F7C097-B6D9-4C10-BDCD-245E5D387ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"838CCBFF-1CD5-4B9F-8EA3-97A097F7E69F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A50719E9-10F0-4FA4-9ADF-771D8995BCBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7A965D10-F783-423B-BD70-AB11725D0172"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6613A7-3338-451F-876E-C544CCE2C066"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EAEA8FB7-3D42-4A39-BCCD-2DE3BC3EAC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.2:*:*:*:*:*:*:*","matchCriteriaId":"12658962-53E6-49EB-83EF-04A1B5D693B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6DA61FCA-BA3C-4014-9C4B-4D4ED65AB07A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.4:*:*:*:*:*:*:*","matchCriteriaId":"D0BC7230-2A64-43CE-B041-22F2E4A559A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A5700938-EE34-4A16-BE98-74EAA4A48249"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CCF543E9-F893-4086-BD97-ECB43EEF26BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3818F47-0A00-4984-857D-DBF87DDB71B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84CE3C80-C0D3-4F7C-BF12-10111281DC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B1E2D897-B37B-43E1-96D9-9BF7A5AFC842"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4098FA6A-356C-4AA5-B948-AAD642354F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A7920844-DD87-47EF-B3CF-DA2DE04FC7F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.1:*:*:*:*:*:*:*","matchCriteriaId":"606E35DC-DF69-4A95-9116-111D3AF28EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.12:*:*:*:*:*:*:*","matchCriteriaId":"3C108EAB-1EDC-458C-A7F8-0B3599E66466"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3138FF2C-2D8A-4270-9A55-85FCA3622DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8A1F768F-1974-4612-BED3-A608CFCC019F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:8.1:*:*:*:*:*:*:*","matchCriteriaId":"785BD23E-DE6D-4ABA-AFDD-2FEA03E6DA73"}]}]}],"references":[{"url":"http://secunia.com/advisories/12453","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011146","source":"cve@mitre.org"},{"url":"http://support.ipswitch.com/kb/IM-20040902-DM01.htm#FIXES","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9552","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/9554","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11106","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17219","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17222","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011146","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.ipswitch.com/kb/IM-20040902-DM01.htm#FIXES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9552","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/9554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17222","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2423","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in the Web calendaring component of Ipswitch IMail Server before 8.13 allows remote attackers to cause a denial of service (crash) via \"specific content.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0:*:*:*:*:*:*:*","matchCriteriaId":"EFEFE5A5-6589-4316-9C9F-2F8109696158"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"DB3992E3-D0C8-4A48-B4E1-D31B0D79CEE0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.6:*:*:*:*:*:*:*","matchCriteriaId":"65248233-61A3-4085-8808-6FC2FD87EAF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.7:*:*:*:*:*:*:*","matchCriteriaId":"B37214DE-41E8-4DD4-AFBF-E608B88D6EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:5.0.8:*:*:*:*:*:*:*","matchCriteriaId":"6E11FF5E-9B3D-4818-B091-1286ECF47937"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9EADF489-0420-4C47-9F73-78114C2042F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"58084475-62DE-482E-B34B-A09EBC190C84"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"56F7C097-B6D9-4C10-BDCD-245E5D387ADA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"838CCBFF-1CD5-4B9F-8EA3-97A097F7E69F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"A50719E9-10F0-4FA4-9ADF-771D8995BCBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"7A965D10-F783-423B-BD70-AB11725D0172"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"7B6613A7-3338-451F-876E-C544CCE2C066"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.1:*:*:*:*:*:*:*","matchCriteriaId":"EAEA8FB7-3D42-4A39-BCCD-2DE3BC3EAC19"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.2:*:*:*:*:*:*:*","matchCriteriaId":"12658962-53E6-49EB-83EF-04A1B5D693B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.3:*:*:*:*:*:*:*","matchCriteriaId":"6DA61FCA-BA3C-4014-9C4B-4D4ED65AB07A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:6.4:*:*:*:*:*:*:*","matchCriteriaId":"D0BC7230-2A64-43CE-B041-22F2E4A559A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A5700938-EE34-4A16-BE98-74EAA4A48249"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"CCF543E9-F893-4086-BD97-ECB43EEF26BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F3818F47-0A00-4984-857D-DBF87DDB71B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.4:*:*:*:*:*:*:*","matchCriteriaId":"84CE3C80-C0D3-4F7C-BF12-10111281DC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.5:*:*:*:*:*:*:*","matchCriteriaId":"B1E2D897-B37B-43E1-96D9-9BF7A5AFC842"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4098FA6A-356C-4AA5-B948-AAD642354F7B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.0.7:*:*:*:*:*:*:*","matchCriteriaId":"A7920844-DD87-47EF-B3CF-DA2DE04FC7F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.1:*:*:*:*:*:*:*","matchCriteriaId":"606E35DC-DF69-4A95-9116-111D3AF28EA9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:7.12:*:*:*:*:*:*:*","matchCriteriaId":"3C108EAB-1EDC-458C-A7F8-0B3599E66466"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:8.0.3:*:*:*:*:*:*:*","matchCriteriaId":"3138FF2C-2D8A-4270-9A55-85FCA3622DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:8.0.5:*:*:*:*:*:*:*","matchCriteriaId":"8A1F768F-1974-4612-BED3-A608CFCC019F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ipswitch:imail:8.1:*:*:*:*:*:*:*","matchCriteriaId":"785BD23E-DE6D-4ABA-AFDD-2FEA03E6DA73"}]}]}],"references":[{"url":"http://secunia.com/advisories/12453","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1011146","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.ipswitch.com/kb/IM-20040902-DM01.htm#FIXES","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9553","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11106","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17220","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12453","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1011146","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.ipswitch.com/kb/IM-20040902-DM01.htm#FIXES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9553","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11106","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17220","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2424","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a denial of service (network port consumption) via unknown actions in HTTPS sessions, which prevents the server from releasing the network port when the session ends."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*","matchCriteriaId":"ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*","matchCriteriaId":"A3DFE048-905E-4890-809D-F6BCEF7F83C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*","matchCriteriaId":"F7560131-A6AC-4BBB-AA2D-C7C63AB51226"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"D18E22CC-A0FC-4BC7-AD39-2645F57486C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*","matchCriteriaId":"893C2387-03E3-4F8E-9029-BC64C64239EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"D00633D1-4B38-48D9-B5CD-E8D66EA90599"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp3:*:*:*:*:*:*","matchCriteriaId":"9429D939-FCC4-4BA7-90C4-BBEECE7309D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp3:express:*:*:*:*:*","matchCriteriaId":"55661356-58E0-49D3-9C79-B4BB5EBE24CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp3:win32:*:*:*:*:*","matchCriteriaId":"1A1A59C0-31BB-4EE9-90C1-3289C94F690E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp4:*:*:*:*:*:*","matchCriteriaId":"0653ACAC-B0D9-4381-AB23-11D24852A414"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp4:express:*:*:*:*:*","matchCriteriaId":"107C2FC6-BC60-4817-8A21-14C81DA6DEF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp4:win32:*:*:*:*:*","matchCriteriaId":"209CDA09-CAB2-481D-8DA0-161B670335E4"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/7","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11864","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010492","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7076","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10544","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16419","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/7","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16419","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2425","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`) and possibly other shell metacharacters in the query string to virtualinput.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.12:*:*:*:*:*:*:*","matchCriteriaId":"94ABCB8C-8EED-4635-BA54-735CA12A1F64"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"38C70CE1-0116-4C91-AB59-0C0D9F17099B"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"44B1C47A-938B-4F9B-B4B5-88B8622DC965"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"E890E332-7A3B-4B6A-91B3-7FEFAF5DBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.33:*:*:*:*:*:*:*","matchCriteriaId":"4830EAF7-9504-4090-8DDD-6CC6658ABFD4"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"7E26AD96-7BA4-4722-B059-6444FFC2E6D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"E06E7446-34EC-428A-82EE-2E24F2908C97"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.41:*:*:*:*:*:*:*","matchCriteriaId":"8D4996E0-097B-4B79-8A1C-CE55F94B8D29"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.12:*:*:*:*:*:*:*","matchCriteriaId":"0200586F-7F71-47F6-8D2E-F06E1BF418E7"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"F5764F35-7F21-40D0-A3FF-8EEF97F7931D"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"6BE3CF46-91CC-4AFD-B178-48AE90E0E339"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"D79A54BC-789D-4ED2-B3BC-C42959D7FFF7"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"79A8A437-5AF7-448E-9AF8-D8FBA481CFE2"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"5663D3D1-5962-4C43-B689-089EAFE25FD5"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.41:*:*:*:*:*:*:*","matchCriteriaId":"34EDC537-0EFF-46EA-8368-A690480E5D6E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.12:*:*:*:*:*:*:*","matchCriteriaId":"39798220-4621-4C5D-B6A7-6639D02E0C07"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"05EF66A4-F7BB-40C3-9CBF-5DB8715780C9"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"9DCA7249-7F8F-4A2D-B98F-6AA0ECF17D7F"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"0E942419-3272-4267-AF23-4B6071D71277"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"3848A541-4F14-4E3B-99EE-B7C5A886C541"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"34E980E1-62B8-4E37-AE9D-DFE033053620"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.41:*:*:*:*:*:*:*","matchCriteriaId":"730E6E09-C0C8-4F8A-BE07-BFED00FC1235"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2130_ptz_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"693571B9-BADF-4659-95D0-F08BF32F8C0B"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2130_ptz_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"C9A80666-C318-416B-A440-C99DB85739DD"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2130_ptz_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"3198BD36-7585-493D-B767-188F86949046"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2130_ptz_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"4891B49A-2957-4097-A0B9-12808956CDB3"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2130_ptz_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"95849B6C-BA5C-4C47-8AD0-AB41C269FFA4"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:230_mpeg2_video_server:3.11:*:*:*:*:*:*:*","matchCriteriaId":"AC228FC3-3687-4FED-A684-203040EEE884"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"27F906AC-E00B-482E-82FE-1A50F118FDEE"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"540C4514-CC7D-4770-9DA8-8CE667CA00F7"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.10:*:*:*:*:*:*:*","matchCriteriaId":"95FA3628-81A6-4988-8A40-4A0581FDA493"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.11:*:*:*:*:*:*:*","matchCriteriaId":"325D60DE-F689-4F76-ABB5-6065647A826A"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.12:*:*:*:*:*:*:*","matchCriteriaId":"B19EA718-9899-4894-8EF2-E6C085804BFA"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.15:*:*:*:*:*:*:*","matchCriteriaId":"D16DD747-AA9A-4AC4-975C-0927C1637268"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A67DEDC-9269-4510-9F78-587879376A26"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.20:*:*:*:*:*:*:*","matchCriteriaId":"8568E6B0-0016-40CC-BE22-BE3A2CE99C4C"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.30:*:*:*:*:*:*:*","matchCriteriaId":"238B59A2-F9C9-40CB-9700-831FE4B0AF7B"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.31:*:*:*:*:*:*:*","matchCriteriaId":"F0C1C0AD-A638-45FC-ACAE-A7F056887025"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.32:*:*:*:*:*:*:*","matchCriteriaId":"E9F8BD2D-559E-4F01-A97E-AF51C7E61E4D"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.33:*:*:*:*:*:*:*","matchCriteriaId":"B40EB035-544F-4E0E-ADC0-9C63A5B91435"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.34:*:*:*:*:*:*:*","matchCriteriaId":"7626B23F-1DC3-4CDC-A52F-5A1191D6D135"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:3.11:*:*:*:*:*:*:*","matchCriteriaId":"81100E37-1B99-4317-829F-B4A2278FA323"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:3.12:*:*:*:*:*:*:*","matchCriteriaId":"10321B16-1675-4609-8267-3971A9062AF0"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:1.0_1:*:*:*:*:*:*:*","matchCriteriaId":"B011DC65-EE78-49C2-B813-2381A06F6617"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:1.15:*:*:*:*:*:*:*","matchCriteriaId":"AA31BA47-991B-4F8C-881C-09D9C6210DF3"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.20:*:*:*:*:*:*:*","matchCriteriaId":"DEFEB8F2-0E37-450B-8390-5B055E3848F7"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.30:*:*:*:*:*:*:*","matchCriteriaId":"5E5DEA84-37AD-4040-817D-928371236987"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.31:*:*:*:*:*:*:*","matchCriteriaId":"208DC45A-4E9C-4B6E-A984-C598485CB08E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.32:*:*:*:*:*:*:*","matchCriteriaId":"FB14B0A4-F98A-4331-993A-C5CD70F3903F"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.33:*:*:*:*:*:*:*","matchCriteriaId":"B6885E77-4FD0-4C37-ADEC-2A5F8791C161"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.34:*:*:*:*:*:*:*","matchCriteriaId":"E1975F46-53D7-4C80-914C-3E5E85870191"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:3.12:*:*:*:*:*:*:*","matchCriteriaId":"35F0E1BA-D05F-41CB-ACD9-035A6DF4735E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:3.13:*:*:*:*:*:*:*","matchCriteriaId":"77835F00-45F1-49CB-9D34-160F0FE1E3ED"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2411_video_server:3.12:*:*:*:*:*:*:*","matchCriteriaId":"802A9E89-4715-4CB9-A371-5407A7320D13"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2411_video_server:3.13:*:*:*:*:*:*:*","matchCriteriaId":"61B77020-D355-4179-ADEC-B0C59AB86478"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.12:*:*:*:*:*:*:*","matchCriteriaId":"1DD73320-38DA-4606-9CEA-F0C9D5A3215F"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"B8374F1E-06BC-4A9E-8666-336AACC1F5BB"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"DAA3F905-8AC0-42A3-AC63-BA61AE6619AE"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"46E11270-65DE-4C07-A103-66217691069E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.33:*:*:*:*:*:*:*","matchCriteriaId":"7B93D2AD-FA36-4A6C-AC52-6FD0F3AE6A80"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"D109CF38-0F5F-4A20-8A4A-DBE14D7826CD"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"EA6E6FEA-9D2E-4ACD-8C3A-98DA4EB1C994"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.41:*:*:*:*:*:*:*","matchCriteriaId":"10B4A828-33F4-4FB7-9637-3C761A73AEF9"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_video_server:2.32:*:*:*:*:*:*:*","matchCriteriaId":"E9D0B93D-00EC-4C5D-A173-34C28D20BF1A"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_video_server:2.34:*:*:*:*:*:*:*","matchCriteriaId":"43D3B41F-4705-4CCC-BE6F-F7193EB24F64"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2460_network_dvr:*:*:*:*:*:*:*:*","matchCriteriaId":"80523474-5361-464C-9588-6C55EA40E652"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2460_network_dvr:3.10:*:*:*:*:*:*:*","matchCriteriaId":"CFA38241-A7D8-4A73-833E-3DF470624163"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2460_network_dvr:3.11:*:*:*:*:*:*:*","matchCriteriaId":"12B56127-2DC3-4718-96F9-54FF156698BA"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2490_serial_server:*:*:*:*:*:*:*:*","matchCriteriaId":"1B3F1771-AB7A-417C-A996-B0B4E03E8126"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2490_serial_server:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"87C5C780-BBDB-410C-AE9D-4E48EFE0D47F"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:250s_video_server:*:*:*:*:*:*:*:*","matchCriteriaId":"9034743F-699F-40A6-8D53-6631C78281FD"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:250s_video_server:3.03:*:*:*:*:*:*:*","matchCriteriaId":"37949AD3-54DE-4302-98AD-4EBFCF3CBB53"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:250s_video_server:3.10:*:*:*:*:*:*:*","matchCriteriaId":"FF5F2F9D-5D62-42FE-A60A-72C09E06E9DE"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:storpoint_cd:*:*:*:*:*:*:*:*","matchCriteriaId":"7889BD02-DCDE-49F4-B432-DF9EB39C1251"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1282.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12353","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011056","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/9121","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11011","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17076","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1282.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/9121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17076","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2426","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a ..  (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to conduct other activities, such as modifying files using editcgi.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.12:*:*:*:*:*:*:*","matchCriteriaId":"94ABCB8C-8EED-4635-BA54-735CA12A1F64"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"38C70CE1-0116-4C91-AB59-0C0D9F17099B"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"44B1C47A-938B-4F9B-B4B5-88B8622DC965"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"E890E332-7A3B-4B6A-91B3-7FEFAF5DBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.33:*:*:*:*:*:*:*","matchCriteriaId":"4830EAF7-9504-4090-8DDD-6CC6658ABFD4"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"7E26AD96-7BA4-4722-B059-6444FFC2E6D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"E06E7446-34EC-428A-82EE-2E24F2908C97"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.41:*:*:*:*:*:*:*","matchCriteriaId":"8D4996E0-097B-4B79-8A1C-CE55F94B8D29"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.12:*:*:*:*:*:*:*","matchCriteriaId":"0200586F-7F71-47F6-8D2E-F06E1BF418E7"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"F5764F35-7F21-40D0-A3FF-8EEF97F7931D"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"6BE3CF46-91CC-4AFD-B178-48AE90E0E339"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"D79A54BC-789D-4ED2-B3BC-C42959D7FFF7"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"79A8A437-5AF7-448E-9AF8-D8FBA481CFE2"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"5663D3D1-5962-4C43-B689-089EAFE25FD5"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.41:*:*:*:*:*:*:*","matchCriteriaId":"34EDC537-0EFF-46EA-8368-A690480E5D6E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.12:*:*:*:*:*:*:*","matchCriteriaId":"39798220-4621-4C5D-B6A7-6639D02E0C07"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"05EF66A4-F7BB-40C3-9CBF-5DB8715780C9"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"9DCA7249-7F8F-4A2D-B98F-6AA0ECF17D7F"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"0E942419-3272-4267-AF23-4B6071D71277"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"3848A541-4F14-4E3B-99EE-B7C5A886C541"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"34E980E1-62B8-4E37-AE9D-DFE033053620"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.41:*:*:*:*:*:*:*","matchCriteriaId":"730E6E09-C0C8-4F8A-BE07-BFED00FC1235"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2130_ptz_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"693571B9-BADF-4659-95D0-F08BF32F8C0B"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2130_ptz_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"C9A80666-C318-416B-A440-C99DB85739DD"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2130_ptz_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"3198BD36-7585-493D-B767-188F86949046"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2130_ptz_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"4891B49A-2957-4097-A0B9-12808956CDB3"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2130_ptz_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"95849B6C-BA5C-4C47-8AD0-AB41C269FFA4"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:230_mpeg2_video_server:3.11:*:*:*:*:*:*:*","matchCriteriaId":"AC228FC3-3687-4FED-A684-203040EEE884"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"27F906AC-E00B-482E-82FE-1A50F118FDEE"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"540C4514-CC7D-4770-9DA8-8CE667CA00F7"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.10:*:*:*:*:*:*:*","matchCriteriaId":"95FA3628-81A6-4988-8A40-4A0581FDA493"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.11:*:*:*:*:*:*:*","matchCriteriaId":"325D60DE-F689-4F76-ABB5-6065647A826A"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.12:*:*:*:*:*:*:*","matchCriteriaId":"B19EA718-9899-4894-8EF2-E6C085804BFA"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.15:*:*:*:*:*:*:*","matchCriteriaId":"D16DD747-AA9A-4AC4-975C-0927C1637268"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A67DEDC-9269-4510-9F78-587879376A26"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.20:*:*:*:*:*:*:*","matchCriteriaId":"8568E6B0-0016-40CC-BE22-BE3A2CE99C4C"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.30:*:*:*:*:*:*:*","matchCriteriaId":"238B59A2-F9C9-40CB-9700-831FE4B0AF7B"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.31:*:*:*:*:*:*:*","matchCriteriaId":"F0C1C0AD-A638-45FC-ACAE-A7F056887025"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.32:*:*:*:*:*:*:*","matchCriteriaId":"E9F8BD2D-559E-4F01-A97E-AF51C7E61E4D"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.33:*:*:*:*:*:*:*","matchCriteriaId":"B40EB035-544F-4E0E-ADC0-9C63A5B91435"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.34:*:*:*:*:*:*:*","matchCriteriaId":"7626B23F-1DC3-4CDC-A52F-5A1191D6D135"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:3.11:*:*:*:*:*:*:*","matchCriteriaId":"81100E37-1B99-4317-829F-B4A2278FA323"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:3.12:*:*:*:*:*:*:*","matchCriteriaId":"10321B16-1675-4609-8267-3971A9062AF0"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:1.0_1:*:*:*:*:*:*:*","matchCriteriaId":"B011DC65-EE78-49C2-B813-2381A06F6617"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:1.15:*:*:*:*:*:*:*","matchCriteriaId":"AA31BA47-991B-4F8C-881C-09D9C6210DF3"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.20:*:*:*:*:*:*:*","matchCriteriaId":"DEFEB8F2-0E37-450B-8390-5B055E3848F7"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.30:*:*:*:*:*:*:*","matchCriteriaId":"5E5DEA84-37AD-4040-817D-928371236987"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.31:*:*:*:*:*:*:*","matchCriteriaId":"208DC45A-4E9C-4B6E-A984-C598485CB08E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.32:*:*:*:*:*:*:*","matchCriteriaId":"FB14B0A4-F98A-4331-993A-C5CD70F3903F"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.33:*:*:*:*:*:*:*","matchCriteriaId":"B6885E77-4FD0-4C37-ADEC-2A5F8791C161"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.34:*:*:*:*:*:*:*","matchCriteriaId":"E1975F46-53D7-4C80-914C-3E5E85870191"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:3.12:*:*:*:*:*:*:*","matchCriteriaId":"35F0E1BA-D05F-41CB-ACD9-035A6DF4735E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:3.13:*:*:*:*:*:*:*","matchCriteriaId":"77835F00-45F1-49CB-9D34-160F0FE1E3ED"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2411_video_server:3.12:*:*:*:*:*:*:*","matchCriteriaId":"802A9E89-4715-4CB9-A371-5407A7320D13"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2411_video_server:3.13:*:*:*:*:*:*:*","matchCriteriaId":"61B77020-D355-4179-ADEC-B0C59AB86478"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.12:*:*:*:*:*:*:*","matchCriteriaId":"1DD73320-38DA-4606-9CEA-F0C9D5A3215F"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"B8374F1E-06BC-4A9E-8666-336AACC1F5BB"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"DAA3F905-8AC0-42A3-AC63-BA61AE6619AE"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"46E11270-65DE-4C07-A103-66217691069E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.33:*:*:*:*:*:*:*","matchCriteriaId":"7B93D2AD-FA36-4A6C-AC52-6FD0F3AE6A80"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"D109CF38-0F5F-4A20-8A4A-DBE14D7826CD"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"EA6E6FEA-9D2E-4ACD-8C3A-98DA4EB1C994"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.41:*:*:*:*:*:*:*","matchCriteriaId":"10B4A828-33F4-4FB7-9637-3C761A73AEF9"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_video_server:2.32:*:*:*:*:*:*:*","matchCriteriaId":"E9D0B93D-00EC-4C5D-A173-34C28D20BF1A"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_video_server:2.34:*:*:*:*:*:*:*","matchCriteriaId":"43D3B41F-4705-4CCC-BE6F-F7193EB24F64"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2460_network_dvr:*:*:*:*:*:*:*:*","matchCriteriaId":"80523474-5361-464C-9588-6C55EA40E652"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2460_network_dvr:3.10:*:*:*:*:*:*:*","matchCriteriaId":"CFA38241-A7D8-4A73-833E-3DF470624163"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2460_network_dvr:3.11:*:*:*:*:*:*:*","matchCriteriaId":"12B56127-2DC3-4718-96F9-54FF156698BA"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2490_serial_server:*:*:*:*:*:*:*:*","matchCriteriaId":"1B3F1771-AB7A-417C-A996-B0B4E03E8126"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2490_serial_server:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"87C5C780-BBDB-410C-AE9D-4E48EFE0D47F"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:250s_video_server:*:*:*:*:*:*:*:*","matchCriteriaId":"9034743F-699F-40A6-8D53-6631C78281FD"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:250s_video_server:3.03:*:*:*:*:*:*:*","matchCriteriaId":"37949AD3-54DE-4302-98AD-4EBFCF3CBB53"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:250s_video_server:3.10:*:*:*:*:*:*:*","matchCriteriaId":"FF5F2F9D-5D62-42FE-A60A-72C09E06E9DE"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:storpoint_cd:*:*:*:*:*:*:*:*","matchCriteriaId":"7889BD02-DCDE-49F4-B432-DF9EB39C1251"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1282.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12353","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011056","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/9122","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11011","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17079","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1282.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/9122","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11011","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17079","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2427","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2) admin/systemlog.cgi, (3) admin/serverreport.cgi, and (4) admin/paramlist.cgi, modify system information via (5) setparam.cgi and (6) factorydefault.cgi, or (7) cause a denial of service (reboot) via restart.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.12:*:*:*:*:*:*:*","matchCriteriaId":"94ABCB8C-8EED-4635-BA54-735CA12A1F64"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"38C70CE1-0116-4C91-AB59-0C0D9F17099B"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"44B1C47A-938B-4F9B-B4B5-88B8622DC965"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"E890E332-7A3B-4B6A-91B3-7FEFAF5DBA6E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.33:*:*:*:*:*:*:*","matchCriteriaId":"4830EAF7-9504-4090-8DDD-6CC6658ABFD4"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"7E26AD96-7BA4-4722-B059-6444FFC2E6D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"E06E7446-34EC-428A-82EE-2E24F2908C97"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2100_network_camera:2.41:*:*:*:*:*:*:*","matchCriteriaId":"8D4996E0-097B-4B79-8A1C-CE55F94B8D29"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.12:*:*:*:*:*:*:*","matchCriteriaId":"0200586F-7F71-47F6-8D2E-F06E1BF418E7"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"F5764F35-7F21-40D0-A3FF-8EEF97F7931D"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"6BE3CF46-91CC-4AFD-B178-48AE90E0E339"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"D79A54BC-789D-4ED2-B3BC-C42959D7FFF7"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"79A8A437-5AF7-448E-9AF8-D8FBA481CFE2"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"5663D3D1-5962-4C43-B689-089EAFE25FD5"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2110_network_camera:2.41:*:*:*:*:*:*:*","matchCriteriaId":"34EDC537-0EFF-46EA-8368-A690480E5D6E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.12:*:*:*:*:*:*:*","matchCriteriaId":"39798220-4621-4C5D-B6A7-6639D02E0C07"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"05EF66A4-F7BB-40C3-9CBF-5DB8715780C9"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"9DCA7249-7F8F-4A2D-B98F-6AA0ECF17D7F"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"0E942419-3272-4267-AF23-4B6071D71277"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"3848A541-4F14-4E3B-99EE-B7C5A886C541"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"34E980E1-62B8-4E37-AE9D-DFE033053620"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2120_network_camera:2.41:*:*:*:*:*:*:*","matchCriteriaId":"730E6E09-C0C8-4F8A-BE07-BFED00FC1235"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2130_ptz_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"693571B9-BADF-4659-95D0-F08BF32F8C0B"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2130_ptz_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"C9A80666-C318-416B-A440-C99DB85739DD"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2130_ptz_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"3198BD36-7585-493D-B767-188F86949046"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2130_ptz_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"4891B49A-2957-4097-A0B9-12808956CDB3"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2130_ptz_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"95849B6C-BA5C-4C47-8AD0-AB41C269FFA4"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:230_mpeg2_video_server:3.11:*:*:*:*:*:*:*","matchCriteriaId":"AC228FC3-3687-4FED-A684-203040EEE884"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.1:*:*:*:*:*:*:*","matchCriteriaId":"27F906AC-E00B-482E-82FE-1A50F118FDEE"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"540C4514-CC7D-4770-9DA8-8CE667CA00F7"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.10:*:*:*:*:*:*:*","matchCriteriaId":"95FA3628-81A6-4988-8A40-4A0581FDA493"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.11:*:*:*:*:*:*:*","matchCriteriaId":"325D60DE-F689-4F76-ABB5-6065647A826A"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.12:*:*:*:*:*:*:*","matchCriteriaId":"B19EA718-9899-4894-8EF2-E6C085804BFA"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:1.15:*:*:*:*:*:*:*","matchCriteriaId":"D16DD747-AA9A-4AC4-975C-0927C1637268"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"8A67DEDC-9269-4510-9F78-587879376A26"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.20:*:*:*:*:*:*:*","matchCriteriaId":"8568E6B0-0016-40CC-BE22-BE3A2CE99C4C"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.30:*:*:*:*:*:*:*","matchCriteriaId":"238B59A2-F9C9-40CB-9700-831FE4B0AF7B"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.31:*:*:*:*:*:*:*","matchCriteriaId":"F0C1C0AD-A638-45FC-ACAE-A7F056887025"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.32:*:*:*:*:*:*:*","matchCriteriaId":"E9F8BD2D-559E-4F01-A97E-AF51C7E61E4D"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.33:*:*:*:*:*:*:*","matchCriteriaId":"B40EB035-544F-4E0E-ADC0-9C63A5B91435"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:2.34:*:*:*:*:*:*:*","matchCriteriaId":"7626B23F-1DC3-4CDC-A52F-5A1191D6D135"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:3.11:*:*:*:*:*:*:*","matchCriteriaId":"81100E37-1B99-4317-829F-B4A2278FA323"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2400_video_server:3.12:*:*:*:*:*:*:*","matchCriteriaId":"10321B16-1675-4609-8267-3971A9062AF0"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:1.0_1:*:*:*:*:*:*:*","matchCriteriaId":"B011DC65-EE78-49C2-B813-2381A06F6617"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:1.15:*:*:*:*:*:*:*","matchCriteriaId":"AA31BA47-991B-4F8C-881C-09D9C6210DF3"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.20:*:*:*:*:*:*:*","matchCriteriaId":"DEFEB8F2-0E37-450B-8390-5B055E3848F7"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.30:*:*:*:*:*:*:*","matchCriteriaId":"5E5DEA84-37AD-4040-817D-928371236987"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.31:*:*:*:*:*:*:*","matchCriteriaId":"208DC45A-4E9C-4B6E-A984-C598485CB08E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.32:*:*:*:*:*:*:*","matchCriteriaId":"FB14B0A4-F98A-4331-993A-C5CD70F3903F"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.33:*:*:*:*:*:*:*","matchCriteriaId":"B6885E77-4FD0-4C37-ADEC-2A5F8791C161"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:2.34:*:*:*:*:*:*:*","matchCriteriaId":"E1975F46-53D7-4C80-914C-3E5E85870191"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:3.12:*:*:*:*:*:*:*","matchCriteriaId":"35F0E1BA-D05F-41CB-ACD9-035A6DF4735E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2401_video_server:3.13:*:*:*:*:*:*:*","matchCriteriaId":"77835F00-45F1-49CB-9D34-160F0FE1E3ED"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2411_video_server:3.12:*:*:*:*:*:*:*","matchCriteriaId":"802A9E89-4715-4CB9-A371-5407A7320D13"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2411_video_server:3.13:*:*:*:*:*:*:*","matchCriteriaId":"61B77020-D355-4179-ADEC-B0C59AB86478"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.12:*:*:*:*:*:*:*","matchCriteriaId":"1DD73320-38DA-4606-9CEA-F0C9D5A3215F"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.30:*:*:*:*:*:*:*","matchCriteriaId":"B8374F1E-06BC-4A9E-8666-336AACC1F5BB"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.31:*:*:*:*:*:*:*","matchCriteriaId":"DAA3F905-8AC0-42A3-AC63-BA61AE6619AE"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.32:*:*:*:*:*:*:*","matchCriteriaId":"46E11270-65DE-4C07-A103-66217691069E"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.33:*:*:*:*:*:*:*","matchCriteriaId":"7B93D2AD-FA36-4A6C-AC52-6FD0F3AE6A80"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.34:*:*:*:*:*:*:*","matchCriteriaId":"D109CF38-0F5F-4A20-8A4A-DBE14D7826CD"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.40:*:*:*:*:*:*:*","matchCriteriaId":"EA6E6FEA-9D2E-4ACD-8C3A-98DA4EB1C994"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_network_camera:2.41:*:*:*:*:*:*:*","matchCriteriaId":"10B4A828-33F4-4FB7-9637-3C761A73AEF9"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_video_server:2.32:*:*:*:*:*:*:*","matchCriteriaId":"E9D0B93D-00EC-4C5D-A173-34C28D20BF1A"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2420_video_server:2.34:*:*:*:*:*:*:*","matchCriteriaId":"43D3B41F-4705-4CCC-BE6F-F7193EB24F64"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2460_network_dvr:*:*:*:*:*:*:*:*","matchCriteriaId":"80523474-5361-464C-9588-6C55EA40E652"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2460_network_dvr:3.10:*:*:*:*:*:*:*","matchCriteriaId":"CFA38241-A7D8-4A73-833E-3DF470624163"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2460_network_dvr:3.11:*:*:*:*:*:*:*","matchCriteriaId":"12B56127-2DC3-4718-96F9-54FF156698BA"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2490_serial_server:*:*:*:*:*:*:*:*","matchCriteriaId":"1B3F1771-AB7A-417C-A996-B0B4E03E8126"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:2490_serial_server:2.11.3:*:*:*:*:*:*:*","matchCriteriaId":"87C5C780-BBDB-410C-AE9D-4E48EFE0D47F"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:250s_video_server:*:*:*:*:*:*:*:*","matchCriteriaId":"9034743F-699F-40A6-8D53-6631C78281FD"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:250s_video_server:3.03:*:*:*:*:*:*:*","matchCriteriaId":"37949AD3-54DE-4302-98AD-4EBFCF3CBB53"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:250s_video_server:3.10:*:*:*:*:*:*:*","matchCriteriaId":"FF5F2F9D-5D62-42FE-A60A-72C09E06E9DE"},{"vulnerable":true,"criteria":"cpe:2.3:h:axis:storpoint_cd:*:*:*:*:*:*:*:*","matchCriteriaId":"7889BD02-DCDE-49F4-B432-DF9EB39C1251"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1011056","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/9123","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9125","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9126","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9127","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9128","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9129","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9130","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1011056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/9123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9125","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9126","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9127","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9129","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9130","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2428","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Abczone.it WWWguestbook 1.1 stores db/dbase.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the plaintext username and password."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:abczone.it:wwwguestbook:1.1:*:*:*:*:*:*:*","matchCriteriaId":"8311E449-F285-429D-A316-58AF08C5BE34"}]}]}],"references":[{"url":"http://securitytracker.com/id?1011026","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/9159","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17077","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011026","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/9159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17077","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2429","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based and heap-based buffer overflows in EnderUNIX spamGuard before 1.7-BETA allow remote attackers to execute arbitrary code via the (1) qmail_parseline and (2) sendmail_parseline functions in parser.c, (3) loadconfig and (4) removespaces functions in loadconfig.c, and possibly (5) unspecified functions in functions.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:enderunix_software:spamguard:1.6:*:*:*:*:*:*:*","matchCriteriaId":"108A3D8E-505C-4472-BA7F-C85B426C6487"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0298.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11747","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1010342","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.enderunix.org/spamguard/spamguard-1.7/CHANGELOG","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6521","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/6522","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/6523","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10434","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16278","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0298.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11747","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1010342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.enderunix.org/spamguard/spamguard-1.7/CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6521","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/6522","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/6523","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10434","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2430","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a virus detection pop-up window, which allows local users to gain SYSTEM privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:3.0:*:corporate:*:*:*:*:*","matchCriteriaId":"4013BF7E-DE8F-4941-BF15-D17C8C88DB78"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_3.5:*:*:*:*:*:*:*","matchCriteriaId":"BE60F5D9-35D0-4D0E-85D1-EE71E533622F"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_3.11:*:*:*:*:*:*:*","matchCriteriaId":"BF74A292-2B1B-43FC-AA82-CFB04D7644E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_3.13:*:*:*:*:*:*:*","matchCriteriaId":"46575AE8-8718-44D8-AF5C-14F7981B3238"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_3.54:*:*:*:*:*:*:*","matchCriteriaId":"A79FBAAA-D6B8-4A05-B8E1-D7549207EA5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_5.02:*:*:*:*:*:*:*","matchCriteriaId":"D6CE3BB4-54BA-48DE-9CFC-C2241D99DA67"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_5.5:*:*:*:*:*:*:*","matchCriteriaId":"E6F25D89-826B-4FA0-AA8F-CD729F00F9BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:officescan:corporate_5.58:*:*:*:*:*:*:*","matchCriteriaId":"BEE87037-D7CC-480B-BBD2-F1802294D4F2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0117.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11806","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://uk.trendmicro-europe.com/enterprise/support/knowledge_base_detail.php?solutionId=20118","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/6840","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10503","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16375","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11806","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://uk.trendmicro-europe.com/enterprise/support/knowledge_base_detail.php?solutionId=20118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/6840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16375","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2431","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in The Ignition Project ignitionServer 0.1.2 through 0.3.1, with the linking service enabled, allows remote attackers to bypass authentication."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the_ignition_project:ignitionserver:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"641C594E-35BC-4F2F-9E15-3D62FE8FCBD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_ignition_project:ignitionserver:0.1.2_r2:*:*:*:*:*:*:*","matchCriteriaId":"1D702B7D-19E6-49D9-8E0E-267811688DF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_ignition_project:ignitionserver:0.2.1_brc1:*:*:*:*:*:*:*","matchCriteriaId":"88BB7F7A-5BCD-407D-BA61-07F19AB6F570"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_ignition_project:ignitionserver:0.2.2_brc2:*:*:*:*:*:*:*","matchCriteriaId":"92B91D39-7505-4F07-A225-437E0273B645"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_ignition_project:ignitionserver:0.2.3_brc3:*:*:*:*:*:*:*","matchCriteriaId":"AC15E8DB-8FA1-4A14-8CC3-90C41924293C"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_ignition_project:ignitionserver:0.3.1_b1:*:*:*:*:*:*:*","matchCriteriaId":"58A3AE05-FCDC-499D-A8EF-FF06D7DBDAD1"}]}]}],"references":[{"url":"http://secunia.com/advisories/11824","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=381807","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6844","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10525","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16397","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=381807","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6844","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2432","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service (crash) via a request for a file with a long file name, possibly due to an off-by-one buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:winagents:tftp_server:3.0:*:*:*:*:*:*:*","matchCriteriaId":"700E5B9D-8B69-40B5-B4D9-C0057D1C86A1"}]}]}],"references":[{"url":"http://secunia.com/advisories/11840","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010464","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/6848","source":"cve@mitre.org"},{"url":"http://www.packetstormsecurity.org/0406-exploits/WinAgentsTFTP.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10526","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16390","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11840","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010464","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/6848","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.packetstormsecurity.org/0406-exploits/WinAgentsTFTP.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16390","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2433","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the IsValidFile function in the ADM ActiveX control for Altnet Download Manager 4.0.0.4 and earlier, as used in Kazaa Media Desktop 1.3 through 2.6.4 and Grokkster 1.3 through 2.6, allows remote attackers to execute arbitrary code via a long bstrFilepath parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:altnet:altnet_download_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"4.0.0.2","matchCriteriaId":"75C2B3F2-8F95-4AFC-BED3-72538B93B65C"},{"vulnerable":true,"criteria":"cpe:2.3:a:altnet:altnet_download_manager:4.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"73D95E65-AC32-4798-B085-B93CA4090580"},{"vulnerable":true,"criteria":"cpe:2.3:a:grokster:grokster:1.3:*:*:*:*:*:*:*","matchCriteriaId":"1A111C90-0690-4959-A5A1-90DD92A29B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:grokster:grokster:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"6C612287-28B4-4076-9996-1612664A1197"},{"vulnerable":true,"criteria":"cpe:2.3:a:grokster:grokster:2.6:*:*:*:*:*:*:*","matchCriteriaId":"20D815ED-F040-435D-A7C6-5433FCC1A98C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kazaa:kazaa_media_desktop:1.3:*:*:*:*:*:*:*","matchCriteriaId":"F6E0C9C3-7F98-4590-B225-456BDBFD3466"},{"vulnerable":true,"criteria":"cpe:2.3:a:kazaa:kazaa_media_desktop:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"327046D3-608E-4A9C-82E7-E47074BC9572"},{"vulnerable":true,"criteria":"cpe:2.3:a:kazaa:kazaa_media_desktop:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"19F0B88D-8FAD-4CD8-8926-F3C8C7C1B322"},{"vulnerable":true,"criteria":"cpe:2.3:a:kazaa:kazaa_media_desktop:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"57925D3F-644E-4229-9F03-3B6A8A5872DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:kazaa:kazaa_media_desktop:2.0:*:*:*:*:*:*:*","matchCriteriaId":"DBE19276-D3E7-43D3-BC3E-E10F8F18028C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kazaa:kazaa_media_desktop:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"12492408-782C-4D32-8077-E2B22F987EF9"},{"vulnerable":true,"criteria":"cpe:2.3:a:kazaa:kazaa_media_desktop:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"FAFB7CFA-CD2E-4193-A1E7-43453AB7B619"}]}]}],"references":[{"url":"http://secunia.com/advisories/12446","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12456","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011155","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9549","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11101","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17221","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12446","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12456","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011155","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9549","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17221","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2434","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link with \"::{\" (colon colon left brace), which triggers a null dereference when the user attempts to save the link using \"Save As\" and Internet Explorer prepares an error message with an attacker-controlled format string."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*","matchCriteriaId":"24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0397.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0428.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1126.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010491","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/8335","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securiteam.com/windowsntfocus/5IP020KDPU.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16420","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0397.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0428.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1126.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/8335","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securiteam.com/windowsntfocus/5IP020KDPU.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16420","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2435","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when \"web enabled\" using HTML Access, allows remote attackers to inject arbitrary web script or HTML via unspecified (1) debugging or (2) utility scripts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peoplesoft:hrms:7.0:*:*:*:*:*:*:*","matchCriteriaId":"10827693-6DF1-4CEA-BB8E-840E73428C8D"}]}]}],"references":[{"url":"http://secunia.com/advisories/12674/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4419","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11275","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/Sep/1011433.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17543","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12674/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.auscert.org.au/render.html?it=4419","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/alerts/2004/Sep/1011433.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17543","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2436","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Computer Associates Unicenter Common Services 3.0 and earlier stores the database \"SA\" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:common_services:1.0:*:*:*:*:*:*:*","matchCriteriaId":"3A0DD264-59A8-4B76-8D7F-138AEA7B1912"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:common_services:1.1:*:*:*:*:*:*:*","matchCriteriaId":"062DB370-929D-4FE1-A925-2FB5706C9409"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:common_services:2.0:*:*:*:*:*:*:*","matchCriteriaId":"0D7957A4-D763-488F-B2B1-E00F428AD1AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:common_services:2.1:*:*:*:*:*:*:*","matchCriteriaId":"6F5A6578-902D-4D9F-AB19-C6484E878CEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:common_services:2.2:*:*:*:*:*:*:*","matchCriteriaId":"E2E79928-E5E2-42E5-9E09-58ADF9E76A74"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:common_services:3.0:*:*:*:*:*:*:*","matchCriteriaId":"D7587982-C722-4754-8744-8C7D43E191B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:*","matchCriteriaId":"CE9C8A1C-0A55-4CA5-9BB6-2D03EFCFE699"},{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:unicenter_serviceplus_service_desk:6.0:*:*:*:*:*:*:*","matchCriteriaId":"D8FDCBBD-81F0-4B13-8D29-624ABEE86341"}]}]}],"references":[{"url":"http://osvdb.org/displayvuln.php?osvdb_id=10408","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12639/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011468","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11277","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17562","source":"cve@mitre.org"},{"url":"http://osvdb.org/displayvuln.php?osvdb_id=10408","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12639/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011468","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11277","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17562","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2437","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter to (1) index.php or (2) members.php, or (3) the comment_id parameter to comments.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_fusion:php_fusion:4.01:*:*:*:*:*:*:*","matchCriteriaId":"FD0EDB22-A7E0-44C0-903C-02EE07BC9675"}]}]}],"references":[{"url":"http://secunia.com/advisories/12686/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/10437","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10438","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11296","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17546","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12686/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/10437","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2438","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HTML via the (1) Submit News, (2) Submit Link or (3) Submit Article field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_fusion:php_fusion:4.01:*:*:*:*:*:*:*","matchCriteriaId":"FD0EDB22-A7E0-44C0-903C-02EE07BC9675"}]}]}],"references":[{"url":"http://secunia.com/advisories/12686/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/10439","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11296","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17548","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12686/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/10439","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11296","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17548","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2439","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet:4650:*:*:*:*:*:*:*","matchCriteriaId":"B57D6094-1DCC-46A7-AA67-A4EC5B6F99C0"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet:5500:*:*:*:*:*:*:*","matchCriteriaId":"2ED3A1B7-F788-4E4A-80F1-1C56DEB0F434"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet:5550:*:*:*:*:*:*:*","matchCriteriaId":"AF8F25AF-9175-4F14-AD4D-693BBFCBFA93"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:color_laserjet_4600:*:*:*:*:*:*:*:*","matchCriteriaId":"A6A133B7-AEA8-4F26-8632-2CEDE9EBB66E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_2500:*:*:*:*:*:*:*:*","matchCriteriaId":"71F75D41-DFB3-4FD2-A883-BBA8964D84D5"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_3000:*:*:*:*:*:*:*:*","matchCriteriaId":"4042B85B-8BA8-49C8-8C72-ED4B12D10C0F"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_3700:*:*:*:*:*:*:*:*","matchCriteriaId":"17CE1760-B9BD-4002-BA5C-0AFC4A2FBFE5"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4100_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"FE20791A-6CDA-46D0-8149-82F7D21662BB"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4200:*:*:*:*:*:*:*:*","matchCriteriaId":"4993667F-9DE8-4DC9-90B1-A6D3AB6BFB0A"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_4300:*:*:*:*:*:*:*:*","matchCriteriaId":"3B4B141B-3358-469D-8331-88C5924763EC"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9000:*:*:*:*:*:*:*:*","matchCriteriaId":"54C64CAE-6CC4-4B92-9364-F982CDF47F99"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9000_mfp:*:*:*:*:*:*:*:*","matchCriteriaId":"5F0E00FE-F3DB-45C2-81AE-D7189559BD42"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9040_mpf:*:*:*:*:*:*:*:*","matchCriteriaId":"F2CA8D60-093D-48C7-AB10-2882F11059DE"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9050:*:*:*:*:*:*:*:*","matchCriteriaId":"6F1FEDCF-C604-49B3-B748-03BE3193792E"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9050_mpf:*:*:*:*:*:*:*:*","matchCriteriaId":"CEF03F46-4DD9-4E99-B86D-133922AC2A09"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9055:*:*:*:*:*:*:*:*","matchCriteriaId":"7381DEDB-71A9-4882-B9DA-AFDC31D907C7"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9065:*:*:*:*:*:*:*:*","matchCriteriaId":"F48F4812-7441-428B-B44A-E85AC64330D7"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9500:*:*:*:*:*:*:*:*","matchCriteriaId":"9755F699-E5F7-424C-B84A-119E19A1E413"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:laserjet_9500_mpf:*:*:*:*:*:*:*:*","matchCriteriaId":"DAA4E793-61D3-4D40-8245-B6BFED4109A6"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBPI01085","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011671","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11297","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17634","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBPI01085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11297","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17634","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2440","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or password) of other users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:proxytunnel:proxytunnel:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"D613C214-F43A-49C7-BBB8-90C223C5B82A"},{"vulnerable":true,"criteria":"cpe:2.3:a:proxytunnel:proxytunnel:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"C722D705-A9AE-4AA0-A104-A3317087DD88"}]}]}],"references":[{"url":"http://secunia.com/advisories/12685/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011486","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=271699","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11299","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17566","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12685/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=271699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11299","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17566","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2441","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, related to a \"potential security issue.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EC515E75-119E-4CB9-985E-00E6A9349178"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"937A6092-48C9-4721-B069-0B46D3520E36"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:kerio_mailserver:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"F38A0AAC-ACA8-44D3-B36A-741D01BE166F"}]}]}],"references":[{"url":"http://secunia.com/advisories/12702/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kerio.com/kms_history.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11300","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17601","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12702/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kerio.com/kms_history.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17601","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2442","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux Servers and Gateways 4.61 and earlier, and other products, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on the target system."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_gateways:*:*:*:*:*","matchCriteriaId":"6CC9AA17-3EF4-4BC5-9E29-5A6525B9AC51"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_servers:*:*:*:*:*","matchCriteriaId":"A9C60C23-FC4D-4D14-B3E3-ECD797888AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.51:*:linux_workstations:*:*:*:*:*","matchCriteriaId":"D04E2381-68CB-455F-8878-17C8E4112C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_gateways:*:*:*:*:*","matchCriteriaId":"4AE00A20-8152-48D9-9AC4-EA359284E635"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_servers:*:*:*:*:*","matchCriteriaId":"6B334073-9FF3-4F75-8702-51DB6937B7F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.52:*:linux_workstations:*:*:*:*:*","matchCriteriaId":"2D553EF0-6A08-4DD0-A301-99AADAFBFFBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.60:*:samba_servers:*:*:*:*:*","matchCriteriaId":"C8C41338-0651-425E-A823-C8CBD91977D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.61:*:linux_gateways:*:*:*:*:*","matchCriteriaId":"5A277838-B3AE-45E4-9E1D-005F63FB7573"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:4.61:*:linux_servers:*:*:*:*:*","matchCriteriaId":"33C62796-C9C0-485E-A58B-6510AFA80F33"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.0:*:linux_client_security:*:*:*:*:*","matchCriteriaId":"016877EA-FBDE-4E49-8077-CFFCFB8E7DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.0:*:linux_server_security:*:*:*:*:*","matchCriteriaId":"8CFC86C0-2E3E-4057-808C-358B4B0463F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:client_security:*:*:*:*:*","matchCriteriaId":"46F72328-7B69-4A1B-A065-E65544F27A75"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:mimesweeper:*:*:*:*:*","matchCriteriaId":"A8B5F6AF-561B-45B4-8087-D637FAB9E877"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.5:*:windows_servers:*:*:*:*:*","matchCriteriaId":"B7D558FE-0C41-4FC1-AF94-2CDE69FF8CD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:mimesweeper:*:*:*:*:*","matchCriteriaId":"2BA28970-0DB9-433E-83A1-36BF05DB062A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:windows_servers:*:*:*:*:*","matchCriteriaId":"C0D25A1D-2B31-4B29-96FE-A793F8244F66"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.41:*:workstations:*:*:*:*:*","matchCriteriaId":"AC90ADFD-32FE-4EA1-9583-5EFE585152CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:mimesweeper:*:*:*:*:*","matchCriteriaId":"B490FC59-616A-4F90-95D8-50F9C0D6CB40"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:windows_servers:*:*:*:*:*","matchCriteriaId":"858468E0-4208-4703-A3AA-4BF6CC254DDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.42:*:workstations:*:*:*:*:*","matchCriteriaId":"4E26052D-35B8-44E7-8F66-442BA55F4483"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.43:*:workstations:*:*:*:*:*","matchCriteriaId":"352EE11B-2385-4359-BEA1-706FEA3E9D9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.52:*:client_security:*:*:*:*:*","matchCriteriaId":"CBA4A9B7-626A-4539-852F-96C49D860E41"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:5.55:*:client_security:*:*:*:*:*","matchCriteriaId":"94B734B9-4D8C-4195-AA01-83DDEC535BC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:6.01:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"1171FFA9-4898-4174-AD17-C6E47A120585"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:6.2:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"4401535F-9AC5-4419-A6B6-9A877887A3D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:6.21:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"19828867-7079-4233-A3B8-BF7A3052FB8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:6.30:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"97610DB9-0379-4EB3-95E6-9B5C21E5A6E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:6.30_sr1:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"5777A2C3-5EB0-495E-8E0E-94BCA86D5E4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:6.31:*:ms_exchange:*:*:*:*:*","matchCriteriaId":"2D43D811-F305-4709-9C43-862A7FC783B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2004:*:*:*:*:*:*:*","matchCriteriaId":"7F996B07-8B07-42A6-86FC-B5B55F708861"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_anti-virus:2005:*:*:*:*:*:*:*","matchCriteriaId":"7C2C1784-2482-4CBE-BE6D-4519C3FB64BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_for_firewalls:6.20:*:*:*:*:*:*:*","matchCriteriaId":"119D5A71-E7C2-4603-9D78-A161D82BC2D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2004:*:*:*:*:*:*:*","matchCriteriaId":"0429B86A-F228-44E8-ABBB-D57BEE3679F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_internet_security:2005:*:*:*:*:*:*:*","matchCriteriaId":"89A0FDD3-3364-4452-BD6F-EB6F85D3119A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_personal_express:4.5:*:*:*:*:*:*:*","matchCriteriaId":"72DE7015-C1FF-4803-8B28-5AF5ECC3AAB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_personal_express:4.6:*:*:*:*:*:*:*","matchCriteriaId":"D04F7296-3290-40D1-9CFB-E52FADAE5719"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_personal_express:4.7:*:*:*:*:*:*:*","matchCriteriaId":"B9A0DDB6-4B86-430E-879A-C835DBB96C42"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:f-secure_personal_express:5.0:*:*:*:*:*:*:*","matchCriteriaId":"FA95C918-917F-4A49-822C-487A07E6F91E"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:2.6:*:linux:*:*:*:*:*","matchCriteriaId":"CC709820-939F-438A-8CAD-A9D4E192C332"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.3:*:*:*:*:*:*:*","matchCriteriaId":"4F4EC2BB-A979-4C37-B8BB-086DAEEB4A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.4:*:*:*:*:*:*:*","matchCriteriaId":"CD53E1BC-6A92-4D7C-BE1F-FEF88F78DBD4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.31:*:*:*:*:*:*:*","matchCriteriaId":"AC782BFC-6BA0-4823-8A6D-F7D83F55393C"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.32:*:*:*:*:*:*:*","matchCriteriaId":"E1B09025-47B9-4F77-9DA6-80885E9A4EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:f-secure:internet_gatekeeper:6.41:*:*:*:*:*:*:*","matchCriteriaId":"05453A15-69B7-40AD-B14E-D00432DC4344"}]}]}],"references":[{"url":"http://secunia.com/advisories/13263/","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/p-041.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.f-secure.com/security/fsc-2004-3.shtml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/968818","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11732","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18217","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13263/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/p-041.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.f-secure.com/security/fsc-2004-3.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/968818","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/11732","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18217","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2443","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the logged_on function in application.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jaws:jaws:0.2:*:*:*:*:*:*:*","matchCriteriaId":"CA6406F9-BE2A-4127-B5CC-D2BFE56212B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jaws:jaws:0.3:*:*:*:*:*:*:*","matchCriteriaId":"15BFB2A5-78DF-40AE-B0DD-C79D5052C642"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0226.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010651","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/7724","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10670","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16622","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0226.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/7724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10670","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16622","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2444","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web script or HTML via the action parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jaws:jaws:0.3:*:*:*:*:*:*:*","matchCriteriaId":"15BFB2A5-78DF-40AE-B0DD-C79D5052C642"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0226.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010651","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7723","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/10670","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16621","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0226.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7723","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/10670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2445","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .. (dot dot) in the gadget parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jaws:jaws:0.3_beta:*:*:*:*:*:*:*","matchCriteriaId":"5D226B5F-822D-4D09-9759-0952DC35D05E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0226.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010651","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7722","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10670","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16620","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0226.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010651","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7722","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10670","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16620","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2446","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read arbitrary files via a \"..\" (dot dot) sequences in unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:1st_class_internet_solutions:1st_class_mail_server:4.01:*:*:*:*:*:*:*","matchCriteriaId":"FFB392CA-4ACF-4CF3-9750-D9D283E239C0"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/1st%20Class%20mail%20server%204.01.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11330","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Apr/1009705.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5011","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10089","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15812","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/1st%20Class%20mail%20server%204.01.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Apr/1009705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/5011","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10089","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15812","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2447","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to (1) viewmail.tagz, (2) the index script under /user/, (3) members.tagz, (4) general.tagz, (5) advanced.tagz, or (6) list.tagz."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:1st_class_internet_solutions:1st_class_mail_server:4.01:*:*:*:*:*:*:*","matchCriteriaId":"FFB392CA-4ACF-4CF3-9750-D9D283E239C0"}]}]}],"references":[{"url":"http://secunia.com/advisories/11330","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Apr/1009705.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5012","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/5013","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/5014","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/5015","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/5016","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/5017","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10089","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15815","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11330","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Apr/1009705.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5012","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/5013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/5014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/5015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/5016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/5017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10089","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15815","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2448","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"S-Mart Shopping Cart or RediCart 3.9.5b stores smart.cfg under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the database name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cassiopeia:s-mart_shopping_cart:*:*:*:*:*:*:*:*","matchCriteriaId":"B3A12FC3-4589-4B06-92DA-F1B866DAA5D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:itransact:redicart:3.9.5b:*:*:*:*:*:*:*","matchCriteriaId":"DB16B2CA-6AC5-40D6-8E18-CA623AF1C03D"}]}]}],"references":[{"url":"http://secunia.com/advisories/13301","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012306","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12117","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18219","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012306","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18219","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2449","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier allows remote attackers to cause a denial of service (application crash) via a long, malformed UDP datagram."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.26:*:*:*:*:*:*:*","matchCriteriaId":"24E63F22-B0D3-4E48-A297-A7FB1BC88928"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.27:*:*:*:*:*:*:*","matchCriteriaId":"09B51868-35F0-43E2-94A2-3263D7311A27"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.28:*:*:*:*:*:*:*","matchCriteriaId":"F99E6BC6-8617-44EA-9BFB-FF4B2073B2A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.29:*:*:*:*:*:*:*","matchCriteriaId":"E3C13471-BCD9-42B0-A6E4-040FA4D5DCDE"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.30a:*:*:*:*:*:*:*","matchCriteriaId":"62AC2B23-FB42-4B99-A88C-1B5ABA510E89"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F6E71128-35EF-4497-AE9B-E8332615241F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4E69CF10-4097-4D30-84FB-E9B7E4E3C281"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"31436686-FEE8-4A3D-A9EF-4F2A79F53945"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"14F47A88-6334-4F0C-BC8D-E042B47BF410"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9FB8FB0E-D8C2-4082-810E-8949D2022C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"AF072491-5C76-48AB-89F5-080308063D77"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/wilco-again-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0352.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11270","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4833","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10022","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15716","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/wilco-again-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0352.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11270","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4833","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15716","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2450","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The client and server for Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier report sensitive information such as IDs and source IP addresses, which allows remote attackers to obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco:1.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D34EBB85-003B-4230-8CD2-1B9353B6CE5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco:1.4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"9049840B-B4B4-4AF7-B1AC-F961CBB0036C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.26:*:linux_bsd:*:*:*:*:*","matchCriteriaId":"37E1D564-0CBA-44B2-9C98-483FAFEC80D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.26:*:win32:*:*:*:*:*","matchCriteriaId":"E666411F-F5C0-4F1F-916F-BB3C282AC8F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.27:*:linux_bsd:*:*:*:*:*","matchCriteriaId":"C97AEA4B-AC74-4BE3-AD5B-3E5E5F3F4D1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.27:*:win32:*:*:*:*:*","matchCriteriaId":"8EA491E7-69B9-4A1B-A425-9FD8BAA2FF05"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.28:*:win32:*:*:*:*:*","matchCriteriaId":"F378EBD7-A2F8-4F20-89DB-6F2EBC9CC091"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.29:*:win32:*:*:*:*:*","matchCriteriaId":"DE80D6BE-C761-4A1D-9725-C074F71CDAA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.30a:*:win32:*:*:*:*:*","matchCriteriaId":"E8E0E41A-F18C-4907-A6D5-D328E29A9392"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F6E71128-35EF-4497-AE9B-E8332615241F"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4E69CF10-4097-4D30-84FB-E9B7E4E3C281"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"31436686-FEE8-4A3D-A9EF-4F2A79F53945"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"14F47A88-6334-4F0C-BC8D-E042B47BF410"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9FB8FB0E-D8C2-4082-810E-8949D2022C43"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"AF072491-5C76-48AB-89F5-080308063D77"},{"vulnerable":true,"criteria":"cpe:2.3:a:gamespy:roger_wilco_mark:1d3:*:*:*:*:*:*:*","matchCriteriaId":"86B66DA0-82E6-4546-9403-6B05529C408D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0352.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11270","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10024","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15816","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0352.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10024","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15816","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2451","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Roger Wilco 1.4.1.6 and earlier, or Roger Wilco Base Station 0.30a or earlier, allows remote attackers to send audio to arbitrary channels, aka the \"Voices from the deep\" bug."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.26:*:linux_bsd:*:*:*:*:*","matchCriteriaId":"37E1D564-0CBA-44B2-9C98-483FAFEC80D1"},{"vulnerable":false,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.26:*:win32:*:*:*:*:*","matchCriteriaId":"E666411F-F5C0-4F1F-916F-BB3C282AC8F1"},{"vulnerable":false,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.27:*:linux_bsd:*:*:*:*:*","matchCriteriaId":"C97AEA4B-AC74-4BE3-AD5B-3E5E5F3F4D1E"},{"vulnerable":false,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.27:*:win32:*:*:*:*:*","matchCriteriaId":"8EA491E7-69B9-4A1B-A425-9FD8BAA2FF05"},{"vulnerable":false,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.28:*:win32:*:*:*:*:*","matchCriteriaId":"F378EBD7-A2F8-4F20-89DB-6F2EBC9CC091"},{"vulnerable":false,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.29:*:win32:*:*:*:*:*","matchCriteriaId":"DE80D6BE-C761-4A1D-9725-C074F71CDAA6"},{"vulnerable":false,"criteria":"cpe:2.3:a:gamespy:roger_wilco_dedicated_server:0.30a:*:win32:*:*:*:*:*","matchCriteriaId":"E8E0E41A-F18C-4907-A6D5-D328E29A9392"},{"vulnerable":false,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"F6E71128-35EF-4497-AE9B-E8332615241F"},{"vulnerable":false,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"4E69CF10-4097-4D30-84FB-E9B7E4E3C281"},{"vulnerable":false,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.3:*:*:*:*:*:*:*","matchCriteriaId":"31436686-FEE8-4A3D-A9EF-4F2A79F53945"},{"vulnerable":false,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.4:*:*:*:*:*:*:*","matchCriteriaId":"14F47A88-6334-4F0C-BC8D-E042B47BF410"},{"vulnerable":false,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.5:*:*:*:*:*:*:*","matchCriteriaId":"9FB8FB0E-D8C2-4082-810E-8949D2022C43"},{"vulnerable":false,"criteria":"cpe:2.3:a:gamespy:roger_wilco_graphical_server:1.4.1.6:*:*:*:*:*:*:*","matchCriteriaId":"AF072491-5C76-48AB-89F5-080308063D77"},{"vulnerable":false,"criteria":"cpe:2.3:a:gamespy:rw_base_station:0.30a:*:*:*:*:*:*:*","matchCriteriaId":"5E97E109-CD51-4D7F-9CDC-4724721EA54E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0352.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11270","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10025","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15819","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0352.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11270","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10025","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15819","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2452","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Hitachi Cosminexus Portal Framework 01-00, 01-01, 01-02, 02-01, 02-02, 02-03, and other versions allows remote attackers to obtain sensitive information in the <ut:cache> tag library."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:cosminexus_portal_framework:01_00:*:*:*:*:*:*:*","matchCriteriaId":"045D8BD6-F436-42D0-B71C-88939FA33190"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:cosminexus_portal_framework:01_00_a:*:*:*:*:*:*:*","matchCriteriaId":"864A9DA8-9E5E-4CF7-9B33-C9D88690F973"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:cosminexus_portal_framework:01_01:*:*:*:*:*:*:*","matchCriteriaId":"83847503-D2EE-49D6-A48B-A38D667AED96"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:cosminexus_portal_framework:01_02:*:*:*:*:*:*:*","matchCriteriaId":"2D493AE5-4861-4E48-80BD-EEB8448A252D"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:cosminexus_portal_framework:01_02_a:*:*:*:*:*:*:*","matchCriteriaId":"AA89108A-BADF-4AFD-B759-F4D0AE47533C"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:cosminexus_portal_framework:02_00:*:*:*:*:*:*:*","matchCriteriaId":"83BF7576-5827-49FC-AE30-6E7D1EC5BD19"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:cosminexus_portal_framework:02_00_a:*:*:*:*:*:*:*","matchCriteriaId":"299D2995-9B61-452A-8E82-BC0590B9BAA7"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:cosminexus_portal_framework:02_01:*:*:*:*:*:*:*","matchCriteriaId":"D7B25558-E095-4DBC-8CE4-3BA4A1E053FE"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:cosminexus_portal_framework:02_02:*:*:*:*:*:*:*","matchCriteriaId":"D4FB93BF-E7C6-4BE7-9655-272468C1FC33"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:cosminexus_portal_framework:02_02_a:*:*:*:*:*:*:*","matchCriteriaId":"2ECB0DCA-B5D1-48D1-B356-F3E42C973EB9"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:cosminexus_portal_framework:02_02_b:*:*:*:*:*:*:*","matchCriteriaId":"DA978691-3663-480A-98C8-9CF1FB09EE3A"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:cosminexus_portal_framework:02_03:*:*:*:*:*:*:*","matchCriteriaId":"72E37FB6-BA44-4665-BF60-D19190D3C54A"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:cosminexus_portal_framework:02_03_c:*:*:*:*:*:*:*","matchCriteriaId":"17A824E2-ADCC-42C2-A48C-61E46BE96DE2"}]}]}],"references":[{"url":"http://secunia.com/advisories/12463","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011171","source":"cve@mitre.org"},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-006_e/01-e.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9739","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11128","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17278","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-006_e/01-e.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9739","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2453","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when register_globals is enabled, has unknown impact and attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tutti_nova:tutti_nova:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"31647F07-5F67-456B-976E-FFD6733FA8CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:tutti_nova:tutti_nova:0.10_beta:*:*:*:*:*:*:*","matchCriteriaId":"FB88FEA5-AF6B-4F21-B96C-9F53D5A72050"},{"vulnerable":true,"criteria":"cpe:2.3:a:tutti_nova:tutti_nova:0.11_beta:*:*:*:*:*:*:*","matchCriteriaId":"87359EF2-B7C2-4A56-8C1F-70F3DE238180"},{"vulnerable":true,"criteria":"cpe:2.3:a:tutti_nova:tutti_nova:0.12_beta:*:*:*:*:*:*:*","matchCriteriaId":"C76C9F7F-2721-4520-B94D-F90DB0A55243"}]}]}],"references":[{"url":"http://secunia.com/advisories/12467","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=265832","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/9741","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11127","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17279","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=265832","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/9741","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11127","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17279","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2454","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"aMSN 0.90 for Microsoft Windows allows local users to obtain sensitive information such as hashed passwords from (1) hotlog.htm and (2) config.xml."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amsn:amsn:0.90:*:*:*:*:*:*:*","matchCriteriaId":"C107C665-2B97-406D-8ED5-41B6BE0759E0"}]}]}],"references":[{"url":"http://securitytracker.com/id?1010555","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=976450&group_id=54091&atid=472655","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/8123","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16479","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=976450&group_id=54091&atid=472655","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/8123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16479","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2455","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain sensitive information and gain privileges by using TFTP to download the nvram file, then extracting the username, password, and other data from the file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sweex:wireless_broadband_router_accesspoint_802.11g:lc000060:*:*:*:*:*:*:*","matchCriteriaId":"5160B3B9-7022-48D8-825A-B999D4821737"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0574.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11603","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6109","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10339","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/May/1010143.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16140","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0574.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10339","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/alerts/2004/May/1010143.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2456","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a userinfo action."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:minibb:minibb:1.2:*:*:*:*:*:*:*","matchCriteriaId":"9F1BB7DF-25A8-4C20-B8A1-AEC8B6FB6C48"},{"vulnerable":true,"criteria":"cpe:2.3:a:minibb:minibb:1.5:*:*:*:*:*:*:*","matchCriteriaId":"75920CA9-3B6A-4936-9AAB-F0413B979354"},{"vulnerable":true,"criteria":"cpe:2.3:a:minibb:minibb:1.6:*:*:*:*:*:*:*","matchCriteriaId":"403B5A12-7913-43DB-B880-1D6E0B300C97"},{"vulnerable":true,"criteria":"cpe:2.3:a:minibb:minibb:1.7:*:*:*:*:*:*:*","matchCriteriaId":"CBA885E4-B70B-4254-8B63-A6F5F85C08BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:minibb:minibb:1.7a:*:*:*:*:*:*:*","matchCriteriaId":"92740975-5228-48F3-9487-C32CA0E7F830"},{"vulnerable":true,"criteria":"cpe:2.3:a:minibb:minibb:1.7c:*:*:*:*:*:*:*","matchCriteriaId":"03380F7C-91D9-4169-8EB4-E3D6A935F657"}]}]}],"references":[{"url":"http://securitytracker.com/id?1012164","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.minibb.net/forums/index.php?action=vthread&forum=1&topic=1767","source":"cve@mitre.org"},{"url":"http://www.minibb.net/forums/index.php?action=vthread&forum=9&topic=1854","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/11711","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/11688","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18080","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1012164","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.minibb.net/forums/index.php?action=vthread&forum=1&topic=1767","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.minibb.net/forums/index.php?action=vthread&forum=9&topic=1854","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/11711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/11688","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18080","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2457","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in 3Com OfficeConnect ADSL 11g Router allows remote attackers to cause a denial of service (crash) via a large amount of UDP traffic."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3crwe754g72-a:1.13:*:*:*:*:*:*:*","matchCriteriaId":"E1A97AAC-945D-42B1-BC79-641D8F7E4939"},{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3crwe754g72-a:1.23:*:*:*:*:*:*:*","matchCriteriaId":"BDE2B65F-6458-43CB-A2B1-5DAA1C18B9D8"},{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3crwe754g72-a:1.24:*:*:*:*:*:*:*","matchCriteriaId":"F3F7880A-547C-4A21-869D-D156E88D67CD"},{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3crwe754g72-a:1.27:*:*:*:*:*:*:*","matchCriteriaId":"05CD74DB-C9FD-4306-AABD-F6BE94F53E58"}]}]}],"references":[{"url":"http://www.osvdb.org/11839","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11685","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18081","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2458","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:1.7:*:*:*:*:*:*:*","matchCriteriaId":"9B94ECAA-1148-4A84-93B4-56B56A0938AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:1.8:*:*:*:*:*:*:*","matchCriteriaId":"DA86C04C-D31E-4B0B-A8E0-13A5FED7644E"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:1.71:*:*:*:*:*:*:*","matchCriteriaId":"62736A5C-7E68-4E47-9954-D62C913E3AF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:1.81:*:*:*:*:*:*:*","matchCriteriaId":"02D1462D-CC70-41CC-BAF4-48CD0ECAFD4A"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:1.90:*:*:*:*:*:*:*","matchCriteriaId":"50009537-0820-4CDB-94E1-2222040F234C"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_webmail:open_webmail:2.30:*:*:*:*:*:*:*","matchCriteriaId":"9FCF6241-3F7C-4867-8D2E-CCA1BEFCA9D8"}]}]}],"references":[{"url":"http://openwebmail.org/openwebmail/download/cert/patches/SA-04:02/openwebmail.pl.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/11334","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10087","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15822","source":"cve@mitre.org"},{"url":"http://openwebmail.org/openwebmail/download/cert/patches/SA-04:02/openwebmail.pl.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/11334","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10087","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15822","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2459","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in gnubiff 1.2.0 and earlier allows local users to obtain passwords, related to the password table."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E3466790-055B-44A8-8B87-593836888623"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"77D9B9E6-3063-4E09-83C3-7E919942A84E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F61B2BE1-9150-453B-B883-18F228EA62DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0BE57433-DC9C-4E9D-BAEF-C5F0CD631D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D2BF350E-4935-43BD-801D-EF9DD43761D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B6B51ABD-544E-454F-B2DF-D8DE87A77A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"EDDC503A-32AF-4BF8-A3E8-7B16F3DF2A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"2AB92B6C-3AD4-4703-B755-8B0077A24C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"388C3F45-133F-4464-97EB-0548D1F4AD55"}]}]}],"references":[{"url":"http://sourceforge.net/project/shownotes.php?group_id=94176&release_id=248016","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/7250","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=94176&release_id=248016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/7250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2460","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application crash) via an \"infinite\" Unique IDentification Listing (UIDL) list."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E3466790-055B-44A8-8B87-593836888623"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"77D9B9E6-3063-4E09-83C3-7E919942A84E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F61B2BE1-9150-453B-B883-18F228EA62DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0BE57433-DC9C-4E9D-BAEF-C5F0CD631D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D2BF350E-4935-43BD-801D-EF9DD43761D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B6B51ABD-544E-454F-B2DF-D8DE87A77A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"EDDC503A-32AF-4BF8-A3E8-7B16F3DF2A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"2AB92B6C-3AD4-4703-B755-8B0077A24C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"388C3F45-133F-4464-97EB-0548D1F4AD55"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"85099202-6FC7-443D-B096-F38149136653"}]}]}],"references":[{"url":"http://gnubiff.sourceforge.net/changelog.php","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12445","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9731","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11123","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17282","source":"cve@mitre.org"},{"url":"http://gnubiff.sourceforge.net/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2461","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in pop3.c in gnubiff before 2.0.0 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E3466790-055B-44A8-8B87-593836888623"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.4:*:*:*:*:*:*:*","matchCriteriaId":"77D9B9E6-3063-4E09-83C3-7E919942A84E"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.5:*:*:*:*:*:*:*","matchCriteriaId":"F61B2BE1-9150-453B-B883-18F228EA62DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"0BE57433-DC9C-4E9D-BAEF-C5F0CD631D5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.7:*:*:*:*:*:*:*","matchCriteriaId":"D2BF350E-4935-43BD-801D-EF9DD43761D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.8:*:*:*:*:*:*:*","matchCriteriaId":"B6B51ABD-544E-454F-B2DF-D8DE87A77A6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.9:*:*:*:*:*:*:*","matchCriteriaId":"EDDC503A-32AF-4BF8-A3E8-7B16F3DF2A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.0.10:*:*:*:*:*:*:*","matchCriteriaId":"2AB92B6C-3AD4-4703-B755-8B0077A24C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"388C3F45-133F-4464-97EB-0548D1F4AD55"},{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnubiff:1.4.0:*:*:*:*:*:*:*","matchCriteriaId":"85099202-6FC7-443D-B096-F38149136653"}]}]}],"references":[{"url":"http://gnubiff.sourceforge.net/changelog.php","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12445","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9731","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11123","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17282","source":"cve@mitre.org"},{"url":"http://gnubiff.sourceforge.net/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12445","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/9731","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17282","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2462","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"cplay 1.49 on Linux allows local users to overwrite arbitrary files via a symlink attack on the cplay_control temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cplay:cplay:1.49:*:*:*:*:*:*:*","matchCriteriaId":"A617B7AA-BE6F-4EE7-9BCD-4D61155BD268"}]}]}],"references":[{"url":"http://secunia.com/advisories/11924","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Jun/1010574.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7222","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10597","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16482","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Jun/1010574.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7222","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10597","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16482","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2463","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in ADA Image Server (ImgSvr) 0.4 allows remote attackers to cause a denial of service (web server crash) or execute arbitrary code via a long GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ada:imgsvr:0.4:*:*:*:*:*:*:*","matchCriteriaId":"5103B23A-3CDD-42B8-AB8E-2EAA19D97C0C"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/ADA%20Image%20Server%20%28ImgSvr%29%200.4.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11287","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4945","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10046","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15827","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16679","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/ADA%20Image%20Server%20%28ImgSvr%29%200.4.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15827","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16679","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2464","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded \"..//\" sequences (\"%2e%2e%2f%2f\").  NOTE: it was later reported that 0.6.21 and earlier is also affected."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ada:imgsvr:0.4:*:*:*:*:*:*:*","matchCriteriaId":"5103B23A-3CDD-42B8-AB8E-2EAA19D97C0C"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/ADA%20Image%20Server%20%28ImgSvr%29%200.4.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11287","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4946","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485490/100/100/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10048","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16680","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/ADA%20Image%20Server%20%28ImgSvr%29%200.4.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4946","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/485490/100/100/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10048","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16680","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2465","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:efs_software:easy_chat_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3E16910B-FF9D-4387-980A-4DAEE6DB0DF7"}]}]}],"references":[{"url":"http://secunia.com/advisories/12006","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16634","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16634","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2466","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow.  NOTE: it was later reported that 2.2 is also affected."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:efs_software:easy_chat_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3E16910B-FF9D-4387-980A-4DAEE6DB0DF7"},{"vulnerable":true,"criteria":"cpe:2.3:a:efs_software:easy_chat_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"8C2AB270-6F13-486E-A3B9-BE90720B6491"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-07/0013.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0077.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/167892/Easy-Chat-Server-3.1-Buffer-Overflow.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12006","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/26461","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/58427","source":"cve@mitre.org"},{"url":"http://www.autistici.org/fdonato/advisory/EasyChatServer1.2-adv.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/33326","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7416","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/25328","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/67384","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/2901","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16629","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36013","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4289","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-07/0013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0077.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/167892/Easy-Chat-Server-3.1-Buffer-Overflow.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/26461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/58427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.autistici.org/fdonato/advisory/EasyChatServer1.2-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.exploit-db.com/exploits/33326","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7416","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/25328","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/67384","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4289","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2467","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"chat.ghp in Easy Chat Server 1.2 allows remote attackers to add a large number of fake users, then eventually cause a denial of service (server crash)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:efs_software:easy_chat_server:1.2:*:*:*:*:*:*:*","matchCriteriaId":"3E16910B-FF9D-4387-980A-4DAEE6DB0DF7"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-07/0013.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0077.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12006","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.autistici.org/fdonato/advisory/EasyChatServer1.2-adv.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/7417","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16633","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-07/0013.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0077.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12006","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.autistici.org/fdonato/advisory/EasyChatServer1.2-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/7417","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16633","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2468","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in SillySearch 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:scripts_for_educators:sillysearch:2.3:*:*:*:*:*:*:*","matchCriteriaId":"70E4B6BA-946B-4DAE-8D5F-D80C1D3C8034"}]}]}],"references":[{"url":"http://secunia.com/advisories/11260","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4755","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009598.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15683","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11260","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009598.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15683","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2469","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Reservation.class.php for phpScheduleIt 1.01 and earlier allows attackers to modify or delete reservations."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.0:*:*:*:*:*:*:*","matchCriteriaId":"0D449C2F-B0DC-4356-99D2-AC3F1D69B98E"},{"vulnerable":true,"criteria":"cpe:2.3:a:brickhost:phpscheduleit:1.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"72A3FEB2-6FF3-43E7-8C80-44F3E366DF7A"}]}]}],"references":[{"url":"http://secunia.com/advisories/13206","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Nov/1012246.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1051841&group_id=95547&atid=611778","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11690","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18089","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13206","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Nov/1012246.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1051841&group_id=95547&atid=611778","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11690","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18089","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2470","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in MadBMS before 1.1.5 has unknown impact and attack vectors, related to logins."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:madbms:madbms:1.0:*:*:*:*:*:*:*","matchCriteriaId":"227BCE41-BDDB-43BE-BA91-19A65D580D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:madbms:madbms:1.1:*:*:*:*:*:*:*","matchCriteriaId":"CD635441-BDEC-47CC-B53F-3B873DDEE75E"},{"vulnerable":true,"criteria":"cpe:2.3:a:madbms:madbms:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"A1664230-D78F-485D-BBD7-10CABF548650"},{"vulnerable":true,"criteria":"cpe:2.3:a:madbms:madbms:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"19B308F6-3ACC-48A0-BFE1-913710295C33"},{"vulnerable":true,"criteria":"cpe:2.3:a:madbms:madbms:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"E01D38B5-EC4F-4628-BD3F-3F0AA2DF44E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:madbms:madbms:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DA6A0C58-4C18-4F3D-8FA1-A232D440280B"}]}]}],"references":[{"url":"http://secunia.com/advisories/11256","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://test.madgenius.com/madBMS/ChangeLog","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4756","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10018","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15684","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11256","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://test.madgenius.com/madBMS/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4756","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10018","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15684","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2471","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the sloth TCL script in QuoteEngine before 1.2.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jamesoff:quoteengine:1.0:*:*:*:*:*:*:*","matchCriteriaId":"766F8C34-393B-497E-B401-CCE79940BDDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:jamesoff:quoteengine:1.1:*:*:*:*:*:*:*","matchCriteriaId":"85FCC718-75E6-4244-BECB-0DE04C8C4C4D"}]}]}],"references":[{"url":"http://secunia.com/advisories/11255","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=227554","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10017","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15685","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=227554","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15685","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2472","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Agnitum Outpost Pro Firewall 2.1 allows remote attackers to cause a denial of service (CPU consumption) via a flood of small, invalid packets, which can not be processed quickly enough by Outpost Pro."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:agnitum:outpost_firewall:2.1:*:pro:*:*:*:*:*","matchCriteriaId":"289270BF-AF2A-4088-BE75-4CDBFF49358C"}]}]}],"references":[{"url":"http://secunia.com/advisories/11601","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/May/1010151.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6110","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5FP0E0KCUW.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10338","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16133","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/May/1010151.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5FP0E0KCUW.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10338","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16133","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2473","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"wmFrog weather monitor 0.1.6 and other versions before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":1.2},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-59"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wmfrog:wmfrog:0.1.6:*:*:*:*:*:*:*","matchCriteriaId":"F572E097-2BEE-4635-A148-00DB52AACD2C"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294352","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13259","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/25686","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=516070&group_id=67429","source":"cve@mitre.org"},{"url":"http://wmfrog.svn.sourceforge.net/svnroot/wmfrog/wmfrog/CHANGES","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12118","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11743","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/24504","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/2238","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18232","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34924","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294352","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13259","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/25686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=516070&group_id=67429","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wmfrog.svn.sourceforge.net/svnroot/wmfrog/wmfrog/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12118","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/24504","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2238","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2474","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpnews:phpnews:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"4C9A0A0D-BAA4-41FB-AB68-701894B666FD"}]}]}],"references":[{"url":"http://newsphp.sourceforge.net/changelog/changelog_1.24.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13300","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/12119","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11748","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18233","source":"cve@mitre.org"},{"url":"http://newsphp.sourceforge.net/changelog/changelog_1.24.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13300","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/12119","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18233","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2475","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web script via about.html in the About section.  NOTE: some followup posts suggest that the demonstration code's use of the res:// protocol does not cross privilege boundaries, since it is not allowed in the Internet Zone. Thus this might not be a vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.41:*:*:*:*:*:*:*","matchCriteriaId":"90B18B24-8E0C-41B3-9354-2506A05734A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.42:*:*:*:*:*:*:*","matchCriteriaId":"B41A4120-18F1-43B1-96B1-B97655671866"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.43:*:*:*:*:*:*:*","matchCriteriaId":"64280CDE-BEB8-4A8D-A5B9-1F850ED002F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.44:*:*:*:*:*:*:*","matchCriteriaId":"FC8876EA-F6FD-4EE9-A63E-31610525CC74"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.45:*:*:*:*:*:*:*","matchCriteriaId":"599A6B58-9915-4D72-A850-7A34EE85159F"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.47:*:*:*:*:*:*:*","matchCriteriaId":"0708ABF8-989D-4879-90D9-93D4D237F270"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.48:*:*:*:*:*:*:*","matchCriteriaId":"C06A2E25-81C2-4645-A652-055A3E37F5FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.49:*:*:*:*:*:*:*","matchCriteriaId":"6D763CC4-8E6D-40B3-A663-DA7148F66CFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.53:*:*:*:*:*:*:*","matchCriteriaId":"3B195D15-29BC-42B3-B931-696CC0527D2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.54:*:*:*:*:*:*:*","matchCriteriaId":"DAB91C2C-86DC-406C-89A1-2163B15F46E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.55:*:*:*:*:*:*:*","matchCriteriaId":"D29CB61F-61B1-4710-9E8C-7D97060C0F26"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.56:*:*:*:*:*:*:*","matchCriteriaId":"614061C9-AE7A-46B5-BD53-75CD69F15C44"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.57:*:*:*:*:*:*:*","matchCriteriaId":"19A0D7E9-70F2-484B-8FA8-5B48052A46D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.58:*:*:*:*:*:*:*","matchCriteriaId":"0200C2A1-578F-45F2-B677-9091BC49EF93"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.59:*:*:*:*:*:*:*","matchCriteriaId":"C630B01A-755E-4A80-BFF0-446415E87BE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:1.1.60:*:*:*:*:*:*:*","matchCriteriaId":"F5F7D4F8-C073-4115-806D-89973A4C2C4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:2.0.114.1:*:*:*:*:*:*:*","matchCriteriaId":"08B504D6-EE8A-4BEA-AC79-807ECB97E273"},{"vulnerable":true,"criteria":"cpe:2.3:a:google:toolbar:2.0.114.1:*:big_en_ggld:*:*:*:*:*","matchCriteriaId":"9B09625F-1DE4-4E2F-8B38-B8856C5731AD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-09/0226.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0629.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0639.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011351","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/10037","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11210","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17435","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-09/0226.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0629.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0639.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/10037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11210","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2476","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (infinite loop and crash) via an IFRAME with \"?\" as the file source."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*","matchCriteriaId":"93F47C82-E767-47A8-88DE-417B004ED7FC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0061.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0080.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10073","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15832","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0061.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0080.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15832","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2477","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Descriptor Table (SDT) in \\device\\physicalmemory with the original SDT found in ntoskrnl.exe."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:diamondcs:process_guard_free:2.000:*:*:*:*:*:*:*","matchCriteriaId":"E360DE24-67C1-4AA1-8763-5B5F2DA14AB0"}]}]}],"references":[{"url":"http://secunia.com/advisories/12033","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7606","source":"cve@mitre.org"},{"url":"http://www.security.org.sg/vuln/procguard.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10675","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/Jul/1010662.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16654","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12033","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7606","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.security.org.sg/vuln/procguard.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/alerts/2004/Jul/1010662.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16654","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2478","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ca:unicenter_web_services_distributed_management:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"78D5271C-F4AD-4D74-9B7B-A1CC7F9DA2CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:trading_partner_interchange:*:*:*:*:*:*:*:*","versionEndIncluding":"4.2.2","matchCriteriaId":"69DF396D-2180-44BD-919E-AC0ADF54DC15"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:trading_partner_interchange:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"CCCD0E32-F57D-4D53-8537-29831AAF505A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"DADF8838-B5E7-4C17-9F76-C38D044A3AD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:3.1.7:*:*:*:*:*:*:*","matchCriteriaId":"99ECB27E-6852-4EEA-9C1B-0B84FC1202C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.0:*:*:*:*:*:*:*","matchCriteriaId":"85E64C7C-84FA-4AF0-ADA3-3708DADF35C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.0_rc4:*:*:*:*:*:*:*","matchCriteriaId":"FD27A440-D06A-47D5-97FF-4B56EDD3E8B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.1.1:*:*:*:*:*:*:*","matchCriteriaId":"35508567-7C83-4C4B-961B-1BE9B8F3D1D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"C276FEC9-68B0-46BC-92A0-65C3B8401FD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"44D01183-FC99-4FD3-965B-38B1FC39048F"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A3154BBA-DF19-458F-B8D0-CFCAC7DB366A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"512BF3AF-4013-48E7-9546-5052CFBF0B11"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.9:*:*:*:*:*:*:*","matchCriteriaId":"09FD2684-87CF-4B4D-B3D1-7DE43609D2E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.11:*:*:*:*:*:*:*","matchCriteriaId":"B82462AC-665D-41C0-B198-AA52784DF4C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.12:*:*:*:*:*:*:*","matchCriteriaId":"6B21ED45-9C48-4547-BDCE-7EB12B03AAEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.14:*:*:*:*:*:*:*","matchCriteriaId":"BA62A170-2544-4D3D-8E22-21F35D2E9944"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.15:*:*:*:*:*:*:*","matchCriteriaId":"DF5CEA1C-1EC7-49D7-9485-FA8773DA2D8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.16:*:*:*:*:*:*:*","matchCriteriaId":"3F68F8E1-BF3C-4C99-BE93-985BB8AD51FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.17:*:*:*:*:*:*:*","matchCriteriaId":"D0F5EF68-A6FC-4FD7-8C36-4A8623C60622"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.18:*:*:*:*:*:*:*","matchCriteriaId":"858FCD10-5B40-4EA8-BA16-081EFC734695"},{"vulnerable":true,"criteria":"cpe:2.3:a:jetty:jetty_http_server:4.2.19:*:*:*:*:*:*:*","matchCriteriaId":"01A293F8-45D0-46F3-93C3-A09542628FE0"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049846.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12703","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22229","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011545","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1016975","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21178665","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/10490","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/447648/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11330","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/3873","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17600","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049846.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/22229","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1016975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21178665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/10490","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/447648/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11330","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17600","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2479","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable1:*:*:*:*:*:*:*","matchCriteriaId":"DD48BFDF-1CAF-45DF-9483-9A9FA3F55370"},{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable2:*:*:*:*:*:*:*","matchCriteriaId":"7D5DFA3A-34D1-4B4B-8B7D-554AD51C953B"},{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable3:*:*:*:*:*:*:*","matchCriteriaId":"C487E88E-A2F8-47B5-852A-A9E701077957"},{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable4:*:*:*:*:*:*:*","matchCriteriaId":"707BEDA1-1947-4851-8565-F725CF14741B"},{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable5:*:*:*:*:*:*:*","matchCriteriaId":"1CAEF8E8-E810-453A-8C3D-7FF5543B6597"},{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable6:*:*:*:*:*:*:*","matchCriteriaId":"F5381D23-D780-4537-AD0D-EE59A7FBC52A"},{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.5_stable7:*:*:*:*:*:*:*","matchCriteriaId":"F0212EAA-3D10-43F1-920F-549497A35199"}]}]}],"references":[{"url":"http://fedoranews.org/updates/FEDORA--.shtml","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13408","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/16977","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1012466","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/12282","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-766.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11865","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=1143","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18406","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9711","source":"cve@mitre.org"},{"url":"http://fedoranews.org/updates/FEDORA--.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13408","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/16977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1012466","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/12282","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2005-766.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=1143","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18406","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9711","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2480","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via \"@@\" sequences in a URL within Internet Explorer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:national_science_foundation:squid_web_proxy_cache:2.3_stable5:*:*:*:*:*:*:*","matchCriteriaId":"27D96FD7-AED4-4BC2-B6CF-85E334A769B0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0070.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10315","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16153","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0070.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16153","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2481","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, possibly bypassing access restrictions, by connecting to the proxy and issuing a CONNECT command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myproxy:myproxy:6.58:*:*:*:*:*:*:*","matchCriteriaId":"049B8C94-F61F-4DFF-A5D0-65F7F8DCE738"}]}]}],"references":[{"url":"http://securitytracker.com/alerts/2004/Nov/1012322.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/12138","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitylab.ru/vulnerability/source/210758.php","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18265","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Nov/1012322.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/12138","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitylab.ru/vulnerability/source/210758.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18265","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2482","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property of the OBJECT tag and might allow remote attackers to execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*","matchCriteriaId":"D52F17AB-2C87-4C1A-91B5-267ABBCF5844"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*","matchCriteriaId":"C3189982-F780-4AC2-9663-E6D4DF9DD319"}]}]}],"references":[{"url":"http://secunia.com/advisories/12041","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7769","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/368492","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10683","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16663","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7769","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/368492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10683","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16663","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2483","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison the DNS cache or cause a denial of service (connection loss)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:winroute_firewall:6.0:*:*:*:*:*:*:*","matchCriteriaId":"563E83E1-74C0-4312-A5C5-0223ADE55F65"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:winroute_firewall:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"EE079B94-A8C6-41E7-98B1-29A4DE4F66EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:winroute_firewall:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"94AC89E5-8B9C-4C6B-8976-6A4A6F922858"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:winroute_firewall:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5B99A154-D3C6-4B1C-BEC9-7D1AEAFCAC41"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:winroute_firewall:6.0.4:*:*:*:*:*:*:*","matchCriteriaId":"0ADAAD5F-3286-464E-A309-9454EE9A663F"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:winroute_firewall:6.0.5:*:*:*:*:*:*:*","matchCriteriaId":"BE1437DE-E19A-4C2C-9077-DB1FF48772C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:winroute_firewall:6.0.6:*:*:*:*:*:*:*","matchCriteriaId":"4D0089BE-856D-4998-BBFE-1F626A43377E"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:winroute_firewall:6.0.7:*:*:*:*:*:*:*","matchCriteriaId":"6CE81F49-05CE-4987-90C0-B6D077B65DD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:kerio:winroute_firewall:6.0.8:*:*:*:*:*:*:*","matchCriteriaId":"650E19BC-6545-45E9-BE2B-0900323C80C1"}]}]}],"references":[{"url":"http://secunia.com/advisories/13374","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.kerio.com/security_advisory.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/12293","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12294","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11870","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18410","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13374","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.kerio.com/security_advisory.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/12293","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11870","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18410","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2484","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in PHP Gift Registry 1.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter to (1) event.php or (2) index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_gift_registry:phpgiftreg:1.0.2:*:*:*:*:*:*:*","matchCriteriaId":"AB38530D-D637-4754-A31A-3BE149254DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_gift_registry:phpgiftreg:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2AADD369-E6E7-4493-80EA-2D0ADD7310CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_gift_registry:phpgiftreg:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"C8CA9A4E-CDC1-471A-8862-3D75B353D45A"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_gift_registry:phpgiftreg:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"46EB562F-F1FF-4708-A41A-9F28F177FF78"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_gift_registry:phpgiftreg:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"C7803EBF-73B4-4E27-AF1C-B4C0E4A21604"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_gift_registry:phpgiftreg:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"7E76403A-E901-46B4-9997-FC16259C108B"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_gift_registry:phpgiftreg:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"392EA454-7A80-43C9-A310-8EAAB9DBF8FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_gift_registry:phpgiftreg:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"80A08E7A-6FF5-43F7-8FD7-71E44303229E"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_gift_registry:phpgiftreg:1.3.5:*:*:*:*:*:*:*","matchCriteriaId":"FBF4A4F4-087E-47EE-BB49-D4BE6C05756E"}]}]}],"references":[{"url":"http://cvs.sourceforge.net/viewcvs.py/phpgiftreg/src/event.php?r1=1.4&r2=1.5","source":"cve@mitre.org"},{"url":"http://cvs.sourceforge.net/viewcvs.py/phpgiftreg/src/index.php?r1=1.20&r2=1.21","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13414","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=288731","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/12286","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/12287","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11879","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18412","source":"cve@mitre.org"},{"url":"http://cvs.sourceforge.net/viewcvs.py/phpgiftreg/src/event.php?r1=1.4&r2=1.5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cvs.sourceforge.net/viewcvs.py/phpgiftreg/src/index.php?r1=1.20&r2=1.21","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13414","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=288731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/12286","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/12287","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11879","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18412","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2485","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in PHP Live! before 2.8.2, due to a \"major security problem,\" allows remote attackers to include arbitrary files and directories via unspecified attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_live:php_live:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.1","matchCriteriaId":"A7BEF589-157A-405C-BA5D-89657C65D341"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2004-11/0022.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13420","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012467","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12147","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11863","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18414","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2004-11/0022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12147","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18414","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2486","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote attackers to gain access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*","versionEndExcluding":"0.43","matchCriteriaId":"5D990DB4-57FF-47D0-81B1-4F5A7DEE44B2"}]}]}],"references":[{"url":"http://matt.ucc.asn.au/dropbear/CHANGES","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12153","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28935","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/8137","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10803","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0543","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16810","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40490","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://matt.ucc.asn.au/dropbear/CHANGES","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12153","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/28935","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.osvdb.org/8137","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2008/0543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40490","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2487","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via (1) \"..\", (2) \"\\..\\\" (backslash dot dot), or (3) \"/../\" sequences in (a) RETR (get), (b) NLST (ls), (c) LIST (ls), (d) RNFR, or (e) RNTO FTP commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:nexgen:nexgen_ftp_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7C47A9B9-1731-4A17-9583-E7EBAEF5C591"},{"vulnerable":false,"criteria":"cpe:2.3:a:nexgen:nexgen_ftp_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7AB55FD7-2E59-4F6F-9970-3BDE483FC734"},{"vulnerable":false,"criteria":"cpe:2.3:a:nexgen:nexgen_ftp_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BEA38235-C0C8-4B7F-B414-6EC522A5137E"},{"vulnerable":false,"criteria":"cpe:2.3:a:nexgen:nexgen_ftp_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E517898-94E4-40C2-BB20-C06A6456A75C"}]}]}],"references":[{"url":"http://secunia.com/advisories/11216","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.nexgenserver.com/cgi-bin/loadframe2.cgi?/History.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/4557","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9970","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009545.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15594","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.nexgenserver.com/cgi-bin/loadframe2.cgi?/History.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/4557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2488","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via \"C:\" sequences in the (1) RETR (get), (2) NLST (ls), (3) LIST (ls), (4) RNFR, or (5) RNTO FTP commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:nexgen:nexgen_ftp_server:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7C47A9B9-1731-4A17-9583-E7EBAEF5C591"},{"vulnerable":false,"criteria":"cpe:2.3:a:nexgen:nexgen_ftp_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"7AB55FD7-2E59-4F6F-9970-3BDE483FC734"},{"vulnerable":false,"criteria":"cpe:2.3:a:nexgen:nexgen_ftp_server:2.1:*:*:*:*:*:*:*","matchCriteriaId":"BEA38235-C0C8-4B7F-B414-6EC522A5137E"},{"vulnerable":false,"criteria":"cpe:2.3:a:nexgen:nexgen_ftp_server:2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E517898-94E4-40C2-BB20-C06A6456A75C"}]}]}],"references":[{"url":"http://secunia.com/advisories/11216","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.nexgenserver.com/cgi-bin/loadframe2.cgi?/History.html","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/4557","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9970","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009545.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15594","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11216","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.nexgenserver.com/cgi-bin/loadframe2.cgi?/History.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/4557","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/alerts/2004/Mar/1009545.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15594","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2489","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to execute arbitrary code via a modified INFORMIXDIR environment variable that points to a file with format string specifiers in the filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*","matchCriteriaId":"910D9A17-43A7-4F9E-98E0-2C465AC8BD2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*","matchCriteriaId":"1E61711D-4C3E-4A6D-89A8-85B7CDD7FAE1"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107524391217364&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10737","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21153336","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3757","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9511","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14967","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107524391217364&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21153336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3757","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14967","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2490","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code via a long GL_PATH environment variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc1:*:*:*:*:*:*:*","matchCriteriaId":"910D9A17-43A7-4F9E-98E0-2C465AC8BD2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_dynamic_server:9.40.uc2:*:*:*:*:*:*:*","matchCriteriaId":"1E61711D-4C3E-4A6D-89A8-85B7CDD7FAE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_extended_parallel_server:8.40_uc1:*:*:*:*:*:*:*","matchCriteriaId":"E8EBF74C-A519-4C0E-B885-5C036047D610"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:informix_extended_parallel_server:8.40_uc2:*:*:*:*:*:*:*","matchCriteriaId":"8A52EB99-7D27-4782-BBDA-35B1D1E3AF55"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=107524391217364&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10737","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21153336","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3756","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9511","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14949","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=107524391217364&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/10737","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21153336","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/3756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9511","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14949","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2491","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been loaded, which allows remote attackers to spoof the URL in the address bar via the window.open and location.replace HTML parameters, which facilitates phishing attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndIncluding":"7.53","matchCriteriaId":"F90D6121-8ED4-45C3-B156-E48183FA1200"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1056.html","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/12162","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.opera.com/windows/changelogs/754/","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.osvdb.org/8317","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://www.securityfocus.com/bid/10810","source":"cve@mitre.org","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16816","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://secunia.com/advisories/12162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.opera.com/windows/changelogs/754/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.osvdb.org/8317","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://www.securityfocus.com/bid/10810","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2492","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web (GmaxWWW) Desktop 5, 6, and Desktop for Jichitai 6, allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:05_00:*:*:*:*:*:*:*","matchCriteriaId":"B6D1F873-4348-407C-96E7-63B75827941C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:05_11_f:*:*:*:*:*:*:*","matchCriteriaId":"3DBE5F6F-BB80-4762-AAB3-D30C6FC8A3B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:05_11_i:*:*:*:*:*:*:*","matchCriteriaId":"70A57E9D-3FC5-443E-9671-0CF76440A11E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:05_11_j:*:*:*:*:*:*:*","matchCriteriaId":"4908E99C-D9B1-4EBD-B9F0-74FFED092FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_00:*:*:*:*:*:*:*","matchCriteriaId":"D0A012F2-A12D-45D0-95F0-4ECD97FD49AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_50_b:*:*:*:*:*:*:*","matchCriteriaId":"C74B3CD8-3D60-472E-97CB-37CF1BDFF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_50_c:*:*:*:*:*:*:*","matchCriteriaId":"72344FDE-11AA-4142-8367-9C76F33DB702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_51:*:*:*:*:*:*:*","matchCriteriaId":"7AAF89A0-E719-4273-890E-319EA8B81C23"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_51:*:jichitai:*:*:*:*:*","matchCriteriaId":"DDCC2769-BE0E-4AB0-8192-C0B9CCA23BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_51_b:*:*:*:*:*:*:*","matchCriteriaId":"FDAC245A-9C8C-4E90-86D7-7EFF829B1F36"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_51_c:*:*:*:*:*:*:*","matchCriteriaId":"8580D3CE-98F0-4A07-8B92-50609EA333FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_52:*:*:*:*:*:*:*","matchCriteriaId":"B344E3DA-A767-4868-B249-873B1A67B016"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_52:*:jichitai:*:*:*:*:*","matchCriteriaId":"2F6136B7-F035-42DB-920B-D421451AD267"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_52_b:*:*:*:*:*:*:*","matchCriteriaId":"B17C3BFE-8AB7-4FDB-9EEC-F8EE1B566246"}]}]}],"references":[{"url":"http://secunia.com/advisories/13321","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-007_e/01-e.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/12154","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11773","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18277","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13321","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-007_e/01-e.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/12154","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18277","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2493","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichitai allows remote authenticated users to read arbitrary .html files via the template name parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web:2:*:*:*:*:*:*:*","matchCriteriaId":"7A92F603-AD3F-4308-A1CB-19C3520BD9D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web:02_00:*:*:*:*:*:*:*","matchCriteriaId":"98DB68FE-C47E-4B81-93C4-DC864FCA025D"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web:02_20:*:*:*:*:*:*:*","matchCriteriaId":"FD40CA2E-B904-4447-A5B5-F29D7BCE14F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web:02_20_a:*:*:*:*:*:*:*","matchCriteriaId":"74813442-83C0-4BB5-BF80-153F24E9C784"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web:02_31_i:*:*:*:*:*:*:*","matchCriteriaId":"5D3F09B3-A630-4AD2-BCBB-7FEE84ABE233"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web:3:*:*:*:*:*:*:*","matchCriteriaId":"0F7921EB-BE36-4E86-A27F-2299F207BD9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web:03_00:*:*:*:*:*:*:*","matchCriteriaId":"2D52116E-3F2D-4902-BDF9-3636887FD605"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web:03_10_h:*:*:*:*:*:*:*","matchCriteriaId":"B41B9635-F155-4568-BC02-8DB5E5856798"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web:03_11_b:*:*:*:*:*:*:*","matchCriteriaId":"6C27C4AF-DB0A-4D83-B812-A2BE2871D718"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:5:*:*:*:*:*:*:*","matchCriteriaId":"5220355B-6334-44E9-BFC8-331129C2AFE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:05_00:*:*:*:*:*:*:*","matchCriteriaId":"B6D1F873-4348-407C-96E7-63B75827941C"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:05_11_f:*:*:*:*:*:*:*","matchCriteriaId":"3DBE5F6F-BB80-4762-AAB3-D30C6FC8A3B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:05_11_i:*:*:*:*:*:*:*","matchCriteriaId":"70A57E9D-3FC5-443E-9671-0CF76440A11E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:05_11_j:*:*:*:*:*:*:*","matchCriteriaId":"4908E99C-D9B1-4EBD-B9F0-74FFED092FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:6:*:*:*:*:*:*:*","matchCriteriaId":"06631C10-25DC-4733-A1D2-F37556978AE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_00:*:*:*:*:*:*:*","matchCriteriaId":"D0A012F2-A12D-45D0-95F0-4ECD97FD49AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_50_b:*:*:*:*:*:*:*","matchCriteriaId":"C74B3CD8-3D60-472E-97CB-37CF1BDFF371"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_50_c:*:*:*:*:*:*:*","matchCriteriaId":"72344FDE-11AA-4142-8367-9C76F33DB702"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_51:*:*:*:*:*:*:*","matchCriteriaId":"7AAF89A0-E719-4273-890E-319EA8B81C23"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_51:*:jichitai:*:*:*:*:*","matchCriteriaId":"DDCC2769-BE0E-4AB0-8192-C0B9CCA23BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_51_b:*:*:*:*:*:*:*","matchCriteriaId":"FDAC245A-9C8C-4E90-86D7-7EFF829B1F36"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_51_c:*:*:*:*:*:*:*","matchCriteriaId":"8580D3CE-98F0-4A07-8B92-50609EA333FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_52:*:*:*:*:*:*:*","matchCriteriaId":"B344E3DA-A767-4868-B249-873B1A67B016"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_52:*:jichitai:*:*:*:*:*","matchCriteriaId":"2F6136B7-F035-42DB-920B-D421451AD267"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:06_52_b:*:*:*:*:*:*:*","matchCriteriaId":"B17C3BFE-8AB7-4FDB-9EEC-F8EE1B566246"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:groupmax_world_wide_web_desktop:gold:*:jichitai:*:*:*:*:*","matchCriteriaId":"F4E726B3-7120-42B3-BC90-CB08BB1FBB9E"}]}]}],"references":[{"url":"http://secunia.com/advisories/13321","source":"cve@mitre.org"},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-007_e/01-e.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/12153","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11773","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18278","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13321","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-007_e/01-e.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/12153","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11773","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18278","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2494","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in _error in Ability Mail Server 1.18 allows remote attackers to inject arbitrary web script or HTML via the erromsg parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:1.18:*:*:*:*:*:*:*","matchCriteriaId":"DB5EC297-5A2A-4359-B93C-BF9EDE4D99E6"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/Ability_mail_server_1.18.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12039","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010672","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/7718","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10695","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16676","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/Ability_mail_server_1.18.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/7718","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10695","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16676","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2495","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) Webmail, (2) admin, and (3) SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous connections to the service."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:code-crafters:ability_mail_server:1.18:*:*:*:*:*:*:*","matchCriteriaId":"DB5EC297-5A2A-4359-B93C-BF9EDE4D99E6"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/Ability_mail_server_1.18.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12039","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010672","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/7719","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10695","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16677","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/Ability_mail_server_1.18.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12039","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010672","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/7719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10695","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16677","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2496","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availability loss) via a large number of POST requests to /Search."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:opentext:opentext_firstclass:7.1:*:*:*:*:*:*:*","matchCriteriaId":"0723AFEB-F12C-4AF8-8B71-1D367A849D13"},{"vulnerable":false,"criteria":"cpe:2.3:a:opentext:opentext_firstclass:8.0:*:*:*:*:*:*:*","matchCriteriaId":"E6E9AC1B-C4AC-48C2-A20D-74155DE6BFD5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0321.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/13415","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012478","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12350","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11877","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18424","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0321.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/13415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012478","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12350","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11877","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18424","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2497","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:web_page_generator:01_00:*:*:*:*:*:*:*","matchCriteriaId":"C09F98F2-D33A-4257-86EC-5DE0A9AF8D5E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:web_page_generator:01_01_c:*:*:*:*:*:*:*","matchCriteriaId":"70CC5E83-D324-4659-85E6-7F77830817F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:web_page_generator:02_00:*:*:*:*:*:*:*","matchCriteriaId":"122CE2A2-646F-43D0-AE11-9533D0338F23"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:web_page_generator:02_00_c:*:*:*:*:*:*:*","matchCriteriaId":"26642E32-CFB8-42CD-BE5E-7A454F303440"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:03_00:*:*:*:*:*:*:*","matchCriteriaId":"21B3F6B6-A108-44E7-9007-40503A8273D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:03_02_c:*:*:*:*:*:*:*","matchCriteriaId":"98ACE5A9-3665-45B4-B5FF-AE0E8D6DE4FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:03_03:*:*:*:*:*:*:*","matchCriteriaId":"B56FE773-2894-4C58-A671-937308BBC8A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:03_03_c:*:*:*:*:*:*:*","matchCriteriaId":"F8E93487-85C4-4A82-84AF-E03D261E7A90"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:03_03_d:*:*:*:*:*:*:*","matchCriteriaId":"AF79AEA8-F780-48A2-BCEE-6EF0B1C4EDB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:04_00:*:*:*:*:*:*:*","matchCriteriaId":"4E907D7F-F545-4B19-82C8-D3FBD2985BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:04_00_c:*:*:*:*:*:*:*","matchCriteriaId":"84FFC74E-3FD4-4E72-84CE-B84F1AB5A2F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:04_01:*:*:*:*:*:*:*","matchCriteriaId":"6B3C2E2D-FA85-406D-816C-CB668142C72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:04_01_b:*:*:*:*:*:*:*","matchCriteriaId":"28656ACA-6C42-439B-B172-697353530C89"}]}]}],"references":[{"url":"http://secunia.com/advisories/12150","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-003_e/index-e.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8264","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10818","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16822","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-003_e/index-e.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16822","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2498","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to determine internal directory structures via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator:01_00:*:*:*:*:*:*:*","matchCriteriaId":"C09F98F2-D33A-4257-86EC-5DE0A9AF8D5E"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator:01_01_c:*:*:*:*:*:*:*","matchCriteriaId":"70CC5E83-D324-4659-85E6-7F77830817F6"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator:02_00:*:*:*:*:*:*:*","matchCriteriaId":"122CE2A2-646F-43D0-AE11-9533D0338F23"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator:02_00_c:*:*:*:*:*:*:*","matchCriteriaId":"26642E32-CFB8-42CD-BE5E-7A454F303440"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:03_00:*:*:*:*:*:*:*","matchCriteriaId":"21B3F6B6-A108-44E7-9007-40503A8273D4"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:03_02_c:*:*:*:*:*:*:*","matchCriteriaId":"98ACE5A9-3665-45B4-B5FF-AE0E8D6DE4FF"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:03_03:*:*:*:*:*:*:*","matchCriteriaId":"B56FE773-2894-4C58-A671-937308BBC8A4"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:03_03_c:*:*:*:*:*:*:*","matchCriteriaId":"F8E93487-85C4-4A82-84AF-E03D261E7A90"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:03_03_d:*:*:*:*:*:*:*","matchCriteriaId":"AF79AEA8-F780-48A2-BCEE-6EF0B1C4EDB8"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:04_00:*:*:*:*:*:*:*","matchCriteriaId":"4E907D7F-F545-4B19-82C8-D3FBD2985BF0"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:04_00_c:*:*:*:*:*:*:*","matchCriteriaId":"84FFC74E-3FD4-4E72-84CE-B84F1AB5A2F6"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:04_01:*:*:*:*:*:*:*","matchCriteriaId":"6B3C2E2D-FA85-406D-816C-CB668142C72A"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:04_01_b:*:*:*:*:*:*:*","matchCriteriaId":"28656ACA-6C42-439B-B172-697353530C89"}]}]}],"references":[{"url":"http://secunia.com/advisories/12150","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-003_e/index-e.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8263","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10818","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16822","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-003_e/index-e.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8263","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10818","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16822","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2499","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier allows remote attackers to cause a denial of service via unknown attack vectors when a web site is \"improperly accessed.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator:01_00:*:*:*:*:*:*:*","matchCriteriaId":"C09F98F2-D33A-4257-86EC-5DE0A9AF8D5E"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator:01_01_c:*:*:*:*:*:*:*","matchCriteriaId":"70CC5E83-D324-4659-85E6-7F77830817F6"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator:02_00:*:*:*:*:*:*:*","matchCriteriaId":"122CE2A2-646F-43D0-AE11-9533D0338F23"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator:02_00_c:*:*:*:*:*:*:*","matchCriteriaId":"26642E32-CFB8-42CD-BE5E-7A454F303440"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:03_00:*:*:*:*:*:*:*","matchCriteriaId":"21B3F6B6-A108-44E7-9007-40503A8273D4"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:03_02_c:*:*:*:*:*:*:*","matchCriteriaId":"98ACE5A9-3665-45B4-B5FF-AE0E8D6DE4FF"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:03_03:*:*:*:*:*:*:*","matchCriteriaId":"B56FE773-2894-4C58-A671-937308BBC8A4"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:03_03_c:*:*:*:*:*:*:*","matchCriteriaId":"F8E93487-85C4-4A82-84AF-E03D261E7A90"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:03_03_d:*:*:*:*:*:*:*","matchCriteriaId":"AF79AEA8-F780-48A2-BCEE-6EF0B1C4EDB8"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:04_00:*:*:*:*:*:*:*","matchCriteriaId":"4E907D7F-F545-4B19-82C8-D3FBD2985BF0"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:04_00_c:*:*:*:*:*:*:*","matchCriteriaId":"84FFC74E-3FD4-4E72-84CE-B84F1AB5A2F6"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:04_01:*:*:*:*:*:*:*","matchCriteriaId":"6B3C2E2D-FA85-406D-816C-CB668142C72A"},{"vulnerable":false,"criteria":"cpe:2.3:a:hitachi:web_page_generator_enterprise:04_01_b:*:*:*:*:*:*:*","matchCriteriaId":"28656ACA-6C42-439B-B172-697353530C89"}]}]}],"references":[{"url":"http://secunia.com/advisories/12150","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-002_e/index-e.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8262","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10817","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16821","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12150","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.hitachi-support.com/security_e/vuls_e/HS04-002_e/index-e.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8262","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10817","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16821","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2500","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in IlohaMail before 0.8.14-rc1 has unknown impact and attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.7.0:*:*:*:*:*:*:*","matchCriteriaId":"741553BB-B075-4745-A32F-1C76267CFB97"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"3D2406C5-63DD-40ED-9DAA-1B8F7A219311"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"DA7AA4A5-3424-467B-9C7A-A6A194A4530E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.7.3:*:*:*:*:*:*:*","matchCriteriaId":"BD15B0BD-4F55-4621-9647-83278498F852"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.7.4:*:*:*:*:*:*:*","matchCriteriaId":"05C47E86-3A40-44F9-BA77-CCF71299FBA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.7.4.2:*:*:*:*:*:*:*","matchCriteriaId":"442C1FD4-0B39-4A43-BB2F-CD36CB35FAE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.7.5:*:*:*:*:*:*:*","matchCriteriaId":"378D7F7A-1DD3-410C-B75C-DF606B36A645"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.7.6:*:*:*:*:*:*:*","matchCriteriaId":"357383D5-9425-4AF1-996E-4FEDE521895B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.7.7:*:*:*:*:*:*:*","matchCriteriaId":"087C3A94-440E-44D8-8E96-4E5A4FBC43DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.7.8:*:*:*:*:*:*:*","matchCriteriaId":"117E2B9F-CB17-42D4-B253-095A1ECA7AAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.7.9:*:*:*:*:*:*:*","matchCriteriaId":"32568CBA-0D60-4D41-A7B7-891E4A0FC5C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.8.6:*:*:*:*:*:*:*","matchCriteriaId":"6E872C6F-13C0-4C23-83B0-0ED1F125E2A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.8.7:*:*:*:*:*:*:*","matchCriteriaId":"D9396082-5C2E-4BC8-9C95-939177A0008B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.8.8:*:*:*:*:*:*:*","matchCriteriaId":"3D1385D0-2ACB-479B-B946-000EF4482E4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.8.9:*:*:*:*:*:*:*","matchCriteriaId":"2EE1635F-5270-40E3-83EC-9E24C6C6BC72"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.8.10:*:*:*:*:*:*:*","matchCriteriaId":"5FA4CF33-095A-4E52-A65B-9836471487D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.8.11:*:*:*:*:*:*:*","matchCriteriaId":"88C4F32A-43C4-4C3B-8D8A-BCC729BC8035"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.8.12:*:*:*:*:*:*:*","matchCriteriaId":"970C1CDA-7D90-4C6C-A84C-717C8985B1CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:ilohamail:ilohamail:0.8.13:*:*:*:*:*:*:*","matchCriteriaId":"4A4D5F8A-D8CF-45C5-8EE3-ED2335E14324"}]}]}],"references":[{"url":"http://secunia.com/advisories/13413","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=54027&release_id=288409","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/12292","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11872","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18426","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13413","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=54027&release_id=288409","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/12292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11872","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2501","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via (1) a long command string or (2) a long string to the MEIMAP service and then terminating the connection."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_enterprise:1.01:*:*:*:*:*:*:*","matchCriteriaId":"724E8638-CF5A-480B-89D7-0E029A0C5965"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable_professional:1.52:*:*:*:*:*:*:*","matchCriteriaId":"88435083-D7A8-4679-BEB1-4B6526454C3D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-11/0349.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13318","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012327","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.hat-squad.com/en/000102.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/12135","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12136","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11755","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18285","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18286","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-11/0349.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13318","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012327","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.hat-squad.com/en/000102.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/12135","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12136","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11755","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18285","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18286","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2502","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:im-switch:im-switch:*:*:*:*:*:*:*:*","matchCriteriaId":"222548A7-BC2C-467B-B9CA-A7B8AC7EB28B"}]}]}],"references":[{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126940","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0407-advisories/fedora_im-switch_tempfile_race.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12037","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7772","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10717","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16682","source":"cve@mitre.org"},{"url":"http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126940","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0407-advisories/fedora_im-switch_tempfile_race.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10717","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16682","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2503","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"INweb Mail Server 2.40 allows remote attackers to cause a denial of service (crash) via a large number of connect/disconnect actions to the (1) POP3 and (2) SMTP services."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:inweb:mail_server:2.40:*:*:*:*:*:*:*","matchCriteriaId":"309587F7-CCAA-49F9-A104-DC839F46A4F8"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/inwebmail.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12056","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010680","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7770","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10719","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16683","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/inwebmail.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7770","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10719","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16683","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2504","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.8.0:*:*:*:*:*:*:*","matchCriteriaId":"437D2888-340C-48AB-815E-C04E5DE44CAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"46604A07-FBB0-4111-8B1C-2D01086BBB71"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.8.2:*:*:*:*:*:*:*","matchCriteriaId":"3AD17AD0-27FE-49F5-A23D-2DE672D87C17"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.8.3:*:*:*:*:*:*:*","matchCriteriaId":"4141E02E-C2DA-42C0-ABAB-62AFE4F869AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.8.4:*:*:*:*:*:*:*","matchCriteriaId":"32AA5447-4879-41A7-8F92-CAB0C3CD5E6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:6.8.5:*:*:*:*:*:*:*","matchCriteriaId":"2A9121D0-504E-444B-94C3-0E5C240376C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:alt-n:mdaemon:7.2:*:*:*:*:*:*:*","matchCriteriaId":"BA25D7ED-BA8E-45E0-9399-B85499EF74D5"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-11/0385.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1324.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1353.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13225","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012350","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/12158","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11736","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18287","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-11/0385.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1324.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1353.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13225","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012350","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/12158","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11736","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18287","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2505","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause a denial of service (memory consumption and crash) by sending repeated GET or POST requests that trigger error messages that use long strings of data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:5.0:*:*:*:*:*:*:*","matchCriteriaId":"C0B3D372-BD14-4FF9-802B-116CAE39E596"},{"vulnerable":true,"criteria":"cpe:2.3:a:macromedia:coldfusion:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B79C39FD-D9A0-4CA4-BF37-D94D9F20E4C1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0184.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10163","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15895","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0184.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10163","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15895","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2506","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unparsed web content delivery vulnerability in WIKINDX before 0.9.9g allows remote attackers to obtain sensitive information via a direct HTTP request to the config.inc file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wikindx:wikindx:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A89DC407-27EA-49B0-98A4-4399044228D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikindx:wikindx:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"D9838DBB-56D6-4529-9EC7-2715FA774290"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikindx:wikindx:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"353790C3-B87D-45BD-9F5B-2602E0FD7E4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikindx:wikindx:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"FF1EC898-CE10-4E5B-8601-8C37E3C94EDF"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikindx:wikindx:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"51EB7436-9A62-47F0-B958-1FA3D88F114C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikindx:wikindx:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"F4A00DF0-4504-4993-BBB7-061B3124BD36"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikindx:wikindx:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"2930B102-15D1-403D-B3FC-A94915E10EC4"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikindx:wikindx:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"96FE1F6D-4621-4336-934B-F29531FB539A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikindx:wikindx:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"B67AF0BD-D3E4-4D7E-88FC-FD85A4B4B32A"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikindx:wikindx:0.9.9b:*:*:*:*:*:*:*","matchCriteriaId":"10B8719C-62D6-4A03-9580-DCCFBE5D6F24"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikindx:wikindx:0.9.9c:*:*:*:*:*:*:*","matchCriteriaId":"7D1317BC-E44F-4137-B982-FA280EAC7552"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikindx:wikindx:0.9.9d:*:*:*:*:*:*:*","matchCriteriaId":"787ECB90-ABBC-4FF1-A801-831AE7159442"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikindx:wikindx:0.9.9e:*:*:*:*:*:*:*","matchCriteriaId":"DA4DAC99-37E7-42AB-86B0-71645731179C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wikindx:wikindx:0.9.9f:*:*:*:*:*:*:*","matchCriteriaId":"560B0534-5BEC-49A5-8E3E-F9874A6DF416"}]}]}],"references":[{"url":"http://secunia.com/advisories/11394","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=231421","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/5401","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15885","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11394","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=231421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/5401","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15885","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2507","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote attackers to read arbitrary files via an absolute pathname in the next_file parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wvc11b:2.10:*:*:*:*:*:*:*","matchCriteriaId":"2482D967-1AEF-4784-B198-25C64F58B3BD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0103.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11811/","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010489","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7112","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10476","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16339","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0103.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11811/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7112","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10476","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16339","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2508","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote attackers to inject arbitrary web script or HTML via the next_file parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wvc11b:2.10:*:*:*:*:*:*:*","matchCriteriaId":"2482D967-1AEF-4784-B198-25C64F58B3BD"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0215.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11881","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010424","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10533","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16415","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0215.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010424","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16415","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2509","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads 6.2.3 and 6.5 allow remote attackers to inject arbitrary web script or HTML via the Cat parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"858FAA03-DD05-472D-9F67-3089262F5E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.5:*:*:*:*:*:*:*","matchCriteriaId":"66D3CCE6-909B-46F4-AD8F-603E433C01D2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/13452","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012503","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/12365","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/12366","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/12367","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11900","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18432","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/13452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/12365","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/12366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/12367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18432","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2510","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to inject arbitrary web script or HTML via the Cat parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.0:*:*:*:*:*:*:*","matchCriteriaId":"65952A65-78AC-4239-9D15-BA850AF64598"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"9DFF7A22-25CB-4D5E-BA1B-E10E407DA515"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.0.2:*:*:*:*:*:*:*","matchCriteriaId":"094040BF-4C59-4266-9683-76C59D332F16"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F02151FE-89D6-4FB5-82E2-50A2F1046341"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.1:*:*:*:*:*:*:*","matchCriteriaId":"11E1B205-864C-4FAD-8891-12FBAC0E090F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"047CFF77-7616-41A2-9879-EA0E33B4922C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.2:*:*:*:*:*:*:*","matchCriteriaId":"6B321E2E-4AD3-4236-918A-F87804990FCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2232ED2E-0323-4DBB-8540-98BD52750025"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.2.2:*:*:*:*:*:*:*","matchCriteriaId":"895472F7-D0F8-4C6A-95C6-15963652ABEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.2.3:*:*:*:*:*:*:*","matchCriteriaId":"858FAA03-DD05-472D-9F67-3089262F5E82"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.3:*:*:*:*:*:*:*","matchCriteriaId":"8CAAB6C4-770C-4BC3-9D72-FDA7FD223CF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.3.1:*:*:*:*:*:*:*","matchCriteriaId":"E5D35A71-2F85-4F33-9480-81EE3EB0CEE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.4:*:*:*:*:*:*:*","matchCriteriaId":"3E52E29B-9461-4D62-8CCA-6F12DEB63EC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.4.1:*:*:*:*:*:*:*","matchCriteriaId":"4F82ADBA-67A1-47E8-8D09-21138BDE84AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.4.2:*:*:*:*:*:*:*","matchCriteriaId":"FD0DFCB9-3033-4509-BEDC-2B032524C4CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.4.3:*:*:*:*:*:*:*","matchCriteriaId":"124A5853-5C97-412B-B55B-7430B23565DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubbcentral:ubb.threads:6.4.4:*:*:*:*:*:*:*","matchCriteriaId":"E0ED5EF0-FF8B-4C4B-8157-FBCBF1B34C5D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13452","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012503","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/12364","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/11900","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18432","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/13452","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012503","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/12364","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/11900","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18432","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2511","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the year, (2) month, and (3) day parameters in calendar.php; (4) the cid and (5) url parameters in index.php; (6) the cid parameter in annoucement.php; (7) the cid parameter in news.php; (8) the cid parameter in contents.php; (9) the q parameter in search.php; and (10) the country parameter in register.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3.2","matchCriteriaId":"07FEC555-10D0-408F-B7EE-3745728856AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:3.7:*:*:*:*:*:*:*","matchCriteriaId":"BE39E96D-B870-49FB-8C7C-7E829BA916B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9C0D7706-EEB2-4898-A0EA-7BD198965E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:4.1:*:*:*:*:*:*:*","matchCriteriaId":"356E5CEC-CCBD-4438-992A-29B53F3F6A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:4.2:*:*:*:*:*:*:*","matchCriteriaId":"389B778A-EB0A-4BEC-9023-2190BCDAB746"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D27F4000-ED33-48F9-92BA-2629C5BAD709"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AE7A0D86-BA93-4889-9242-A535C8F53E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57026D15-982E-4816-A4CB-960852D7006F"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"79713BBA-FC4F-4445-B888-656A4DF6C2B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"CE1D9D8F-FD72-4B51-817A-7A807750D3B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"156DC7CD-FFEA-4225-BE58-6DEFEDCB1730"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"92241B71-C6B6-4B85-96A8-726CC04E3F4A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0042.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12751","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1006351","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/10585","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/10587","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/10588","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/10589","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/10590","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/11405","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11338","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11339","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17638","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17639","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1006351","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/10585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/10587","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/10588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/10589","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/10590","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/11405","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11339","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17638","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17639","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2512","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF (\"%0d%0a\") sequences in the PHPSESSID parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:*:*:*:*:*:*:*:*","versionEndIncluding":"5.3.2","matchCriteriaId":"07FEC555-10D0-408F-B7EE-3745728856AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:3.7:*:*:*:*:*:*:*","matchCriteriaId":"BE39E96D-B870-49FB-8C7C-7E829BA916B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:4.0:*:*:*:*:*:*:*","matchCriteriaId":"9C0D7706-EEB2-4898-A0EA-7BD198965E73"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:4.1:*:*:*:*:*:*:*","matchCriteriaId":"356E5CEC-CCBD-4438-992A-29B53F3F6A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:4.2:*:*:*:*:*:*:*","matchCriteriaId":"389B778A-EB0A-4BEC-9023-2190BCDAB746"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D27F4000-ED33-48F9-92BA-2629C5BAD709"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AE7A0D86-BA93-4889-9242-A535C8F53E3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"57026D15-982E-4816-A4CB-960852D7006F"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:5.1:*:*:*:*:*:*:*","matchCriteriaId":"79713BBA-FC4F-4445-B888-656A4DF6C2B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:5.2:*:*:*:*:*:*:*","matchCriteriaId":"CE1D9D8F-FD72-4B51-817A-7A807750D3B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:5.3:*:*:*:*:*:*:*","matchCriteriaId":"156DC7CD-FFEA-4225-BE58-6DEFEDCB1730"},{"vulnerable":true,"criteria":"cpe:2.3:a:codeworx_technologies:dcp-portal:5.3.1:*:*:*:*:*:*:*","matchCriteriaId":"92241B71-C6B6-4B85-96A8-726CC04E3F4A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0042.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12751","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011481","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10591","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11340","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17640","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0042.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12751","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011481","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10591","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17640","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2513","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via a long SELECT command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pmail:pegasus:4.01:*:*:*:*:*:*:*","matchCriteriaId":"D82F84A4-A7F1-4D3D-9473-BFCEC869BDD3"}]}]}],"references":[{"url":"http://home.kabelfoon.nl/~jaabogae/han/m_401b.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18295","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/663","source":"cve@mitre.org"},{"url":"http://home.kabelfoon.nl/~jaabogae/han/m_401b.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18295","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/663","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2514","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in modules/private_messages/index.php in PowerPortal 1.x allows remote attackers to inject arbitrary web script or HTML via the (1) SUBJECT or (2) MESSAGE field."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:powerportal:powerportal:1.1b:*:*:*:*:*:*:*","matchCriteriaId":"7894AF63-7158-49B6-957C-0F95628AF78E"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerportal:powerportal:1.3:*:*:*:*:*:*:*","matchCriteriaId":"D06B14A8-85BF-49EF-B261-FD70F05A2D8B"},{"vulnerable":true,"criteria":"cpe:2.3:a:powerportal:powerportal:1.3b:*:*:*:*:*:*:*","matchCriteriaId":"F62FED84-52E1-466B-9EE0-6679A84ED625"}]}]}],"references":[{"url":"http://securitytracker.com/id?1010802","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8319","source":"cve@mitre.org"},{"url":"http://www.secure4arab.com/forum/showthread.php?t=302","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/unixfocus/5TP0O2ADFK.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10835","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16838","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010802","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.secure4arab.com/forum/showthread.php?t=302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/unixfocus/5TP0O2ADFK.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2515","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in VMware Workstation 4.5.2 build-8848, if running with elevated privileges, might allow local users to execute arbitrary code via format string specifiers in command line arguments. NOTE: it is not clear if there are any default or typical circumstances under which VMware would be running with privileges beyond those already available to the attackers, so this might not be a vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vmware:workstation:4.5.2_build_8848:*:*:*:*:*:*:*","matchCriteriaId":"FC8F9694-8556-4990-A867-592D6A927498"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1320.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/12169","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11737","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18297","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1320.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/12169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18297","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2516","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET command with a large number of \"./\" sequences followed by \"../\" sequences."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myserver:myserver:*:*:*:*:*:*:*:*","versionEndIncluding":"0.7","matchCriteriaId":"22DD7C3B-E87D-4A38-A925-393184B14677"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0052.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/12561","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011278","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=267444","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/10001","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11189","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17390","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0052.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/12561","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=267444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/10001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17390","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2517","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"myServer 0.7.1 allows remote attackers to cause a denial of service (crash) via a long HTTP POST request in a View=Logon operation to index.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:myserver:myserver:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"5BAF4CE1-A6C0-4986-B26D-F459EB34BE94"}]}]}],"references":[{"url":"http://fux0r.phathookups.com/advisory/sp-x14-advisory.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12640","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011427","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=270736","source":"cve@mitre.org","tags":["Tool Signature"]},{"url":"http://www.osvdb.org/10333","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17496","source":"cve@mitre.org"},{"url":"http://fux0r.phathookups.com/advisory/sp-x14-advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011427","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=270736","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Tool Signature"]},{"url":"http://www.osvdb.org/10333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17496","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2518","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gattaca Server 2003 1.1.10.0 allows remote attackers to obtain sensitive information via (1) a trailing null byte (\"%00\") to a URL or (2) an invalid LANGUAGE parameter to web.tmpl, which reveals the full installation path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:geeos_team:gattaca_server_2003:1.1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"19FFCAAD-7D55-4BB3-AC36-BC32A684422D"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/12071","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010703","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7922","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/7923","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10729","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16699","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16700","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/12071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7922","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/7923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10729","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16699","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2519","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gattaca Server 2003 1.1.10.0 allows remote attackers to cause a denial of service (CPU consumption) via directory specifiers in the LANGUAGE parameter to (1) index.tmpl and (2) web.tmpl, such as (a) slash \"/\", (b) backslash \"\\\", (c) dot \".\",, (d) dot dot \"..\", and (e) internal slash \"lang//en\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:geeos_team:gattaca_server_2003:1.1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"19FFCAAD-7D55-4BB3-AC36-BC32A684422D"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12071","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010703","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7923","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10728","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16700","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7923","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16700","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2520","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"POP3 protocol in Gattaca Server 2003 1.1.10.0 allows remote authenticated users to cause a denial of service (application crash) via a large numeric value in the (1) LIST, (2) RETR, or (3) UIDL commands."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:geeos_team:gattaca_server_2003:1.1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"19FFCAAD-7D55-4BB3-AC36-BC32A684422D"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12071","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010703","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7925","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10728","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16703","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10728","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2521","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mail server in Gattaca Server 2003 1.1.10.0 allows remote attackers to perform a denial of service (application crash) via a large number of connections to TCP port (1) 25 (SMTP) or (2) 110 (POP)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:geeos_team:gattaca_server_2003:1.1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"19FFCAAD-7D55-4BB3-AC36-BC32A684422D"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12071","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010703","source":"cve@mitre.org"},{"url":"http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7925","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16703","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7925","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16703","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2522","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in web.tmpl in Gattaca Server 2003 1.1.10.0 allows remote attackers to inject arbitrary web script or HTML via the (1) template or (2) language parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:geeos_team:gattaca_server_2003:1.1.10.0:*:*:*:*:*:*:*","matchCriteriaId":"19FFCAAD-7D55-4BB3-AC36-BC32A684422D"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12071","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010703","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7927","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10731","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16701","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12071","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010703","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gattaca-server.com/cgi-bin/yabb/YaBB.pl?board=gattaca_discussion%3Baction=display%3Bnum=1091194176%3Bstart=0#0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7927","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16701","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2523","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the msg command (cat_message function in msg.c) in OpenFTPD 0.30.2 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in the message argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openftpd:openftpd_ftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"0.30.2","matchCriteriaId":"6D41EFCD-999C-437E-AC75-73731127B974"},{"vulnerable":true,"criteria":"cpe:2.3:a:openftpd:openftpd_ftp_server:0.29.4:*:*:*:*:*:*:*","matchCriteriaId":"8F1EEE57-F8BB-4DB1-B38A-1EF570D0ECC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:openftpd:openftpd_ftp_server:0.30:*:*:*:*:*:*:*","matchCriteriaId":"825DFEE8-7597-4988-8515-1AFEC0134ACC"},{"vulnerable":true,"criteria":"cpe:2.3:a:openftpd:openftpd_ftp_server:0.30.1:*:*:*:*:*:*:*","matchCriteriaId":"5B8F6249-E794-4F85-A409-ADA0B672ED2A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-07/0350.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0017.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12174","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010823","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.openftpd.org:9673/openftpd","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8261","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10830","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16843","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-07/0350.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0017.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010823","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.openftpd.org:9673/openftpd","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8261","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10830","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16843","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2524","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"clogin.php in Benchmark Designs' WHM AutoPilot 2.4.5 and earlier allows remote attackers to obtain plaintext username and password credentials by using the clogin_e and base64_encode functions to encode the desired user ID in the c parameter, then read the plaintext values in the resulting form."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:whm_autopilot:whm_autopilot:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"C809BDA5-4EA2-4516-B223-BCB1D0541837"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1310.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12200","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010833","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/8279","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10846","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16849","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1310.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/8279","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16849","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2525","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in compat.php in Serendipity before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the searchTerm variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.3:*:*:*:*:*:*:*","matchCriteriaId":"62233D77-9838-48AB-9A2D-F4EAA9E237EB"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.4:*:*:*:*:*:*:*","matchCriteriaId":"5A6F23BF-1C25-4A5E-9EC4-35A1A821A235"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.5:*:*:*:*:*:*:*","matchCriteriaId":"D2DCAE37-B4E9-490E-B441-CA6DD4DBBE28"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.5_pl1:*:*:*:*:*:*:*","matchCriteriaId":"F47E7512-FDB5-45F2-80B2-9BDAB856E856"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6:*:*:*:*:*:*:*","matchCriteriaId":"1E7930F0-59AD-45D6-B79D-92DB88EFF4D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6_pl1:*:*:*:*:*:*:*","matchCriteriaId":"75786060-F4F7-4491-8239-2081EBD3AE34"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6_pl2:*:*:*:*:*:*:*","matchCriteriaId":"742C3558-301D-4930-859F-7A8AAC231689"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6_pl3:*:*:*:*:*:*:*","matchCriteriaId":"5BAFBFFE-DCBB-460A-9E43-9CC5A1046755"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6_rc1:*:*:*:*:*:*:*","matchCriteriaId":"41A56925-4CE9-4843-94BE-E35DBF6CFA64"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.6_rc2:*:*:*:*:*:*:*","matchCriteriaId":"785115A5-380A-462E-88F6-718320DD7E34"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7:*:*:*:*:*:*:*","matchCriteriaId":"925A50B9-0CEF-42FF-8359-52BAFB4FEBB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7_beta1:*:*:*:*:*:*:*","matchCriteriaId":"62C28957-2724-406D-BAD4-DDCDE8CFA843"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7_beta2:*:*:*:*:*:*:*","matchCriteriaId":"5FE669F3-75FA-4237-8424-109FE52F59ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7_beta3:*:*:*:*:*:*:*","matchCriteriaId":"18814B9C-FE3E-4BB4-99E5-E3A88666B0F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7_beta4:*:*:*:*:*:*:*","matchCriteriaId":"E80A9CDA-C3E2-474F-8E43-440C72B0E8E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:s9y:serendipity:0.7_rc1:*:*:*:*:*:*:*","matchCriteriaId":"15CFA451-FFD4-452D-A744-5FDA80379BF4"}]}]}],"references":[{"url":"http://secunia.com/advisories/13357","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012383","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1076762&group_id=75065&atid=542822","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12177","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11790","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18322","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13357","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1076762&group_id=75065&atid=542822","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11790","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18322","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2526","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a .. (dot dot) in the Template parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:*:*:*:*:*:*:*:*","versionEndIncluding":"4.1","matchCriteriaId":"A7ADDDB0-A0B2-42A7-8235-A46A5A645442"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_directory_server:3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"A4CBA738-8969-4E5F-B538-1FBFAA432A91"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1311.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/10347","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010834","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IR52692","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IR53631","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oliverkarow.de/research/IDS_directory_traversal.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/8367","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10841","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16850","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1311.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/10347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010834","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=isg1IR52692","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg1IR53631","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oliverkarow.de/research/IDS_directory_traversal.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/8367","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10841","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16850","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2527","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"The DoS flaw affects slower machines and those with less ram quicker than higher specification machines. On very hi-spec machines, the flaw does not seem to be exploitable.","cveTags":[],"descriptions":[{"lang":"en","value":"The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause a denial of service (CPU and memory consumption) by repeatedly using the WinKey+\"U\" key combination, which causes multiple copies of Windows Utility Manager to be loaded more quickly than they can be closed when the copies detect that another instance is running."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*","matchCriteriaId":"4E7FD818-322D-4089-A644-360C33943D29"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*","matchCriteriaId":"580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"},{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*","matchCriteriaId":"B9687E6C-EDE9-42E4-93D0-C4144FEC917A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1313.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010836","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8368","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16851","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1313.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010836","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16851","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2528","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in sresult.exe in Webcam Watchdog 4.0.1a allows remote attackers to inject arbitrary web script or HTML via the cam parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webcam_corp:webcam_watchdog:4.0.1a:*:*:*:*:*:*:*","matchCriteriaId":"810339BF-88AE-4F31-907B-360D5642B34A"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/Webcam_watchdog_401a.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12199","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010824","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/8260","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10837","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16854","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/Webcam_watchdog_401a.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12199","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010824","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/8260","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10837","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16854","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2529","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gadu-Gadu allows remote attackers to bypass the \"image send\" option by sending a very small image file, which could be used in conjunction with image-related vulnerabilities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0:*:*:*:*:*:*:*","matchCriteriaId":"62C53DCD-9F92-4DBB-860E-9148B0F62696"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build149:*:*:*:*:*:*:*","matchCriteriaId":"47FF1D1D-473E-41DC-86E9-9DD8D7B969CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build150:*:*:*:*:*:*:*","matchCriteriaId":"244EC342-310F-4DF2-AEDF-9C02E3DA3AB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build151:*:*:*:*:*:*:*","matchCriteriaId":"F7961BD7-F28A-4F45-AD85-BE9538B87D74"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build152:*:*:*:*:*:*:*","matchCriteriaId":"8BDE9E06-3221-4D0F-9198-AF68159BCA66"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build153:*:*:*:*:*:*:*","matchCriteriaId":"545080CE-9717-481E-978A-1BFB787F722D"},{"vulnerable":true,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:6.0_build154:*:*:*:*:*:*:*","matchCriteriaId":"EF1B6F7D-9A0D-40C3-A071-366C80316CE0"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=110295777306493&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13450","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.man.poznan.pl/~security/gg-adv.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/12520","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11899","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18463","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110295777306493&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13450","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.man.poznan.pl/~security/gg-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/12520","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11899","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18463","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2530","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files via a filename with a large number of spaces followed by the real extension, which is not displayed in the dialog box."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:gadu-gadu:gadu-gadu_instant_messenger:*:*:*:*:*:*:*:*","matchCriteriaId":"EB080D26-16DA-46A3-A446-9793E0D4537A"}]}]}],"references":[{"url":"http://seclists.org/lists/vuln-dev/2004/Aug/0007.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1011037","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/9162","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11017","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17105","source":"cve@mitre.org"},{"url":"http://seclists.org/lists/vuln-dev/2004/Aug/0007.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1011037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/9162","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/11017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2531","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"X.509 Certificate Signature Verification in Gnu transport layer security library (GnuTLS) 1.0.16 allows remote attackers to cause a denial of service (CPU consumption) via certificates containing long chains and signed with large RSA keys."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:gnu:gnutls:1.0.16:*:*:*:*:*:*:*","matchCriteriaId":"4FBB8F2C-498D-4D31-A7D7-9991BABEA7A6"}]}]}],"references":[{"url":"http://lists.gnupg.org/pipermail/gnutls-dev/2004-August/000703.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12156","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010838","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.hornik.sk/SA/SA-20040802.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/8278","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10839","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16858","source":"cve@mitre.org"},{"url":"http://lists.gnupg.org/pipermail/gnutls-dev/2004-August/000703.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010838","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.hornik.sk/SA/SA-20040802.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/8278","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16858","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2532","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary commands by connecting to the server using the default administrator account, creating a new user, logging in as that new user, and then using the SITE EXEC command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0.0.11","matchCriteriaId":"BBE64EE8-9FCE-43EF-8DE3-0BC90DE982D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"0CB703F7-4806-4E3F-850E-ACC127892899"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.0.0.17:*:*:*:*:*:*:*","matchCriteriaId":"D6E3F784-86CB-46FC-97FB-1F43F140C9ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"022E0AF9-48FA-41C4-A109-4A3284A721BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"397E88A4-9E82-4818-B176-1C049993F1C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:3.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"D7DD649F-E290-4E8E-B61F-3950A2157938"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:4.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"51BE6EDE-C7BC-4730-9602-160A027D8F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:4.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7DE0A612-CF94-4DBE-808C-AE4CA9DD2C3B"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:4.1.0.3:*:*:*:*:*:*:*","matchCriteriaId":"F20066E0-BAE8-462F-86B5-A39DDB5D11C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:5.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"78B460EA-F742-4524-B213-BF92ABF82ABC"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:5.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"6E646B1A-167C-4DB6-84C1-77B071AC605A"},{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:5.0.0.9:*:*:*:*:*:*:*","matchCriteriaId":"EF068DF2-7298-4648-BA80-06321599E723"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0216.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/8877","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10886","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16925","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0216.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/8877","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10886","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2533","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Serv-U FTP Server 4.1 (possibly 4.0) allows remote attackers to cause a denial of service (application crash) via a SITE CHMOD command with a \"\\\\...\\\" followed by a short string, causing partial memory corruption, a different vulnerability than CVE-2004-2111."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:solarwinds:serv-u_file_server:4.1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"7DE0A612-CF94-4DBE-808C-AE4CA9DD2C3B"}]}]}],"references":[{"url":"http://secunia.com/advisories/10706","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009086","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/3713","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9675","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15251","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10706","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/3713","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9675","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15251","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2534","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection after a HEAD request, which allows remote attackers to perform a denial of service (connection consumption) by sending a large number HTTP HEAD requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:netfile_server:6.5.1.980:*:*:*:*:*:*:*","matchCriteriaId":"F77EC850-36C8-4894-A0C5-04362A46A06F"},{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:netfile_server:6.5.1.981:*:*:*:*:*:*:*","matchCriteriaId":"77FCE184-9359-4BF1-9B51-46F0AF184ED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:netfile_server:6.7.2.1085:*:*:*:*:*:*:*","matchCriteriaId":"17A4B6EA-66FA-4EA9-99CD-7E695243C67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:netfile_server:6.7.3:*:*:*:*:*:*:*","matchCriteriaId":"D25276A9-DE0E-4AFD-8A29-631AA337EC54"},{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:netfile_server:6.7.5:*:*:*:*:*:*:*","matchCriteriaId":"BC3D7C21-C05B-4DCA-99D7-A645A9F3B839"},{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:netfile_server:7.1:*:*:*:*:*:*:*","matchCriteriaId":"5839F588-ADF5-4C26-90F4-2D7EB8997C09"},{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:netfile_server:7.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A8AFCB0C-B7A5-47B9-8AE0-9AE7D779B376"},{"vulnerable":true,"criteria":"cpe:2.3:a:fastream:netfile_server:7.1.2:*:professional:*:*:*:*:*","matchCriteriaId":"DBB6A326-6BDA-4DF5-8D33-E9899E90E959"}]}]}],"references":[{"url":"http://secunia.com/advisories/13268","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012267","source":"cve@mitre.org"},{"url":"http://users.pandora.be/bratax/advisories/b003.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12101","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11687","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18192","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13268","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://users.pandora.be/bratax/advisories/b003.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12101","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18192","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2535","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is addressed in the following product update:\r\nMatthew Phillips, Sticker, 3.1.0 Beta 2","cveTags":[],"descriptions":[{"lang":"en","value":"The person-to-person secure messaging feature in Sticker before 3.1.0 beta 2 allows remote attackers to post messages to unauthorized private groups by using the group's public encryption key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_phillips:sticker:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.0_beta_1","matchCriteriaId":"05A0F74A-8A3D-4663-9E38-DA7C6DD02632"},{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_phillips:sticker:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"55748DC1-695D-4796-89AD-81D05D4779AE"}]}]}],"references":[{"url":"http://securitytracker.com/id?1011580","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/10662","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11333","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.tickertape.org/projects/sticker/release_notes-3.1.0b2.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17664","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011580","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/10662","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11333","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.tickertape.org/projects/sticker/release_notes-3.1.0b2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17664","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2536","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The exit_thread function (process.c) in Linux kernel 2.6 through 2.6.5 does not invalidate the per-TSS io_bitmap pointers if a process obtains IO access permissions from the ioperm function but does not drop those permissions when it exits, which allows other processes to access the per-TSS pointers, access restricted memory locations, and possibly gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"}]}]}],"references":[{"url":"http://secunia.com/advisories/11577","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.6","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5997","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10302","source":"cve@mitre.org"},{"url":"http://www.ussg.iu.edu/hypermail/linux/kernel/0405.0/1242.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.ussg.iu.edu/hypermail/linux/kernel/0405.0/1265.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16106","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ussg.iu.edu/hypermail/linux/kernel/0405.0/1242.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.ussg.iu.edu/hypermail/linux/kernel/0405.0/1265.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16106","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2537","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors, related to a \"Webmail security bug.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8a:*:*:*:*:*:*:*","matchCriteriaId":"51F3F0B2-8A75-42A6-9B4C-E1C2AA8EF27C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8b3:*:*:*:*:*:*:*","matchCriteriaId":"06B04968-6115-48D0-A315-D0445234DA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8d:*:*:*:*:*:*:*","matchCriteriaId":"A3213555-A5AC-4722-B2A9-26726803F813"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8f:*:*:*:*:*:*:*","matchCriteriaId":"31FAD6F1-2A15-4A28-9E33-33B67D627956"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8g3:*:*:*:*:*:*:*","matchCriteriaId":"96563C20-642A-47EA-8A4B-1DE9C1DD7377"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.9:*:*:*:*:*:*:*","matchCriteriaId":"439847AC-0ACD-4BDB-A935-3CE645366DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.9b2:*:*:*:*:*:*:*","matchCriteriaId":"AFAC85F6-EF7F-4051-AEC9-4FF21D77D1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0a2:*:*:*:*:*:*:*","matchCriteriaId":"90487000-A5DA-463B-82B2-5F83DBEC7154"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0c:*:*:*:*:*:*:*","matchCriteriaId":"8B654A1F-01A3-4F18-A1E6-9D924BF34397"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0e:*:*:*:*:*:*:*","matchCriteriaId":"4FDB3E97-547C-4531-81E9-B280E3DF39D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0g2:*:*:*:*:*:*:*","matchCriteriaId":"61DA6241-B456-4721-BAB7-A857FAA4B41B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.1a:*:*:*:*:*:*:*","matchCriteriaId":"74F72E7E-9561-4F82-8AFC-DB0DA32F8221"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.1c7:*:*:*:*:*:*:*","matchCriteriaId":"BBBC4664-D561-4DDD-AC69-003D498FE40B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.2a6:*:*:*:*:*:*:*","matchCriteriaId":"7324F0F8-6F15-4966-9589-7BDF502DA287"}]}]}],"references":[{"url":"http://netwinsite.com/surgemail/help/updates.htm","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13621","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/12559","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12086","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18648","source":"cve@mitre.org"},{"url":"http://netwinsite.com/surgemail/help/updates.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13621","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/12559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12086","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18648","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2538","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Direct static code injection vulnerability in the PCG simple application generation in phpCodeGenie before 3.0.2 allows remote authenticated users to execute arbitrary code via the (1) header or (2) footer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nilesh_dosooye:phpcodegenie:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.1","matchCriteriaId":"37F92F4C-BC18-4955-9502-ABC646C33099"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilesh_dosooye:phpcodegenie:1.1:*:*:*:*:*:*:*","matchCriteriaId":"56FBA378-B188-412F-BBC7-BE9C2D6D4A80"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilesh_dosooye:phpcodegenie:1.4:*:*:*:*:*:*:*","matchCriteriaId":"5A0C98D2-C787-47AD-AB77-49667CC10257"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilesh_dosooye:phpcodegenie:1.21:*:*:*:*:*:*:*","matchCriteriaId":"2A21F32A-7E92-45C5-9C4D-E85A47DBBD76"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilesh_dosooye:phpcodegenie:3.0_alpha:*:*:*:*:*:*:*","matchCriteriaId":"79CF7069-31DB-419C-A6B9-D558B2CA8C58"},{"vulnerable":true,"criteria":"cpe:2.3:a:nilesh_dosooye:phpcodegenie:3.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"36F986C6-4AB8-4B9B-AD36-2B1FE8C058B1"}]}]}],"references":[{"url":"http://phpcodegenie.sourceforge.net/phpCodeGenie/docs/ChangeLog.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12853","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011911","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/11102","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11524","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17848","source":"cve@mitre.org"},{"url":"http://phpcodegenie.sourceforge.net/phpCodeGenie/docs/ChangeLog.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12853","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011911","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/11102","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17848","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2539","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Network Appliance NetCache 5.2 and Data ONTAP 6.0 allows remote attackers to cause a denial of service (panic and reboot) and possibly other impacts via unknown attack vectors, possibly related to unspecified worms, as identified by bug ID"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:network_appliance:data_ontap:6.0:*:*:*:*:*:*:*","matchCriteriaId":"BA1BE98C-02AD-4DDA-86F7-B39CE8010DD8"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:network_appliance:netcache:5.2:*:*:*:*:*:*:*","matchCriteriaId":"AA4D2855-5764-46F0-BFC1-D03AE857B57F"}]}]}],"references":[{"url":"http://secunia.com/advisories/11516","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010013","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5732","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10319","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16032","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11516","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010013","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10319","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16032","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2540","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"readObject in (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.0 through 1.4.2_05 allows remote attackers to cause a denial of service (JVM unresponsive) via crafted serialized data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4:*:linux:*:*:*:*:*","matchCriteriaId":"32CA2101-45D2-41D8-A11A-506683EDC0DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4:*:solaris:*:*:*:*:*","matchCriteriaId":"2E449C78-3BFD-4F52-9EE2-3BC5FC27FBCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4:*:windows:*:*:*:*:*","matchCriteriaId":"3C4BAD5A-329C-4C6F-B517-E7C95EEAEB99"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.0_01:*:windows:*:*:*:*:*","matchCriteriaId":"64762803-D970-467D-A3B7-1879BC68E805"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.0_02:*:linux:*:*:*:*:*","matchCriteriaId":"AD97824E-C229-4530-A4E6-C4281E2580C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.0_02:*:solaris:*:*:*:*:*","matchCriteriaId":"B90BBCB8-7DF5-4801-8B43-197C2FB88823"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.0_02:*:windows:*:*:*:*:*","matchCriteriaId":"666FE53E-C775-4D7D-98E0-C8638B2F2FAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.0_03:*:linux:*:*:*:*:*","matchCriteriaId":"99A889BD-01D8-491E-882A-C65EEF6A952B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.0_03:*:solaris:*:*:*:*:*","matchCriteriaId":"7713E276-D273-4AAB-B6BF-16279354A054"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.0_03:*:windows:*:*:*:*:*","matchCriteriaId":"FCE8ADC0-49E9-4F56-9435-F823A1512F44"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.0_4:*:linux:*:*:*:*:*","matchCriteriaId":"8FAC216A-01DF-43CF-9430-4E979C950C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.0_4:*:solaris:*:*:*:*:*","matchCriteriaId":"F9D9F115-8E12-4658-95A6-FF70833DCAF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.0_4:*:windows:*:*:*:*:*","matchCriteriaId":"088448A2-83E7-4023-9575-520612B99634"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1:*:linux:*:*:*:*:*","matchCriteriaId":"C92F64D1-9916-44AC-8025-F116B70CD76A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1:*:solaris:*:*:*:*:*","matchCriteriaId":"DF21C410-30BF-423D-979F-7B5682573E04"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1:*:windows:*:*:*:*:*","matchCriteriaId":"BA9FCF82-886A-4C70-8107-FB5BE705DD45"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1_01:*:linux:*:*:*:*:*","matchCriteriaId":"50542C59-E3F7-476F-8938-0316BB3CE46F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1_01:*:solaris:*:*:*:*:*","matchCriteriaId":"28C890E0-7230-4831-BDD4-B054662FD0C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1_01:*:windows:*:*:*:*:*","matchCriteriaId":"89CF51EF-D1CC-44A7-80D7-954FE9866799"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1_02:*:linux:*:*:*:*:*","matchCriteriaId":"7BD5DADC-20C9-46CE-B190-589DA9813A4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1_02:*:solaris:*:*:*:*:*","matchCriteriaId":"E1C99007-713C-4AC4-A819-4C677B876D12"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1_02:*:windows:*:*:*:*:*","matchCriteriaId":"ADD9EE28-7D16-4CD6-9F33-ECC7073F7FFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1_03:*:linux:*:*:*:*:*","matchCriteriaId":"342972F6-E888-43E6-B3B5-3B70AC6DB58F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1_03:*:solaris:*:*:*:*:*","matchCriteriaId":"20F9F987-00B1-49D4-970A-98E0CAE05516"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.1_03:*:windows:*:*:*:*:*","matchCriteriaId":"726D5907-547A-492E-9C66-BBA08B12506C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2:*:linux:*:*:*:*:*","matchCriteriaId":"37F8AA83-3B27-4EB5-BC5E-E541248F61F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2:*:solaris:*:*:*:*:*","matchCriteriaId":"A315C2C4-A6ED-4E09-8B36-9903C35438CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2:*:windows:*:*:*:*:*","matchCriteriaId":"CFEA5E04-78E2-47E6-90B8-536845343084"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_01:*:linux:*:*:*:*:*","matchCriteriaId":"BF931660-BB60-4460-91E4-C4E63E46996D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_02:*:linux:*:*:*:*:*","matchCriteriaId":"3AF426F2-93EF-4F2C-AD0C-8AB40AD72364"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_03:*:linux:*:*:*:*:*","matchCriteriaId":"0998DD04-3BC7-4B64-89F5-C6FFECC2F9EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_03:*:solaris:*:*:*:*:*","matchCriteriaId":"B6A5803A-4AFF-4120-BF43-55DCE1B11172"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_03:*:windows:*:*:*:*:*","matchCriteriaId":"6819CEAB-536F-4E4D-8E69-934BD959759C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_04:*:linux:*:*:*:*:*","matchCriteriaId":"70DEC641-5BC0-45CF-BE6B-3B05E34A2DEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_04:*:solaris:*:*:*:*:*","matchCriteriaId":"55AD8FB0-7C9B-4631-B55F-5F0B8AC28431"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_04:*:windows:*:*:*:*:*","matchCriteriaId":"B048B00C-C447-4CD9-80E1-FAEEE0390F8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_05:*:linux:*:*:*:*:*","matchCriteriaId":"3F17436E-94D7-40C2-AA1C-947973E8B824"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_05:*:solaris:*:*:*:*:*","matchCriteriaId":"3B8B6F66-9D6E-4F64-B4E9-32B46E0B3190"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jdk:1.4.2_05:*:windows:*:*:*:*:*","matchCriteriaId":"6C77B29A-160F-44D6-B8E0-AFF4D9F4295F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4:*:linux:*:*:*:*:*","matchCriteriaId":"16EB847E-C18B-4B07-940D-C0E312D11365"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4:*:solaris:*:*:*:*:*","matchCriteriaId":"68727223-1523-467A-8AAA-ED3E4C6C4B61"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4:*:windows:*:*:*:*:*","matchCriteriaId":"682E551B-7B86-4161-84D5-6E1D9664A2A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_01:*:solaris:*:*:*:*:*","matchCriteriaId":"282FD7B0-6D3B-45A1-B717-15FB7A8128EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_01:*:windows:*:*:*:*:*","matchCriteriaId":"09F85CA0-99C0-489D-BFF7-45D97C9DFC09"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_02:*:linux:*:*:*:*:*","matchCriteriaId":"9E919686-B384-4C33-8264-18B5140BB526"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_02:*:solaris:*:*:*:*:*","matchCriteriaId":"A6980636-7B47-4AAF-B261-13E0704FABF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_02:*:windows:*:*:*:*:*","matchCriteriaId":"E14CBB9A-E9A4-4BAF-ADA9-DDCEEC93A0DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_03:*:linux:*:*:*:*:*","matchCriteriaId":"4B652361-1C41-4C95-B92D-658BF7EA3C71"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_03:*:solaris:*:*:*:*:*","matchCriteriaId":"54B0B095-269E-4566-BC50-60AAE568F2B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_03:*:windows:*:*:*:*:*","matchCriteriaId":"E25DC9C3-60E9-4DBE-BE90-D0B04B63791A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_04:*:linux:*:*:*:*:*","matchCriteriaId":"99D8A546-E5A7-4958-846B-3822A64F1EB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_04:*:solaris:*:*:*:*:*","matchCriteriaId":"888AE9B5-A998-4B59-99A3-F580A204D094"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.0_04:*:windows:*:*:*:*:*","matchCriteriaId":"BAC8313C-8808-407D-A8F5-38995260039D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:*:linux:*:*:*:*:*","matchCriteriaId":"B2F5A718-AB93-4C7F-80A8-9A90ECE2AC77"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:*:solaris:*:*:*:*:*","matchCriteriaId":"C78AAFC5-05A6-47A2-A3B2-1B032C9169F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:*:windows:*:*:*:*:*","matchCriteriaId":"8373EE84-FCAE-4CF7-BE9D-9588D05CA827"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update3:linux:*:*:*:*:*","matchCriteriaId":"15EEE9A7-2472-47EF-B27B-5EBB8019853C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update3:solaris:*:*:*:*:*","matchCriteriaId":"0E7A4D91-8AC7-4092-910D-7DB2A962CA7C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1:update3:windows:*:*:*:*:*","matchCriteriaId":"1CEBCC8A-4E92-4C7D-A237-11B582B7D01E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_01:*:linux:*:*:*:*:*","matchCriteriaId":"66004554-1B7E-4C6B-9BD8-344417DC6E37"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_01:*:solaris:*:*:*:*:*","matchCriteriaId":"1ADA6092-791D-4E94-954D-E3A7C944C1C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_01:*:windows:*:*:*:*:*","matchCriteriaId":"5A53C9BC-941F-4C33-853B-0847FED5555D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_02:*:linux:*:*:*:*:*","matchCriteriaId":"81F98FE5-EC95-42AF-B8A0-D1DB6E7F2039"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_02:*:solaris:*:*:*:*:*","matchCriteriaId":"C888E7A0-9B40-4844-AE51-1A171E4C6A03"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_02:*:windows:*:*:*:*:*","matchCriteriaId":"6411CD53-1B04-4F13-82B6-F705FE74DAFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.1_07:*:windows:*:*:*:*:*","matchCriteriaId":"43DBA862-7CC3-4CCA-94C9-AC34F11DF962"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:linux:*:*:*:*:*","matchCriteriaId":"1D1C4B12-6949-4399-BC8D-3B018213FF0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:solaris:*:*:*:*:*","matchCriteriaId":"C2D0C960-CB1B-497A-AD00-23DAA9F1B091"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:*:windows:*:*:*:*:*","matchCriteriaId":"905D148D-1D5E-4B43-AA1C-9B2CA11C03FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update1:linux:*:*:*:*:*","matchCriteriaId":"6A6BFFD2-ECBC-4018-BABB-CA5F37530C62"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update1:solaris:*:*:*:*:*","matchCriteriaId":"FA51551F-38C8-457C-81FC-5F98722049B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update1:windows:*:*:*:*:*","matchCriteriaId":"51021C43-C439-4D09-AE5F-88A5FAFDBDD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update2:linux:*:*:*:*:*","matchCriteriaId":"CF77B446-426C-4480-9B9A-DD98F7ED82AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update2:solaris:*:*:*:*:*","matchCriteriaId":"0A82749B-D28A-4C59-B30F-63092B139C2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update2:windows:*:*:*:*:*","matchCriteriaId":"9705C47F-ED59-42A0-8B75-C534C7C982CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update3:linux:*:*:*:*:*","matchCriteriaId":"3F89801B-0FDF-4520-BDEE-ED6ED1BF49F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update3:solaris:*:*:*:*:*","matchCriteriaId":"886CC1D0-D7FB-4363-AC4E-AC8DFD37CBF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update3:windows:*:*:*:*:*","matchCriteriaId":"FC2844D6-9C67-4CAC-BCEB-0B15BEBC231F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update4:linux:*:*:*:*:*","matchCriteriaId":"82AD9323-B175-4A1B-A4E0-2EF8C60D39E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update4:solaris:*:*:*:*:*","matchCriteriaId":"A68926C4-4C4D-4BE9-8EF3-10C1E3479BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update4:windows:*:*:*:*:*","matchCriteriaId":"5F6BBD71-9910-457B-A884-7EABC3C34EC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update5:linux:*:*:*:*:*","matchCriteriaId":"ED0E85FE-C504-451C-BD01-2F942D4F67C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update5:solaris:*:*:*:*:*","matchCriteriaId":"7258FCF5-CBC2-4392-BDA9-142FD6E40E48"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:jre:1.4.2:update5:windows:*:*:*:*:*","matchCriteriaId":"8A7FC1CD-A1CF-4E8C-97EE-97231B8F22AA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2005-04/0113.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13271/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-57707-1","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20027","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2005-04/0113.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13271/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-57707-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20027","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2541","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cscope:cscope:15.5:*:*:*:*:*:*:*","matchCriteriaId":"E2F1D020-6884-4D6D-AB04-88119CB53F9E"}]}]}],"references":[{"url":"http://docs.info.apple.com/article.html?artnum=306172","source":"cve@mitre.org"},{"url":"http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13237","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20191","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20564","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/26235","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35462","source":"cve@mitre.org"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1064875&group_id=4664&atid=104664","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1064","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200606-10.xml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11920","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1101.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1102.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/18050","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/25159","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/2732","source":"cve@mitre.org"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490667","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10069","source":"cve@mitre.org"},{"url":"http://docs.info.apple.com/article.html?artnum=306172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/20191","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20564","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/26235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35462","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=1064875&group_id=4664&atid=104664","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1064","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200606-10.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1101.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1102.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/18050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/25159","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/2732","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=490667","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10069","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2542","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Dynix (formerly known as epixtech) WebPAC allow remote attackers to execute arbitrary SQL commands via unknown attack vectors, resulting in an ability to execute stored procedures, bypass login authentication, and cause an unspecified denial of service to backend databases."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dynix:webpac:*:*:*:*:*:*:*:*","matchCriteriaId":"9F1843FB-236C-4369-8F53-34D2D616D88B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0354.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011073","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9274","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11037","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17128","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0354.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011073","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9274","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17128","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2543","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Secure Computing Corporation Sidewinder G2 6.1.0.01 might allow remote attackers to cause a denial of service (proxy failure) via invalid traffic to the (1) T.120 or (2) RTSP proxy, or (3) invalid MIME messages to the mail filter.  NOTE: this might not be a vulnerability because the embedded monitoring sub-system automatically restarts after the failure."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder_g2:6.1.0.01:*:*:*:*:*:*:*","matchCriteriaId":"B2C8F4A9-4F9B-4A33-B463-1E92497F1CCD"}]}]}],"references":[{"url":"http://secunia.com/advisories/11632","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6232","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6233","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6234","source":"cve@mitre.org"},{"url":"http://www.securecomputing.com/pdf/SW61002Rel_Notes_0512.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16183","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16184","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16186","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/6232","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6233","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6234","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securecomputing.com/pdf/SW61002Rel_Notes_0512.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16186","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2544","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Admin Console in Secure Computing Corporation Sidewinder G2 6.1.0.01 exports private keys when exporting firewall certificates, which might allow attackers to obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder_g2:6.1.0.01:*:*:*:*:*:*:*","matchCriteriaId":"B2C8F4A9-4F9B-4A33-B463-1E92497F1CCD"}]}]}],"references":[{"url":"http://www.osvdb.org/6235","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securecomputing.com/pdf/SW61002Rel_Notes_0512.pdf","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24364","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6235","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securecomputing.com/pdf/SW61002Rel_Notes_0512.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24364","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2545","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service (SMTP proxy failure) via unknown attack vendors involving an \"extremely busy network.\"  NOTE: this might not be a vulnerability because the embedded monitoring sub-system automatically restarts after the failure."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:securecomputing:sidewinder_g2:6.1.0.01:*:*:*:*:*:*:*","matchCriteriaId":"B2C8F4A9-4F9B-4A33-B463-1E92497F1CCD"}]}]}],"references":[{"url":"http://secunia.com/advisories/11632","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6236","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securecomputing.com/pdf/SW61002Rel_Notes_0512.pdf","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/11632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6236","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securecomputing.com/pdf/SW61002Rel_Notes_0512.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2546","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple memory leaks in Samba before 3.0.6 allow attackers to cause a denial of service (memory consumption)."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  This issue did not affect the versions of Samba as distributed with Red Hat Enterprise Linux 3, or 4.  Red Hat Enterprise Linux 2.1 shipped with a version of Samba prior to 3.0.6, but we verified by code audit that it is not affected by this issue.","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.17:*:*:*:*:*:*:*","matchCriteriaId":"A3B50D9E-EA43-44BF-9176-610EC808B986"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.17:p1:*:*:*:*:*:*","matchCriteriaId":"BCBBF662-40C3-4280-BE79-9D7C36A6DF5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.17:p3:*:*:*:*:*:*","matchCriteriaId":"BDD6A6AE-C636-4131-807B-59F7784B7AB7"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.17:p4:*:*:*:*:*:*","matchCriteriaId":"8C6D63F5-B72C-445A-BC61-D52D6022481B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.17:p5:*:*:*:*:*:*","matchCriteriaId":"1ADD724A-1747-4678-A659-0A528B728C66"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p1:*:*:*:*:*:*","matchCriteriaId":"A3ABEA3A-8F88-4947-80A5-CF1459F5AC8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p10:*:*:*:*:*:*","matchCriteriaId":"86F85E94-9F94-457A-A606-35DB558484A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p2:*:*:*:*:*:*","matchCriteriaId":"1ED4704B-2422-43C9-A2E0-9851F56D4CEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p3:*:*:*:*:*:*","matchCriteriaId":"158D175A-E0D7-45EF-BDD2-D86F2E8F7766"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p4:*:*:*:*:*:*","matchCriteriaId":"7854FCEF-D1F8-4DEC-A6CB-C4470899F71C"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p5:*:*:*:*:*:*","matchCriteriaId":"36D8B675-C209-4D5A-8EA7-1B3515E930FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p6:*:*:*:*:*:*","matchCriteriaId":"4BCECF31-4C73-4ABA-9F84-D5DBA1DB1F50"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p7:*:*:*:*:*:*","matchCriteriaId":"2C5A1382-D147-43E5-8DB7-93B7A3B9AA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:1.9.18:p8:*:*:*:*:*:*","matchCriteriaId":"3A497A5D-96FC-490E-87EB-94C1BE7338A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0:*:*:*:*:*:*:*","matchCriteriaId":"245628A9-A5DC-403F-A781-7A066E9ECC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F681E4CC-B8D3-48A2-B93E-0363B22B059E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.0.5a:*:*:*:*:*:*:*","matchCriteriaId":"2BDD0125-4C47-404A-9DC0-2E923C66B4D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"DCACECDD-40F1-4A9B-8B8A-20565FEE3627"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.1a:*:*:*:*:*:*:*","matchCriteriaId":"19F65FF3-71F8-4278-A823-A6E0FF65D9F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.3a:*:*:*:*:*:*:*","matchCriteriaId":"614547F5-9C3F-489B-9B72-91B0FF646CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.7a:*:*:*:*:*:*:*","matchCriteriaId":"34DC3500-F8F0-46E1-B0AA-C2474CCB3DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.8a:*:*:*:*:*:*:*","matchCriteriaId":"75C86202-3150-440C-B048-BB039E9D3606"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.9:*:*:*:*:*:*:*","matchCriteriaId":"98CAF474-0C3A-4E49-8CF8-9DF14D84CDCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.10:*:*:*:*:*:*:*","matchCriteriaId":"8A3ABF97-93A2-48C3-898E-9DADD5614BF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.11:*:*:*:*:*:*:*","matchCriteriaId":"C92304DE-CFBB-4C03-AA7F-54DB3C14ECF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2.12:*:*:*:*:*:*:*","matchCriteriaId":"04F39AA5-9048-4EE9-B0F2-CE679C673F0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:2.2a:*:*:*:*:*:*:*","matchCriteriaId":"CC2AE5A9-62C5-4DCE-85B3-16F48695B3B4"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F84FB25B-5EA5-48DC-B528-E8CCF714C919"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"216145B7-4716-42F7-90DC-03884ECB2271"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"898968E5-577E-4B86-A804-EBEC67157A61"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*","matchCriteriaId":"920EF846-41D1-429D-AF0F-3D7950F93069"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8016DC4F-F410-4401-BDCC-91BE0D44D028"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DC94A2CF-85DF-4BB5-8F78-470A3454C3CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:*","matchCriteriaId":"632D2489-3B5E-466E-A6DF-1EF00303869B"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"9FC116E5-B739-4E18-AA51-FFF59EBCA08F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*","matchCriteriaId":"53AF1A2D-B0A2-4097-AD1D-DF3AF27171BA"},{"vulnerable":true,"criteria":"cpe:2.3:o:trustix:secure_linux:2.1:*:*:*:*:*:*:*","matchCriteriaId":"A67735E5-E43E-4164-BDB2-ADC6E0288E9F"}]}]}],"references":[{"url":"http://www.samba.org/samba/history/samba-3.0.6.html","source":"cve@mitre.org"},{"url":"http://www.trustix.org/errata/2004/0043","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17139","source":"cve@mitre.org"},{"url":"http://www.samba.org/samba/history/samba-3.0.6.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.trustix.org/errata/2004/0043","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17139","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2547","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.0c:*:*:*:*:*:*:*","matchCriteriaId":"87817AF2-201D-4A00-BCA2-FDBF716BFB12"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.0d:*:*:*:*:*:*:*","matchCriteriaId":"B76EAC7A-4BB3-4E38-9101-C5382C010E16"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.1a:*:*:*:*:*:*:*","matchCriteriaId":"0EB0A419-82B9-4801-A6CA-AB01E2E27451"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.1b:*:*:*:*:*:*:*","matchCriteriaId":"2B47ACEC-91A6-47DA-AF53-BB24A9A48B3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.1c:*:*:*:*:*:*:*","matchCriteriaId":"54EA3FA5-305E-4FB1-88C2-96B3C60BDE96"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.1d:*:*:*:*:*:*:*","matchCriteriaId":"D744A39C-6695-4F05-8E0A-233A9F000464"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.2a:*:*:*:*:*:*:*","matchCriteriaId":"78062477-35B1-490E-AA67-5B4D322B1684"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.2b:*:*:*:*:*:*:*","matchCriteriaId":"F5563478-FC8A-4FE6-9FA6-7A85A1D63827"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.2c:*:*:*:*:*:*:*","matchCriteriaId":"D5C2D087-9C3A-4D7A-83AB-5367C8CC6ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.3a:*:*:*:*:*:*:*","matchCriteriaId":"0490B62E-6F13-40E8-AB75-7B6D88BDBF81"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.3a_rc1:*:*:*:*:*:*:*","matchCriteriaId":"E5C49C51-FE9B-490B-B901-57D37735CCE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.3b:*:*:*:*:*:*:*","matchCriteriaId":"3246EA70-861C-4D6F-A1BF-4BCBB5FF933A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.3c:*:*:*:*:*:*:*","matchCriteriaId":"85FBF22E-94A9-429D-A879-78EE00FA2EB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.3d:*:*:*:*:*:*:*","matchCriteriaId":"3FE3E637-1198-4B4D-8A5B-F7E5DC48A8EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.3e:*:*:*:*:*:*:*","matchCriteriaId":"0AB1AE7C-16A2-4D85-BF27-82140DFFF631"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.3f:*:*:*:*:*:*:*","matchCriteriaId":"2D052EED-AB9C-4EB6-A45B-29B2D125D0CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.3g:*:*:*:*:*:*:*","matchCriteriaId":"550CED69-8A52-489E-B4AD-48C3B2C8DD13"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.3h:*:*:*:*:*:*:*","matchCriteriaId":"FEDC18DD-9D55-4D07-9157-5A925299FC02"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.3i:*:*:*:*:*:*:*","matchCriteriaId":"6A6BCA9B-569E-497F-8D51-7A953CA9EB79"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.3j:*:*:*:*:*:*:*","matchCriteriaId":"D7311BF0-CBCB-40F6-AB2B-014EC421DD9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.3k:*:*:*:*:*:*:*","matchCriteriaId":"F5CCE110-187E-424E-8D2A-E2EAEDD1606C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.3l:*:*:*:*:*:*:*","matchCriteriaId":"2260E333-8CCB-4536-B5F2-8885F8BB6B7A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.4a:*:*:*:*:*:*:*","matchCriteriaId":"5636090B-E382-42CF-8A05-0EE5BF36ACB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.4b:*:*:*:*:*:*:*","matchCriteriaId":"77DE0FB4-8AC2-487A-A73B-DBD9527657FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.4c:*:*:*:*:*:*:*","matchCriteriaId":"49B0E240-B9E0-4CFD-852C-51E00B5E8ECB"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.5a:*:*:*:*:*:*:*","matchCriteriaId":"0498C94D-B215-417A-971F-A2430393CAF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.5b:*:*:*:*:*:*:*","matchCriteriaId":"7FEDBD88-3242-4FCA-949A-32B13CF7D89F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.5c:*:*:*:*:*:*:*","matchCriteriaId":"5484C012-9DE1-4F48-B467-5FC9577F7EBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.5d:*:*:*:*:*:*:*","matchCriteriaId":"66F4BC6E-0E24-49F9-9160-E3A346E37E0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.5d2:*:*:*:*:*:*:*","matchCriteriaId":"66D4C2B3-4879-461D-B57C-B59AFC6B6310"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.5f:*:*:*:*:*:*:*","matchCriteriaId":"BECF5E0C-D2C0-4D6F-8FD6-BE6F0FA94887"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.6a:*:*:*:*:*:*:*","matchCriteriaId":"0575796D-59FC-4D55-B4BA-E4F332296CCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.6b:*:*:*:*:*:*:*","matchCriteriaId":"7A3FEAAF-6DFE-4288-A3D2-7EFE64417C5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.6d:*:*:*:*:*:*:*","matchCriteriaId":"A65A9997-D18E-4FB9-9E54-C3C83A03047F"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.6e:*:*:*:*:*:*:*","matchCriteriaId":"20FB3D3F-9BFC-441B-B974-AEB92C48D04E"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.6e2:*:*:*:*:*:*:*","matchCriteriaId":"A38C61D1-36CB-4A2F-B8AB-E12729915A5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.7a:*:*:*:*:*:*:*","matchCriteriaId":"CBDA0620-DBE8-4659-8B23-F300735F7078"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.7b3:*:*:*:*:*:*:*","matchCriteriaId":"C30D2CEC-CB08-4454-9305-A96BB92830CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8a:*:*:*:*:*:*:*","matchCriteriaId":"51F3F0B2-8A75-42A6-9B4C-E1C2AA8EF27C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8b3:*:*:*:*:*:*:*","matchCriteriaId":"06B04968-6115-48D0-A315-D0445234DA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8d:*:*:*:*:*:*:*","matchCriteriaId":"A3213555-A5AC-4722-B2A9-26726803F813"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8e:*:*:*:*:*:*:*","matchCriteriaId":"0EB5003E-B9BA-4DD0-98EE-C3AAFBF7BFB1"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8g3:*:*:*:*:*:*:*","matchCriteriaId":"96563C20-642A-47EA-8A4B-1DE9C1DD7377"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.9b2:*:*:*:*:*:*:*","matchCriteriaId":"AFAC85F6-EF7F-4051-AEC9-4FF21D77D1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:2.0a2:*:*:*:*:*:*:*","matchCriteriaId":"90487000-A5DA-463B-82B2-5F83DBEC7154"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:webmail:3.1d:*:*:*:*:*:*:*","matchCriteriaId":"282F56FD-7FAC-4450-B2EF-29DA7F27E83C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0056.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/11772","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.exploitlabs.com/files/advisories/EXPL-A-2004-002-surgmail.txt","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.netwinsite.com/surgemail/help/updates.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/6745","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/10483","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16319","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/11772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.exploitlabs.com/files/advisories/EXPL-A-2004-002-surgmail.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.netwinsite.com/surgemail/help/updates.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/6745","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/10483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16319","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2548","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to inject arbitrary web script or HTML via (a) a URI containing the script, or (b) the username field in the login form.  NOTE: it is possible that the first attack vector is resultant from the error message issue (CVE-2004-2547)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0a2","matchCriteriaId":"B907DFAA-E772-416A-AC6A-EB92CF871D92"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8a:*:*:*:*:*:*:*","matchCriteriaId":"51F3F0B2-8A75-42A6-9B4C-E1C2AA8EF27C"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8b3:*:*:*:*:*:*:*","matchCriteriaId":"06B04968-6115-48D0-A315-D0445234DA23"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8d:*:*:*:*:*:*:*","matchCriteriaId":"A3213555-A5AC-4722-B2A9-26726803F813"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8f:*:*:*:*:*:*:*","matchCriteriaId":"31FAD6F1-2A15-4A28-9E33-33B67D627956"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.8g3:*:*:*:*:*:*:*","matchCriteriaId":"96563C20-642A-47EA-8A4B-1DE9C1DD7377"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.9:*:*:*:*:*:*:*","matchCriteriaId":"439847AC-0ACD-4BDB-A935-3CE645366DAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:surgemail:1.9b2:*:*:*:*:*:*:*","matchCriteriaId":"AFAC85F6-EF7F-4051-AEC9-4FF21D77D1EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:netwin:webmail:3.1d:*:*:*:*:*:*:*","matchCriteriaId":"282F56FD-7FAC-4450-B2EF-29DA7F27E83C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0056.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/11772","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.exploitlabs.com/files/advisories/EXPL-A-2004-002-surgmail.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.netwinsite.com/surgemail/help/updates.htm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6746","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10483","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16320","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0056.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/11772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.exploitlabs.com/files/advisories/EXPL-A-2004-002-surgmail.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.netwinsite.com/surgemail/help/updates.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10483","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16320","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2549","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a TCP request with a large string, followed by 8 newline characters, to (1) the Telnet service on TCP port 23 and (2) the HTTP service on TCP port 80, possibly due to a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:wlan_access_point_2220:*:*:*:*:*:*:*:*","matchCriteriaId":"EE8DDE03-8BF5-4E8F-BB25-D05CECB316AB"},{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:wlan_access_point_2221:*:*:*:*:*:*:*:*","matchCriteriaId":"C1A8F4B0-AD6E-41AE-9C41-DE99DD2A023E"},{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:wlan_access_point_2225:*:*:*:*:*:*:*:*","matchCriteriaId":"6706F8CF-870B-4930-9F0C-EB8E353CD3AC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-03/0055.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11034","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009294","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4128","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9787","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www116.nortelnetworks.com/docs/bvdoc/wlan/216109a.pdf","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15373","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-03/0055.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009294","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www116.nortelnetworks.com/docs/bvdoc/wlan/216109a.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15373","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2550","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in unspecified Perl scripts in SandSurfer before 1.7.1 allow remote attackers to inject arbitrary web script or HTML, which is later executed by a target who views reports containing the injected data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xperience:sandsurfer:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"DD06215D-36C5-4B19-A61B-48B47198FEB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:xperience:sandsurfer:1.6.3:*:*:*:*:*:*:*","matchCriteriaId":"1765E259-3750-4525-B71B-3372483E432D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xperience:sandsurfer:1.6.4:*:*:*:*:*:*:*","matchCriteriaId":"98417499-45F4-44A4-8141-8FC347359E6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:xperience:sandsurfer:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"7D12AC02-B9A0-4E32-9932-2E369C4E7C3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:xperience:sandsurfer:1.7.0:*:*:*:*:*:*:*","matchCriteriaId":"2DA4FB7B-8E40-4279-87F9-D8A8FCA50B51"}]}]}],"references":[{"url":"http://secunia.com/advisories/11028","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=356882","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4132","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9801","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15377","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11028","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=356882","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4132","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/9801","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2551","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Layton HelpBox 3.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the sys_comment_id parameter in editcommentenduser.asp, (2) the sys_suspend_id parameter in editsuspensionuser.asp, (3) the table parameter in export_data.asp, (4) the sys_analgroup parameter in manageanalgrouppreference.asp, (5) the sys_asset_id parameter in quickinfoassetrequests.asp, (6) the sys_eusername parameter in quickinfoenduserrequests.asp, and the sys_request_id parameter in (7) requestauditlog.asp, (8) requestcommentsenduser.asp, (9) selectrequestapplytemplate.asp, and (10) selectrequestlink.asp, resulting in an ability to create a new HelpBox user account and read, modify, or delete data from the backend database."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:layton_technology:helpbox:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"42B1069B-E53D-486F-82B2-F4AE5009A5FA"}]}]}],"references":[{"url":"http://secunia.com/advisories/12118","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/8170","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8171","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8172","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8173","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8174","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8175","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8176","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8177","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8178","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8179","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securiteam.com/windowsntfocus/5VP0S0ADFW.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10776","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16772","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16774","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/8170","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/8171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/8172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/8173","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/8174","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/8175","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/8176","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/8177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/8178","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/8179","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securiteam.com/windowsntfocus/5VP0S0ADFW.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10776","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16772","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16774","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2552","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in XBoard 4.2.7 and earlier might allow local users to execute arbitrary code via a long -icshost command line argument. NOTE: since the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue that crosses privilege boundaries.  Therefore this may not be a vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tim_mann:xboard:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F746A7C9-DEA6-4C1D-9C75-916C1C0CC33C"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_mann:xboard:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"C097973E-9EC3-474B-82FC-F3DDDCB78610"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_mann:xboard:4.2.3:*:*:*:*:*:*:*","matchCriteriaId":"574AE1DF-6026-4C9B-8136-2F09FB548F02"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_mann:xboard:4.2.4:*:*:*:*:*:*:*","matchCriteriaId":"68B97310-404B-466F-8B82-932362326A9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_mann:xboard:4.2.5:*:*:*:*:*:*:*","matchCriteriaId":"26429B8F-FF46-44E3-B01B-92B80DD7A019"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_mann:xboard:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"BF69992F-62E2-4E6E-96AD-290A60B342B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:tim_mann:xboard:4.2.7:*:*:*:*:*:*:*","matchCriteriaId":"CA23BDCC-0B29-44E2-BEF2-512DE56ACC50"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-03/0030.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11016","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4123","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15362","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-03/0030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4123","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15362","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2553","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator privileges to obtain global IRC operator privileges by using the unofficial umode command with the +ORD argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:the_ignition_project:ignitionserver:0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"641C594E-35BC-4F2F-9E15-3D62FE8FCBD6"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_ignition_project:ignitionserver:0.1.2_r1:*:*:*:*:*:*:*","matchCriteriaId":"6FF803FC-00A2-464E-80F2-293022BE3F6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:the_ignition_project:ignitionserver:0.1.2_r2:*:*:*:*:*:*:*","matchCriteriaId":"1D702B7D-19E6-49D9-8E0E-267811688DF9"}]}]}],"references":[{"url":"http://cvs.sourceforge.net/viewcvs.py/ignition/ignitionserver/docs/security/20040302-operator-privilege-escalation.txt?view=markup","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11017","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009301","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=891555&group_id=96071&atid=613526","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4121","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9783","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15363","source":"cve@mitre.org"},{"url":"http://cvs.sourceforge.net/viewcvs.py/ignition/ignitionserver/docs/security/20040302-operator-privilege-escalation.txt?view=markup","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11017","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1009301","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/tracker/index.php?func=detail&aid=891555&group_id=96071&atid=613526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4121","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9783","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15363","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2554","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:client_firewall:2.0:*:*:*:*:*:*:*","matchCriteriaId":"45A29B4A-377D-4264-ABD1-6A14C9BDBC7D"}]}]}],"references":[{"url":"http://secunia.com/advisories/11014","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008755","source":"cve@mitre.org"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10090585.htm","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-090.shtml","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4120","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9441","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15367","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11014","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10090585.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-090.shtml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9441","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15367","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2555","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) to relate the Control password to the Administrator password, which allows local users to calculate the Administrator password if they know the Control password and password recovery key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartstuff:foolproof_security:3.9:*:*:*:*:*:*:*","matchCriteriaId":"FE9228B7-CB6D-4EC7-8BC2-DCFA0C6C7D71"},{"vulnerable":true,"criteria":"cpe:2.3:a:smartstuff:foolproof_security:3.9.4:*:*:*:*:*:*:*","matchCriteriaId":"52815596-EC52-4125-9277-8783630CF6B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:smartstuff:foolproof_security:3.9.7:*:*:*:*:*:*:*","matchCriteriaId":"841F31BD-8F6E-4865-A1B6-3E0283899666"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0081.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11790","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6735","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10467","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16327","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0081.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11790","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6735","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10467","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16327","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2556","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetGear WG602 (aka WG602v1) Wireless Access Point firmware 1.04.0 and 1.5.67 has a hardcoded account of username \"super\" and password \"5777364\", which allows remote attackers to modify the configuration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:wg602:1.04.0:*:*:*:*:*:*:*","matchCriteriaId":"6B860469-74A7-400D-975F-4CC600628790"},{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:wg602:1.5.67:*:*:*:*:*:*:*","matchCriteriaId":"E4B7F8F8-9F20-4AE2-B5D2-E4DE1F9B4000"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0036.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://kbserver.netgear.com/kb_web_files/n101383.asp","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11773","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://slashdot.org/articles/04/06/08/1319206.shtml?tid=126&tid=172","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ciac.org/ciac/bulletins/o-159.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6743","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/365230","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10459","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16312","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://kbserver.netgear.com/kb_web_files/n101383.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://slashdot.org/articles/04/06/08/1319206.shtml?tid=126&tid=172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ciac.org/ciac/bulletins/o-159.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6743","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/archive/1/365230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16312","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2557","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NetGear WG602 (aka WG602v1) Wireless Access Point 1.7.14 has a hardcoded account of username \"superman\" and password \"21241036\", which allows remote attackers to modify the configuration."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:netgear:wg602:1.7.14:*:*:*:*:*:*:*","matchCriteriaId":"A08224D6-CD58-45F4-AF33-8CC22DE9F331"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0036.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://kbserver.netgear.com/kb_web_files/n101383.asp","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11773","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://slashdot.org/articles/04/06/08/1319206.shtml?tid=126&tid=172","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ciac.org/ciac/bulletins/o-159.shtml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6743","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/365230","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10459","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16312","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0036.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://kbserver.netgear.com/kb_web_files/n101383.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://slashdot.org/articles/04/06/08/1319206.shtml?tid=126&tid=172","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ciac.org/ciac/bulletins/o-159.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6743","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/365230","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10459","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16312","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2558","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration Manager 4.2, Configuration Manager for Automated Teller Machines 2.1.0, and IBM WebSphere Everyplace Server, Service Provider Offering for Multi-platforms 2.1.3 to 2.15 allow remote attackers to hijack sessions of authenticated users via unknown attack vectors involving certain cookies, aka \"Potential Credential Impersonation Attack.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:3.9:*:*:*:*:*:*:*","matchCriteriaId":"B7681DCD-F704-4D87-B464-4BF43910CAEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:4.1:*:*:*:*:*:*:*","matchCriteriaId":"D24097DF-065B-49C3-AC07-8358C0E462A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:5.1:*:*:*:*:*:*:*","matchCriteriaId":"7319E4CB-5F62-4584-AD9A-3031F6B602B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_access_manager_identity_manager_solution:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BF5FC716-66E9-41CF-BB0C-2E68C4FC14DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_configuration_manager:4.2:*:*:*:*:*:*:*","matchCriteriaId":"193DDA4D-BC65-4F30-8333-01DACDEF9213"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_configuration_manager_for_atm:2.1:*:*:*:*:*:*:*","matchCriteriaId":"332D58A2-602A-4448-A508-AB7DC2E524F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:tivoli_secureway_policy_director:3.8:*:*:*:*:*:*:*","matchCriteriaId":"A8A0D65D-4DF7-4A95-81A9-8B97AA44A2D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_everyplace_server:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"23A16347-2CC0-4104-8396-BDB83FBD83EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_everyplace_server:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"96130CA9-CD7D-401A-81D0-CAFC9D5BCF98"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:websphere_everyplace_server:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"521C7EC4-D410-41F2-A455-F4165B569B49"}]}]}],"references":[{"url":"http://secunia.com/advisories/11761","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21168762","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10449","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16315","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?uid=swg21168762","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16315","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2559","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ACL checks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-04:*:*:*:*:*:*:*","matchCriteriaId":"7FFB3CD9-5B04-4200-87CF-F1B65902D0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-07:*:*:*:*:*:*:*","matchCriteriaId":"84F5F7BA-00EF-4ACB-A8BA-0CD06A9ABB44"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-12:*:*:*:*:*:*:*","matchCriteriaId":"63EDDA58-22F6-456A-986D-6A58FD818F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-21:*:*:*:*:*:*:*","matchCriteriaId":"C907D889-8DD7-4542-A74E-C318271E5812"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-25:*:*:*:*:*:*:*","matchCriteriaId":"46E98CDA-E813-427A-944A-2A768F075021"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-08:*:*:*:*:*:*:*","matchCriteriaId":"E589DA1C-7428-48A3-A115-3168F99584E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-15a:*:*:*:*:*:*:*","matchCriteriaId":"2B197CF8-3729-414F-8BAA-BC709DEAA140"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-22:*:*:*:*:*:*:*","matchCriteriaId":"E5470BA9-F1F1-484B-B4D2-328D98483D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-12:*:*:*:*:*:*:*","matchCriteriaId":"43D11132-69EC-40DD-9D62-CC2B7DF7C344"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-25:*:*:*:*:*:*:*","matchCriteriaId":"EDCFDB3E-AB07-4E4C-A065-617A39505EB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-30:*:*:*:*:*:*:*","matchCriteriaId":"E4A4E1DB-705A-4FD8-913B-D43C4E9117A3"}]}]}],"references":[{"url":"http://securitytracker.com/id?1011802","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://wiki.splitbrain.org/wiki:old_changes","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11005","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17799","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011802","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://wiki.splitbrain.org/wiki:old_changes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17799","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2560","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"DokuWiki before 2004-10-19, when used on a web server that permits execution based on file extension, allows remote attackers to execute arbitrary code by uploading a file with an appropriate extension such as \".php\" or \".cgi\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-04:*:*:*:*:*:*:*","matchCriteriaId":"7FFB3CD9-5B04-4200-87CF-F1B65902D0B0"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-07:*:*:*:*:*:*:*","matchCriteriaId":"84F5F7BA-00EF-4ACB-A8BA-0CD06A9ABB44"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-12:*:*:*:*:*:*:*","matchCriteriaId":"63EDDA58-22F6-456A-986D-6A58FD818F5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-21:*:*:*:*:*:*:*","matchCriteriaId":"C907D889-8DD7-4542-A74E-C318271E5812"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-07-25:*:*:*:*:*:*:*","matchCriteriaId":"46E98CDA-E813-427A-944A-2A768F075021"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-08:*:*:*:*:*:*:*","matchCriteriaId":"E589DA1C-7428-48A3-A115-3168F99584E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-15a:*:*:*:*:*:*:*","matchCriteriaId":"2B197CF8-3729-414F-8BAA-BC709DEAA140"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-08-22:*:*:*:*:*:*:*","matchCriteriaId":"E5470BA9-F1F1-484B-B4D2-328D98483D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-12:*:*:*:*:*:*:*","matchCriteriaId":"43D11132-69EC-40DD-9D62-CC2B7DF7C344"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-25:*:*:*:*:*:*:*","matchCriteriaId":"EDCFDB3E-AB07-4E4C-A065-617A39505EB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:andreas_gohr:dokuwiki:release_2004-09-30:*:*:*:*:*:*:*","matchCriteriaId":"E4A4E1DB-705A-4FD8-913B-D43C4E9117A3"}]}]}],"references":[{"url":"http://wiki.splitbrain.org/wiki:old_changes","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11084","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11486","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17899","source":"cve@mitre.org"},{"url":"http://wiki.splitbrain.org/wiki:old_changes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11486","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17899","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2561","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the ISS_TECH_CENTER_LOGIN cookie in search.asp and (2) one or more cookies in DoCustomerOptions.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:internet_sofware_sciences:web\\+center:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"855AB534-795F-489C-988E-2C218DEF9673"}]}]}],"references":[{"url":"http://secunia.com/advisories/12121","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8180","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securiteam.com/windowsntfocus/5RP0N0ADGK.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10771","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16775","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12121","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securiteam.com/windowsntfocus/5RP0N0ADGK.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10771","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16775","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2562","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk before 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:1.2_1999-07-00:*:*:*:*:*:*:*","matchCriteriaId":"E14C2EF2-8E1C-4598-8114-5C4EA3A908EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:1.3_2000-07-00:*:*:*:*:*:*:*","matchCriteriaId":"EED53448-FD95-4FB8-942D-3768C608EBA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:1.4_2000-08-00:*:*:*:*:*:*:*","matchCriteriaId":"89A2AE0B-33F7-4765-BD40-0E063356A8C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.33_2001-05-00:*:*:*:*:*:*:*","matchCriteriaId":"2975EB4C-DF93-45A1-81BF-E830DF0A8074"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.35_2001-06-04:*:*:*:*:*:*:*","matchCriteriaId":"E4F3DE54-BD73-4ADE-B3F0-E5F5EA686A4F"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.38_2001-06-10:*:*:*:*:*:*:*","matchCriteriaId":"512D3FFA-3EA2-4F8E-8956-AED7BB5A7639"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.40_2001-07-21:*:*:*:*:*:*:*","matchCriteriaId":"0E09E45D-9B3F-4B8C-AEF2-0DBD41CD82E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.41_2001-08-27:*:*:*:*:*:*:*","matchCriteriaId":"6850C288-2D69-4F8A-9569-80E020FB66E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.43_2001-09-28:*:*:*:*:*:*:*","matchCriteriaId":"C3B8EA89-D147-434E-A93B-34EFAC21C774"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.50:*:*:*:*:*:*:*","matchCriteriaId":"E9328DD9-E972-40E5-86F0-B8FB8DE299A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.52:*:*:*:*:*:*:*","matchCriteriaId":"D32BEC7A-3DCB-4CAC-B1B7-5A9830631A7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.53:*:*:*:*:*:*:*","matchCriteriaId":"0F4FB46D-9196-4F03-BE6B-485AF6624D61"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.54:*:*:*:*:*:*:*","matchCriteriaId":"896A255A-4802-4861-B0B7-3ED2B7CFB670"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.59:*:*:*:*:*:*:*","matchCriteriaId":"6A5D4E2F-A9AD-4085-A575-D7A2F0DC6F0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.60:*:*:*:*:*:*:*","matchCriteriaId":"350BF11D-E6E5-4E1B-BEE1-8F4F41ADAFA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.61:*:*:*:*:*:*:*","matchCriteriaId":"47625CEF-A839-4501-A345-79AE6C43C49B"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.62:*:*:*:*:*:*:*","matchCriteriaId":"DCFB8EA5-130D-4F29-A537-91A69B82321E"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.63:*:*:*:*:*:*:*","matchCriteriaId":"20AD434B-1026-4D25-BBF4-88E230F651C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.64:*:*:*:*:*:*:*","matchCriteriaId":"70B3D547-6C05-49C0-8CD4-BAB334E5699F"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.65:*:*:*:*:*:*:*","matchCriteriaId":"0490F0BB-4955-4D5F-942E-89CDCB37360E"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.66:*:*:*:*:*:*:*","matchCriteriaId":"648DE574-FFFD-48F3-BA38-E22C3DF06344"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.67:*:*:*:*:*:*:*","matchCriteriaId":"8386249D-BF4B-4BE6-BF11-C85480403871"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.68:*:*:*:*:*:*:*","matchCriteriaId":"0E3ED5F4-AF63-40EA-8890-DC43C7104070"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.69:*:*:*:*:*:*:*","matchCriteriaId":"2ECC447A-3AF0-4965-A3CE-2290F71A9EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.70:*:*:*:*:*:*:*","matchCriteriaId":"8CA047CF-58F9-43D1-AC41-ECD7259C5C8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.71:*:*:*:*:*:*:*","matchCriteriaId":"C40972CC-4CC8-45B9-93D5-8F297F9A5600"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.72:*:*:*:*:*:*:*","matchCriteriaId":"22BC50E6-05C0-4E0F-B9E6-3A20B672387D"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.73:*:*:*:*:*:*:*","matchCriteriaId":"6C8CFA8A-8C4D-4CF2-8DAB-E1E263511BA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.74:*:*:*:*:*:*:*","matchCriteriaId":"721E79DF-C3BB-4787-995D-8F997BF74B53"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.75:*:*:*:*:*:*:*","matchCriteriaId":"4153C621-6FEB-4C54-9DFA-13DAE8022FDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.76:*:*:*:*:*:*:*","matchCriteriaId":"FC52032E-3C0E-423E-832B-C8FDD52361BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.77:*:*:*:*:*:*:*","matchCriteriaId":"4CBCB4EA-1895-4AFE-B410-AA5207734876"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.78:*:*:*:*:*:*:*","matchCriteriaId":"1F209433-9848-47FE-8FEA-01AB7B58598E"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.79:*:*:*:*:*:*:*","matchCriteriaId":"BBE643D3-ECBD-413C-9878-9BFF80F1CA9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0.0.80:*:*:*:*:*:*:*","matchCriteriaId":"23114AD3-0687-4D0D-9E0C-5F87D9279ED9"},{"vulnerable":true,"criteria":"cpe:2.3:a:leigh_business_enterprises:web_helpdesk:4.0_2001-03-00:*:*:*:*:*:*:*","matchCriteriaId":"C1FCD235-7582-4DFE-B805-709B1BDD3BF5"}]}]}],"references":[{"url":"http://secunia.com/advisories/12123","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lbehelpdesk.com/patch/web/history.txt","source":"cve@mitre.org","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/8181","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5QP0M0ADGI.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/10773","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16779","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12123","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.lbehelpdesk.com/patch/web/history.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"]},{"url":"http://www.osvdb.org/8181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5QP0M0ADGI.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/10773","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16779","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2563","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Serena TeamTrack 6.1.1 allows remote attackers to obtain sensitive information such as user names, versions, and database information, and conduct cross-site scripting (XSS) attacks, via a direct request to tmtrack.dll with modified LoginPage and Template parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:serena_software:serena_teamtrack:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"2EE9AFDE-6C21-40A9-83FA-6BDAF29A8D6E"}]}]}],"references":[{"url":"http://secunia.com/advisories/12122","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8182","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/8183","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/8185","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securiteam.com/windowsntfocus/5SP0O0ADGG.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10770","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16771","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16777","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8182","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/8183","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/8185","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securiteam.com/windowsntfocus/5SP0O0ADGG.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16771","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16777","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2564","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in show.asp and (2) the title parameter in showperf.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:6.1:beta2:*:*:*:*:*:*","matchCriteriaId":"EA79C728-17F1-4557-A9C9-7A2D7DC00FF0"}]}]}],"references":[{"url":"http://secunia.com/advisories/11748","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010353","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.oliverkarow.de/research/sambar.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/6583","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/6584","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10444","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16286","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.oliverkarow.de/research/sambar.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/6583","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/6584","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16286","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2565","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, when the administrative IP address restrictions have been modified from the default, allow remote authenticated users to read arbitrary files via (1) a \"..\\\" (dot dot backslash) in the file parameter to showini.asp, or (2) an absolute path with drive letter in the log parameter to showlog.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sambar:sambar_server:6.1:beta2:*:*:*:*:*:*","matchCriteriaId":"EA79C728-17F1-4557-A9C9-7A2D7DC00FF0"}]}]}],"references":[{"url":"http://secunia.com/advisories/11748","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010353","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.oliverkarow.de/research/sambar.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/6585","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10444","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16287","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11748","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.oliverkarow.de/research/sambar.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/6585","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10444","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16287","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2566","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in LiveWorld products, possibly including (1) LiveForum, (2) LiveQ&A, (3) LiveChat, and (4) LiveFocusGroup, allow remote attackers to inject arbitrary web script or HTML via the q parameter in (a) search.jsp, (b) findclub!execute.jspa, and (c) search!execute.jspa."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:liveworld:livechat:*:*:*:*:*:*:*:*","matchCriteriaId":"570FE3C5-652C-45EA-B52E-1C54E007F97C"},{"vulnerable":true,"criteria":"cpe:2.3:a:liveworld:livefocusgroup:*:*:*:*:*:*:*:*","matchCriteriaId":"C27ECA5B-C132-4E5A-8A5C-AC9AA6702C6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:liveworld:liveforum:*:*:*:*:*:*:*:*","matchCriteriaId":"5DB67E40-2D97-44F3-91EA-45838E36AD82"},{"vulnerable":true,"criteria":"cpe:2.3:a:liveworld:liveq_and_a:*:*:*:*:*:*:*:*","matchCriteriaId":"90C8AD09-0746-42BC-B251-46289D52E651"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0326.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1011036","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.gulftech.org/?node=research&article_id=00044-08232004","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/9180","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17104","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0326.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1011036","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gulftech.org/?node=research&article_id=00044-08232004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/9180","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17104","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2567","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in ReciPants 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) user id, (2) recipe id, (3) category id, and (4) other ID number fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:recipants:recipants:1.0:*:*:*:*:*:*:*","matchCriteriaId":"28164B51-B4D7-442D-BE08-CC426F1A5B50"},{"vulnerable":true,"criteria":"cpe:2.3:a:recipants:recipants:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"05E27DDC-FD5E-4959-B4B8-CFB6A3537930"},{"vulnerable":true,"criteria":"cpe:2.3:a:recipants:recipants:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A494482E-2F65-473E-BABD-4C8F6EF52790"},{"vulnerable":true,"criteria":"cpe:2.3:a:recipants:recipants:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8AE09B14-8C97-402C-9C6C-3813C626516E"}]}]}],"references":[{"url":"http://secunia.com/advisories/11533","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009984","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=90737&release_id=234415","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10250","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16024","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=90737&release_id=234415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16024","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2568","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in ReciPants 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) user id, (2) recipe id, (3) category id, and (4) other ID number fields."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:recipants:recipants:1.0:*:*:*:*:*:*:*","matchCriteriaId":"28164B51-B4D7-442D-BE08-CC426F1A5B50"},{"vulnerable":true,"criteria":"cpe:2.3:a:recipants:recipants:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"05E27DDC-FD5E-4959-B4B8-CFB6A3537930"},{"vulnerable":true,"criteria":"cpe:2.3:a:recipants:recipants:1.1:*:*:*:*:*:*:*","matchCriteriaId":"A494482E-2F65-473E-BABD-4C8F6EF52790"},{"vulnerable":true,"criteria":"cpe:2.3:a:recipants:recipants:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8AE09B14-8C97-402C-9C6C-3813C626516E"}]}]}],"references":[{"url":"http://secunia.com/advisories/11533","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009984","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=90737&release_id=234415","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/5787","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10250","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/11533","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=90737&release_id=234415","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/5787","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2569","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ipmenu 0.0.3 before Debian GNU/Linux ipmenu_0.0.3-5 allows local users to overwrite arbitrary files via a symlink attack on the ipmenu.log temporary file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:david_stes:ipmenu:0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"A5B1C30A-1F6D-494A-9D6B-34D14634FBCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_stes:ipmenu:0.0.3-2:*:*:*:*:*:*:*","matchCriteriaId":"C2772AA5-C0C2-4F5E-9394-0E5F64968387"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_stes:ipmenu:0.0.3-3:*:*:*:*:*:*:*","matchCriteriaId":"3E95CEA6-5590-4649-9DFB-8E3FD4838066"},{"vulnerable":true,"criteria":"cpe:2.3:a:david_stes:ipmenu:0.0.3-4:*:*:*:*:*:*:*","matchCriteriaId":"19714CD2-2C4E-4A8B-BB25-24257004853C"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=244709","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11526","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/17682","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010064","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.debian.org/security/2005/dsa-907","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5788","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10269","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16052","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=244709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11526","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/17682","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010064","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.debian.org/security/2005/dsa-907","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5788","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10269","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16052","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2570","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera before 7.54 allows remote attackers to modify properties and methods of the location object and execute Javascript to read arbitrary files from the client's local filesystem or display a false URL to the user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-74"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:*:*:*:*:*:*:*:*","versionEndExcluding":"7.54","matchCriteriaId":"AC98D6DC-8C23-41A0-894B-12E2E4B5F48F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0131.html","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://osvdb.org/8331","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/12233","source":"cve@mitre.org","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-05.xml","source":"cve@mitre.org","tags":["Patch","Third Party Advisory"]},{"url":"http://www.greymagic.com/security/advisories/gm008-op/","source":"cve@mitre.org","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/754/","source":"cve@mitre.org","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/10873","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16904","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0131.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://osvdb.org/8331","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://secunia.com/advisories/12233","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200408-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"]},{"url":"http://www.greymagic.com/security/advisories/gm008-op/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit","Vendor Advisory"]},{"url":"http://www.opera.com/docs/changelogs/windows/754/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch"]},{"url":"http://www.securityfocus.com/bid/10873","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16904","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2571","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in EnderUNIX isoqlog 2.1.1 allow remote attackers to execute arbitrary code via the (1) parseQmailFromBytesLine, (2) parseQmailToRemoteLine, (3) parseQmailToLocalLine, (4) parseSendmailFromBytesLine, (5) parseSendmailToLine, (6) parseEximFromBytesLine, and (7) parseEximToLine functions in Parser.c; allow local users to execute arbitrary code via the (8) lowercase and (9) check_syslog_date functions in Parser.c, and (10) unspecified functions in Dir.c; and allow unspecified attackers to execute arbitrary code via the (11) loadconfig and (12) removespaces functions in loadconfig.c, the (13) loadLang function in LangCfg.c, and (14) unspecified functions in Html.c."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:enderunix:isoqlog:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EAA449C0-D320-44CA-858D-95D3831C7DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:enderunix:isoqlog:2.2_beta:*:*:*:*:*:*:*","matchCriteriaId":"EB87FB22-935C-40A7-85BB-267BE137E309"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0298.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11741/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010292","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10433","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16308","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0298.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11741/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010292","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10433","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16308","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2572","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AMAX Magic Winmail Server 3.6 allows remote attackers to obtain sensitive information by entering (1) invalid characters such as \"()\" or (2) a large number of characters in the Lookup field on the netaddressbook.php web form, which reveals the path in an ldaplib.php error message when the ldap_search function fails, due to improper processing of the $keyword variable."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:amax_information_technologies:magic_winmail_server:3.6:*:*:*:*:*:*:*","matchCriteriaId":"066701EA-1591-4C51-B51F-81ADA8A40ECA"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/ldaplib/ldaplib.php%20reveal%20local%20path%20of%20Winmail%203.6%20webmail%20directory.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11015","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.magicwinmail.net/download/english-help.chm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4118","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9786","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15361","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/ldaplib/ldaplib.php%20reveal%20local%20path%20of%20Winmail%203.6%20webmail%20directory.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.magicwinmail.net/download/english-help.chm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4118","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9786","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15361","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2573","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in tables_update.inc.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to execute arbitrary PHP code via an external URL in the appdir parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.14.005","matchCriteriaId":"36FA3BDC-EA2F-4370-BF0B-2125AA717333"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.003:*:*:*:*:*:*:*","matchCriteriaId":"9D030C9B-9A82-42A8-B7AA-EFA3B30FDFC7"}]}]}],"references":[{"url":"http://www.osvdb.org/7599","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12074","source":"cve@mitre.org"},{"url":"https://savannah.gnu.org/bugs/?func=detailitem&item_id=7478","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/7599","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://savannah.gnu.org/bugs/?func=detailitem&item_id=7478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-2574","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to inject arbitrary web script or HTML via the date parameter in a calendar.uicalendar.planner menuaction."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.16.005","matchCriteriaId":"511189F1-3329-416F-B81A-51C1AE491D39"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000:*:*:*:*:*:*:*","matchCriteriaId":"1C011E73-A072-421D-8500-C414A5B67BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.002:*:*:*:*:*:*:*","matchCriteriaId":"B2FBB83A-AADB-44D2-A227-2D76D4EF40CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.003:*:*:*:*:*:*:*","matchCriteriaId":"6D7BA9C4-E9B0-420A-936F-50EAC81B7EBC"}]}]}],"references":[{"url":"http://www.osvdb.org/7600","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12082","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://savannah.gnu.org/bugs/?func=detailitem&item_id=7478","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/7600","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://savannah.gnu.org/bugs/?func=detailitem&item_id=7478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-2575","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpGroupWare 0.9.14.005 and earlier allow remote attackers to obtain sensitive information via a direct request to (1) hook_admin.inc.php, (2) hook_home.inc.php, (3) class.holidaycalc.inc.php, and (4) setup.inc.php.sample, which reveals the path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000:*:*:*:*:*:*:*","matchCriteriaId":"1C011E73-A072-421D-8500-C414A5B67BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.002:*:*:*:*:*:*:*","matchCriteriaId":"B2FBB83A-AADB-44D2-A227-2D76D4EF40CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.003:*:*:*:*:*:*:*","matchCriteriaId":"6D7BA9C4-E9B0-420A-936F-50EAC81B7EBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.005:*:*:*:*:*:*:*","matchCriteriaId":"EE7F6B19-F4E1-48F0-86ED-E5A21DE7EB2F"}]}]}],"references":[{"url":"http://www.osvdb.org/7601","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/7602","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/7603","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/7604","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://savannah.gnu.org/bugs/?func=detailitem&item_id=7478","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/7601","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/7602","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/7603","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/7604","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://savannah.gnu.org/bugs/?func=detailitem&item_id=7478","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-2576","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"class.vfs_dav.inc.php in phpGroupWare 0.9.16.000 does not create .htaccess files to enable authorization checks for access to users' home-directory files, which allows remote attackers to obtain sensitive information from these files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000:*:*:*:*:*:*:*","matchCriteriaId":"1C011E73-A072-421D-8500-C414A5B67BF0"}]}]}],"references":[{"url":"http://www.osvdb.org/7617","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19195","source":"cve@mitre.org"},{"url":"https://savannah.gnu.org/bugs/?func=detailitem&item_id=8359","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/7617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19195","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://savannah.gnu.org/bugs/?func=detailitem&item_id=8359","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-2577","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which could allow remote attackers to obtain sensitive information via WebDAV from users' home directories that lack .htaccess files, and possibly has other unknown impacts."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16rc1:*:*:*:*:*:*:*","matchCriteriaId":"54DE05DA-2BB8-4922-9EEA-A42BF0DBDF46"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16rc2:*:*:*:*:*:*:*","matchCriteriaId":"D89B76F7-5E6C-4B4F-999F-954F6CC05822"}]}]}],"references":[{"url":"http://www.osvdb.org/7618","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12237","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://savannah.gnu.org/bugs/?func=detailitem&item_id=7227","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12237","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://savannah.gnu.org/bugs/?func=detailitem&item_id=7227","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2578","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpGroupWare before 0.9.16.002 transmits the (1) header admin and (2) setup passwords in plaintext via cookies, which allows remote attackers to sniff passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"BB95867B-AE4F-4E28-97E1-2A3E0AB610A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"8ECD56D0-FD6A-4E88-BC0B-86303EEBD02D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.3:*:*:*:*:*:*:*","matchCriteriaId":"E81F608D-A8D3-4896-B7E3-345F19B3AD5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"5E045F8C-DB82-42DA-A8E9-F04AF5AC4E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"74ABC52D-9402-4930-AA6E-4E6B52D9B22E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"31E5E600-6022-40FE-9464-D2363DF6B61C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"91923C69-6429-4E54-B858-EE74FC2718D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"79BB2C94-DA87-4DEF-ADD0-4C0624940407"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"95D453D0-AA3F-4515-A17D-7764873AEF99"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.9_pl1:*:*:*:*:*:*:*","matchCriteriaId":"C6F639E7-516F-4FBB-97D1-E00254F2D0E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.10:*:*:*:*:*:*:*","matchCriteriaId":"CF0E1ECC-5181-41A4-8EB1-4FA58EC932B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.12:*:*:*:*:*:*:*","matchCriteriaId":"011F15E1-145A-4CB2-BC55-261CB9DF0AF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.13:*:*:*:*:*:*:*","matchCriteriaId":"3AE1DA09-E7A2-41EB-92DB-A4DA42EA0477"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.003:*:*:*:*:*:*:*","matchCriteriaId":"9D030C9B-9A82-42A8-B7AA-EFA3B30FDFC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.005:*:*:*:*:*:*:*","matchCriteriaId":"4E8922FC-6D92-41E6-B228-951432FF631A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.006:*:*:*:*:*:*:*","matchCriteriaId":"2E215C57-88E0-4A41-BB54-6E53524113A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.007:*:*:*:*:*:*:*","matchCriteriaId":"68FB431C-DC8F-4E97-AA58-BA8DBB37766B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000:*:*:*:*:*:*:*","matchCriteriaId":"1C011E73-A072-421D-8500-C414A5B67BF0"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.001:*:*:*:*:*:*:*","matchCriteriaId":"B21818A9-9E32-4535-A8DA-CB57D1004E2A"}]}]}],"references":[{"url":"http://web.archive.org/web/20040920024328/http://www.phpgroupware.org/","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8354","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10895","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16970","source":"cve@mitre.org"},{"url":"http://web.archive.org/web/20040920024328/http://www.phpgroupware.org/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10895","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16970","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2579","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ACLCHECK module in Novell iChain 2.3 allows attackers to bypass access control rules of an unspecified component via an unspecified attack vector involving a string that contains escape sequences represented with \"overlong UTF-8 encoding.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:ichain:2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA99C786-A542-4AC3-BB81-4DE9C35E28DA"}]}]}],"references":[{"url":"http://secunia.com/advisories/12366","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011074","source":"cve@mitre.org"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?2972080.htm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9266","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11061","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17132","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12366","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011074","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?2972080.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9266","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17132","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2580","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Novell iChain 2.3 allows remote attackers to obtain login credentials via unspecified vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:ichain:2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA99C786-A542-4AC3-BB81-4DE9C35E28DA"}]}]}],"references":[{"url":"http://secunia.com/advisories/12366","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011074","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/9267","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11061","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17133","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/9267","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17133","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2581","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell iChain 2.3 allows attackers to cause a denial of service via a URL with a \"specific string.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:ichain:2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA99C786-A542-4AC3-BB81-4DE9C35E28DA"}]}]}],"references":[{"url":"http://secunia.com/advisories/12366","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011074","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?2972080.htm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9268","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11061","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17134","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?2972080.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17134","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2582","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Novell iChain 2.3 includes the build number in the VIA line of the proxy server's HTTP headers, which allows remote attackers to obtain sensitive information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:ichain:2.3:*:*:*:*:*:*:*","matchCriteriaId":"CA99C786-A542-4AC3-BB81-4DE9C35E28DA"}]}]}],"references":[{"url":"http://secunia.com/advisories/12366","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011074","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?2972080.htm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9269","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11061","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17135","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12366","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011074","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?2972080.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9269","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11061","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17135","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2583","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous open connections to TCP port 25."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartertools:smartermail:1.6.1511:*:*:*:*:*:*:*","matchCriteriaId":"BCDA5045-2CFC-4FDF-A6D0-10664A68B18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:smartertools:smartermail:1.6.1529:*:*:*:*:*:*:*","matchCriteriaId":"0A94E3F7-7D9F-47AA-953E-45159C689624"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11042","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zone-h.org/advisories/read/id=4098","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15391","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zone-h.org/advisories/read/id=4098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15391","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2584","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"frmAddfolder.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote authenticated users to create a folder that SmarterMail cannot delete or rename via a folder name with a null byte (\"%00\"). NOTE: it is not clear whether this issue poses a vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartertools:smartermail:1.6.1511:*:*:*:*:*:*:*","matchCriteriaId":"BCDA5045-2CFC-4FDF-A6D0-10664A68B18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:smartertools:smartermail:1.6.1529:*:*:*:*:*:*:*","matchCriteriaId":"0A94E3F7-7D9F-47AA-953E-45159C689624"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt","source":"cve@mitre.org"},{"url":"http://www.zone-h.org/advisories/read/id=4098","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15392","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zone-h.org/advisories/read/id=4098","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15392","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2585","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in frmCompose.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to inject arbitrary web script or HTML via Javascript to the \"check spelling\" feature in the compose area."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartertools:smartermail:1.6.1511:*:*:*:*:*:*:*","matchCriteriaId":"BCDA5045-2CFC-4FDF-A6D0-10664A68B18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:smartertools:smartermail:1.6.1529:*:*:*:*:*:*:*","matchCriteriaId":"0A94E3F7-7D9F-47AA-953E-45159C689624"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11042","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009307","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4145","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9805","source":"cve@mitre.org"},{"url":"http://www.zone-h.org/advisories/read/id=4098","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15393","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4145","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9805","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zone-h.org/advisories/read/id=4098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15393","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2586","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in frmGetAttachment.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to read arbitrary files via the filename parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartertools:smartermail:1.6.1511:*:*:*:*:*:*:*","matchCriteriaId":"BCDA5045-2CFC-4FDF-A6D0-10664A68B18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:smartertools:smartermail:1.6.1529:*:*:*:*:*:*:*","matchCriteriaId":"0A94E3F7-7D9F-47AA-953E-45159C689624"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11042","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009307","source":"cve@mitre.org"},{"url":"http://www.zone-h.org/advisories/read/id=4098","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15389","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zone-h.org/advisories/read/id=4098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15389","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2587","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"login.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service via a long txtusername parameter, possibly due to a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartertools:smartermail:1.6.1511:*:*:*:*:*:*:*","matchCriteriaId":"BCDA5045-2CFC-4FDF-A6D0-10664A68B18E"},{"vulnerable":true,"criteria":"cpe:2.3:a:smartertools:smartermail:1.6.1529:*:*:*:*:*:*:*","matchCriteriaId":"0A94E3F7-7D9F-47AA-953E-45159C689624"}]}]}],"references":[{"url":"http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11042","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.zone-h.org/advisories/read/id=4098","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15390","source":"cve@mitre.org"},{"url":"http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11042","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.zone-h.org/advisories/read/id=4098","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15390","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2588","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Intentional information leak in phpinfo.php in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allows remote attackers to obtain sensitive information such as the configuration of the web server and the PHP application."}],"vendorComments":[{"organization":"XMB","comment":"XMB versions 1.9.8 and later were checked and are not vulnerable. Upgrades are available at https://www.xmbforum2.com/","lastModified":"2021-04-23T12:35:55.130"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xmb_software:xmb_forum:1.9_nexus_beta:*:*:*:*:*:*:*","matchCriteriaId":"5DE120E2-BC89-47DF-8C7D-F49F7F86FF1A"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0265.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108032355905265&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009561","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4643","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9983","source":"cve@mitre.org"},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15656","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0265.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=108032355905265&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4643","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9983","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://docs.xmbforum2.com/index.php?title=Security_Issue_History","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15656","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2589","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length header, which causes Gaim to abort when attempting to allocate memory."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.10:*:*:*:*:*:*:*","matchCriteriaId":"6D1EE775-471F-4D9F-9635-41CB581168D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.10.3:*:*:*:*:*:*:*","matchCriteriaId":"5E56639E-2F96-4110-8846-0EA887D2967B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.50:*:*:*:*:*:*:*","matchCriteriaId":"A2FDCAE1-0B5D-449F-A83A-5028E7701109"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.51:*:*:*:*:*:*:*","matchCriteriaId":"F984C4C7-6431-48DD-A0E0-0DC5F6052EB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.52:*:*:*:*:*:*:*","matchCriteriaId":"E955A141-DAEB-40EA-BE35-A5EED928E030"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.53:*:*:*:*:*:*:*","matchCriteriaId":"E3F02AE7-7A9C-4219-9472-9FAC8CBC637B"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.54:*:*:*:*:*:*:*","matchCriteriaId":"E94CDB8A-7120-41C6-95AF-5DBAD74F3204"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.55:*:*:*:*:*:*:*","matchCriteriaId":"F4A3A068-BEBB-4E31-9CAD-4A2008CFBC91"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.56:*:*:*:*:*:*:*","matchCriteriaId":"DA529226-9252-41EE-8543-692F3119CF6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.57:*:*:*:*:*:*:*","matchCriteriaId":"C6FDD0E8-D0CB-4B4C-8E4C-A4979B116CC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.58:*:*:*:*:*:*:*","matchCriteriaId":"7366C749-E27C-422C-BFE0-DCC4B4D9C8AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.59:*:*:*:*:*:*:*","matchCriteriaId":"5622F4C0-43C8-44B1-A7C7-D3A7F1199FA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.59.1:*:*:*:*:*:*:*","matchCriteriaId":"2A2E8C61-B01A-482A-9B8D-0072AB6BB7DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.60:*:*:*:*:*:*:*","matchCriteriaId":"30E40E9A-950B-4D6E-A748-5F76F7B97AEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.61:*:*:*:*:*:*:*","matchCriteriaId":"C4FF2E49-7561-461A-98BD-4778C6764020"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.62:*:*:*:*:*:*:*","matchCriteriaId":"4168D220-61A9-4E9F-A5A8-4832822E35EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.63:*:*:*:*:*:*:*","matchCriteriaId":"253631B3-8A0C-48DC-851A-F5A6AB490BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.64:*:*:*:*:*:*:*","matchCriteriaId":"1266BD64-E19D-4686-9E00-42CC9AF94756"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.65:*:*:*:*:*:*:*","matchCriteriaId":"C62BCA03-A187-432B-B2B3-40DE99A9986C"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.66:*:*:*:*:*:*:*","matchCriteriaId":"92762951-6F9E-426D-8157-55C65A561417"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.67:*:*:*:*:*:*:*","matchCriteriaId":"00AFDEF5-5E42-4BF6-8EC6-FE7FCD4DD4AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.68:*:*:*:*:*:*:*","matchCriteriaId":"7A4B3DA2-9ECB-454D-8775-9571B158007F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.69:*:*:*:*:*:*:*","matchCriteriaId":"A041E262-E36F-44C3-B83B-2E79653B74EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.70:*:*:*:*:*:*:*","matchCriteriaId":"333D0BA1-7676-417D-BB92-AAA1AAED2D0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.71:*:*:*:*:*:*:*","matchCriteriaId":"BF449EC2-A6F2-405F-BEE7-0516E092E6F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.72:*:*:*:*:*:*:*","matchCriteriaId":"840C5668-D951-4A62-B555-EB3D91A08B61"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.73:*:*:*:*:*:*:*","matchCriteriaId":"BC715625-C4E7-49AC-9F3E-7306114878D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.74:*:*:*:*:*:*:*","matchCriteriaId":"C8834643-F682-4FC1-93DE-BE4754E993AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.75:*:*:*:*:*:*:*","matchCriteriaId":"42DC59A0-4BD8-42AC-B2E0-BFC32FCE7396"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.76:*:*:*:*:*:*:*","matchCriteriaId":"9CC19763-0085-4633-A370-FECB86F90C1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.77:*:*:*:*:*:*:*","matchCriteriaId":"BD7A6C84-66CB-45E5-972B-CFF6D82D5767"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.78:*:*:*:*:*:*:*","matchCriteriaId":"5414E26C-C4BD-4E88-A9F4-05312F303BC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.79:*:*:*:*:*:*:*","matchCriteriaId":"A50DB77D-DF16-4596-826B-C30F2F0CDC07"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.80:*:*:*:*:*:*:*","matchCriteriaId":"9DF490A8-67ED-4330-A230-98CB60A16B47"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.81:*:*:*:*:*:*:*","matchCriteriaId":"8143534B-FADA-496F-9252-7D8F27407464"},{"vulnerable":true,"criteria":"cpe:2.3:a:rob_flynn:gaim:0.82:*:*:*:*:*:*:*","matchCriteriaId":"E4A65A06-A2D9-4ACD-A19A-5CC0D6636139"}]}]}],"references":[{"url":"http://gaim.sourceforge.net/security/?id=6","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12383","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011083","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9264","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11056","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17150","source":"cve@mitre.org"},{"url":"http://gaim.sourceforge.net/security/?id=6","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12383","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011083","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9264","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11056","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17150","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2590","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in meindlSOFT Cute PHP Library (aka cphplib) 0.46 has unknown impact and attack vectors, related to regular expressions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:meindlsoft:cute_php_library:0.46:*:*:*:*:*:*:*","matchCriteriaId":"8585CECE-09C7-4310-8943-187467C251C2"}]}]}],"references":[{"url":"http://prdownloads.sourceforge.net/cphplib/cphplib-0.47.tar.gz?download","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011076","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.meindlsoft.com/cphplib_changelog.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9224","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11062","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17145","source":"cve@mitre.org"},{"url":"http://prdownloads.sourceforge.net/cphplib/cphplib-0.47.tar.gz?download","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011076","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.meindlsoft.com/cphplib_changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9224","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17145","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2591","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The data-overwrite capability of ButtUglySoftware CleanCache 2.19 does not properly overwrite data in files, which allows attackers to recover the data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:buttuglysoftware:cleancache:2.19:*:*:*:*:*:*:*","matchCriteriaId":"3B17A440-55F6-4C57-BD2B-381179E1451D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-12/0418.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13630","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012701","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12595","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12117","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18692","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-12/0418.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012701","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12595","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12117","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18692","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2592","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a modified client that asks the server to send data stored at a negative array offset, which is not handled when processing Configstrings and Baselines."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_ii_server:3.20:*:*:*:*:*:*:*","matchCriteriaId":"0437DF9D-59E3-4071-B80C-600D14BACEF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_ii_server:3.21:*:*:*:*:*:*:*","matchCriteriaId":"04FCF957-BCF1-43CE-894D-43E25F45BB40"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13013","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secur1ty.net/advisories/001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011979","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11181","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11551","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17890","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secur1ty.net/advisories/001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17890","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2593","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a packet with a long cmd_args buffer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_ii_server:3.20:*:*:*:*:*:*:*","matchCriteriaId":"0437DF9D-59E3-4071-B80C-600D14BACEF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_ii_server:3.21:*:*:*:*:*:*:*","matchCriteriaId":"04FCF957-BCF1-43CE-894D-43E25F45BB40"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13013","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secur1ty.net/advisories/001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011979","source":"cve@mitre.org"},{"url":"http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11182","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11551","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17891","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secur1ty.net/advisories/001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11182","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17891","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2594","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a \"\\/\" in a pathname argument, as demonstrated by \"download \\/server.cfg\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_ii_server_windows:3.20:*:*:*:*:*:*:*","matchCriteriaId":"13190310-46BA-438C-AAA4-42D519F31E97"},{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_ii_server_windows:3.21:*:*:*:*:*:*:*","matchCriteriaId":"A3608AEE-E5A6-41D2-8CFA-5356ACE8E11F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/13013","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secur1ty.net/advisories/001","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011979","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11183","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11551","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17892","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/13013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secur1ty.net/advisories/001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011979","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11183","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17892","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2595","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a download command with a full pathname for a directory in the argument, which causes the server to crash when it cannot read data."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_ii_server_linux:3.20:*:*:*:*:*:*:*","matchCriteriaId":"471B3A19-9B2A-4C90-9C98-7A5C5DAD0CCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_ii_server_linux:3.21:*:*:*:*:*:*:*","matchCriteriaId":"1ED25E9F-A40A-437C-9927-03629F86219C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13013","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secur1ty.net/advisories/001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011979","source":"cve@mitre.org"},{"url":"http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11184","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11551","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17893","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secur1ty.net/advisories/001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2596","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (exhaustion of connection slots) via a large number of connections from the same IP address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_ii_server:3.20:*:*:*:*:*:*:*","matchCriteriaId":"0437DF9D-59E3-4071-B80C-600D14BACEF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_ii_server:3.21:*:*:*:*:*:*:*","matchCriteriaId":"04FCF957-BCF1-43CE-894D-43E25F45BB40"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13013","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secur1ty.net/advisories/001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011979","source":"cve@mitre.org"},{"url":"http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11551","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17894","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secur1ty.net/advisories/001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2597","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already contains an \"ip\" key/value pair but is also long enough to cause a new key/value pair to be truncated, which interferes with the server's ability to find the client's IP address."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_ii_server:3.20:*:*:*:*:*:*:*","matchCriteriaId":"0437DF9D-59E3-4071-B80C-600D14BACEF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:id_software:quake_ii_server:3.21:*:*:*:*:*:*:*","matchCriteriaId":"04FCF957-BCF1-43CE-894D-43E25F45BB40"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13013","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secur1ty.net/advisories/001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011979","source":"cve@mitre.org"},{"url":"http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11186","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11551","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17895","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13013","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secur1ty.net/advisories/001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11186","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11551","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17895","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2598","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by exiting a session without a valid disconnect command, then reconnecting, which prevents a mod from being notified of changes in the client state.  NOTE: the impact of this issue will vary depending on which mod is being used."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:id_software:quake_ii_server:3.20:*:*:*:*:*:*:*","matchCriteriaId":"0437DF9D-59E3-4071-B80C-600D14BACEF3"},{"vulnerable":false,"criteria":"cpe:2.3:a:id_software:quake_ii_server:3.21:*:*:*:*:*:*:*","matchCriteriaId":"04FCF957-BCF1-43CE-894D-43E25F45BB40"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html","source":"cve@mitre.org"},{"url":"http://secur1ty.net/advisories/001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011979","source":"cve@mitre.org"},{"url":"http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11551","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secur1ty.net/advisories/001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11551","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2599","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Quake II server before R1Q2, as used in multiple products, allow local users to cause a denial of service (application crash) via the server console or rcon."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:id_software:quake_ii_server:3.20:*:*:*:*:*:*:*","matchCriteriaId":"0437DF9D-59E3-4071-B80C-600D14BACEF3"},{"vulnerable":false,"criteria":"cpe:2.3:a:id_software:quake_ii_server:3.21:*:*:*:*:*:*:*","matchCriteriaId":"04FCF957-BCF1-43CE-894D-43E25F45BB40"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html","source":"cve@mitre.org"},{"url":"http://secur1ty.net/advisories/001","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011979","source":"cve@mitre.org"},{"url":"http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11188","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17898","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secur1ty.net/advisories/001","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11188","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17898","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2600","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intel:cli_auto-configuration_utility:*:*:*:*:*:*:*:*","matchCriteriaId":"DC9C0929-86A5-4745-8594-6D2ABE893160"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:client_system_setup_utility:*:*:*:*:*:*:*:*","matchCriteriaId":"25AD73CC-DB7A-4F76-A654-264FF892D7FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:server_configuration_wizard:*:*:*:*:*:*:*:*","matchCriteriaId":"43F662AC-9F90-485C-B4EC-50729055ED81"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:server_control:*:*:*:*:*:*:*:*","matchCriteriaId":"CC69514F-5F56-411A-85D1-553CA06D6393"},{"vulnerable":true,"criteria":"cpe:2.3:a:intel:system_setup_utility:*:*:*:*:*:*:*:*","matchCriteriaId":"C096ECA2-B75C-4270-A4E0-915FEB6B8043"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:carrier_grade_server_tigpr2u:*:*:*:*:*:*:*:*","matchCriteriaId":"93EBE6FC-77E4-4444-A378-9A82326D5867"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:carrier_grade_server_tsrlt2:*:*:*:*:*:*:*:*","matchCriteriaId":"11B0E433-8C78-48A1-B29B-5FFFDEF1C072"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:carrier_grade_server_tsrmt2:*:*:*:*:*:*:*:*","matchCriteriaId":"A80FF61B-35B9-4829-91C6-569E7FD3BFC5"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:hp:carrier_grade_server_cc2300:a6898a:*:*:*:*:*:*:*","matchCriteriaId":"C4C19796-0267-4D57-AB95-F57AEF5A71AB"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:carrier_grade_server_cc2300:a6899a:*:*:*:*:*:*:*","matchCriteriaId":"0F2332D3-3F29-4A86-89C5-85D5B5AF7EB1"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:carrier_grade_server_cc3300:a6900a:*:*:*:*:*:*:*","matchCriteriaId":"5622C2AA-848F-4F1C-A6B5-17400EE8D6D3"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:carrier_grade_server_cc3300:a6901a:*:*:*:*:*:*:*","matchCriteriaId":"3C6B394D-8FB5-46DB-B188-8BDF8A6664B9"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:carrier_grade_server_cc3310:a9862a:*:*:*:*:*:*:*","matchCriteriaId":"26BA02BA-76CB-4C21-A1F4-562DFAFD6E21"},{"vulnerable":true,"criteria":"cpe:2.3:h:hp:carrier_grade_server_cc3310:a9863a:*:*:*:*:*:*:*","matchCriteriaId":"9A8373A0-9705-4AF1-92DA-B1FA2FFBE2FD"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:entry_server_board_se7210tp1-e:*:*:*:*:*:*:*:*","matchCriteriaId":"F4205D11-F8F8-41F9-8094-FF111A8DCC6E"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:entry_server_platform_sr1325tp1-e:*:*:*:*:*:*:*:*","matchCriteriaId":"AFC6FAE8-E508-45C5-A83E-0D2881977837"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:server_board_scb2:*:*:*:*:*:*:*:*","matchCriteriaId":"B5BDA184-5403-4E1F-A1D7-BC34284D591A"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:server_board_sds2:*:*:*:*:*:*:*:*","matchCriteriaId":"AF71532C-13A1-44CE-BFC3-660320E16217"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:server_board_se7500wv2:*:*:*:*:*:*:*:*","matchCriteriaId":"329A7174-7400-47D8-8088-68C68C3EC768"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:server_board_se7501hg2:*:*:*:*:*:*:*:*","matchCriteriaId":"02605733-0FD4-418E-AD7E-4A0783B056E7"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:server_board_shg2:*:*:*:*:*:*:*:*","matchCriteriaId":"4C8F6BF2-E056-4630-97FC-70D60784FC8C"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:server_platform_spsh4:*:*:*:*:*:*:*:*","matchCriteriaId":"E3E28B33-A09D-451C-9DB8-15710CEF96E3"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:server_platform_sr870bh2:*:*:*:*:*:*:*:*","matchCriteriaId":"4ABD9F57-87A6-4347-A211-E45F43688DBD"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:server_platform_sr870bn4:*:*:*:*:*:*:*:*","matchCriteriaId":"AD988002-5D12-423B-8F9E-868647F29DEF"},{"vulnerable":true,"criteria":"cpe:2.3:h:intel:server_platform_srsh4:*:*:*:*:*:*:*:*","matchCriteriaId":"48B34000-BD33-4AE0-9C40-A2ED5BF5E257"}]}]}],"references":[{"url":"ftp://download.intel.com/support/motherboards/server/sb/aa6791invalidlanconfiguration040504.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11315","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://support.intel.com/support/motherboards/server/sb/CS-010422.htm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4978","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10068","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15775","source":"cve@mitre.org"},{"url":"ftp://download.intel.com/support/motherboards/server/sb/aa6791invalidlanconfiguration040504.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/11315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://support.intel.com/support/motherboards/server/sb/CS-010422.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15775","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2601","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) allows remote attackers to read local files and possibly execute PHP code via a URL in the SKIN_inner parameter to inc/skin.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"3F5E5F8E-BC1B-4737-ADF3-4A0FA00F5AB0"}]}]}],"references":[{"url":"http://secunia.com/advisories/13652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012685","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/?node=research&article_id=00058-12242004","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12631","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18695","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/?node=research&article_id=00058-12242004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12631","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2602","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorImpact":"Successful exploitation requires that \"register_globals\" is enabled.","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) before 1.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the HCL_path parameter to pipe.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.1:*:*:*:*:*:*:*","matchCriteriaId":"55204FEA-0EAD-4F91-9F5F-10CF56D77E46"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"3B147BD9-3FC8-46F5-9E9E-7C2FE2BEC83A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0D3BB2BA-B6F5-451C-863F-A4028E040C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0B3B5013-CA5E-419C-A1E6-3C99436B483F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0D86C037-3188-40C3-A40B-B988223F34E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"09B77619-8831-4380-ADB1-F295E456A9F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"891E7564-7B8B-4A4B-B956-A24CA1D7A536"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"3F5E5F8E-BC1B-4737-ADF3-4A0FA00F5AB0"}]}]}],"references":[{"url":"http://secunia.com/advisories/13652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012685","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.gulftech.org/?node=research&article_id=00058-12242004","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/12598","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12105","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.ubertec.co.uk/forums/showthread/php?t=2376","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18694","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gulftech.org/?node=research&article_id=00058-12242004","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/12598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.ubertec.co.uk/forums/showthread/php?t=2376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18694","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2603","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Search module in UberTec Help Center Live (HCL) allows remote attackers to inject arbitrary web script or HTML via the find parameter to index.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.0:*:*:*:*:*:*:*","matchCriteriaId":"5634AEF9-0DE2-4D6B-9003-E603B5BC9206"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.2:*:*:*:*:*:*:*","matchCriteriaId":"F02BC707-527B-4566-95CC-9262C2AAC440"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0D3BB2BA-B6F5-451C-863F-A4028E040C7D"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"0B3B5013-CA5E-419C-A1E6-3C99436B483F"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"0D86C037-3188-40C3-A40B-B988223F34E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"09B77619-8831-4380-ADB1-F295E456A9F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"891E7564-7B8B-4A4B-B956-A24CA1D7A536"},{"vulnerable":true,"criteria":"cpe:2.3:a:ubertec:help_center_live:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"3F5E5F8E-BC1B-4737-ADF3-4A0FA00F5AB0"}]}]}],"references":[{"url":"http://secunia.com/advisories/13652","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012685","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.gulftech.org/?node=research&article_id=00058-12242004","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12597","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12105","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18696","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gulftech.org/?node=research&article_id=00058-12242004","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12597","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18696","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2604","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in PHProxy allows remote attackers to inject arbitrary web script or HTML via the error parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phproxy:phproxy:0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB356DCA-2209-4631-80AB-148C110B63FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phproxy:phproxy:0.2:*:*:*:*:*:*:*","matchCriteriaId":"E6689B26-5CA8-4065-B3AA-72A5A826B1E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phproxy:phproxy:0.3:*:*:*:*:*:*:*","matchCriteriaId":"5629B459-0EE8-4086-BBF4-F8692800D24D"}]}]}],"references":[{"url":"http://securitytracker.com/id?1012702","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/12627","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12115","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18697","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1012702","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/12627","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12115","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18697","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2605","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1) the aStats-Graphic-Signature-Generation file and (2) certain PNG image files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:astats:astats:1.6.5:*:*:*:*:*:*:*","matchCriteriaId":"58FB1702-AEE5-4021-933F-686B10CA3DC1"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=287604","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13679","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://shellcode.org/pipermail/debian-audit/2004-December/000078.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12632","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12128","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18698","source":"cve@mitre.org"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=287604","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13679","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://shellcode.org/pipermail/debian-audit/2004-December/000078.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12632","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12128","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18698","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2606","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers to attempt to login to an administration web page, even when the configuration specifies that remote administration is disabled."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:befsr41_v3:*:*:*:*:*:*:*:*","matchCriteriaId":"6F40051A-D45C-4121-ACC8-08EE711B3256"},{"vulnerable":true,"criteria":"cpe:2.3:h:linksys:wrt54g:2.02.7:*:*:*:*:*:*:*","matchCriteriaId":"3BD5B2C5-E393-45E4-B847-4CFF7DA972B2"}]}]}],"references":[{"url":"ftp://ftp.linksys.com/pub/network/wrt54g_2.02.8_US_code_beta.zip","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0316.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0002.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0020.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0190.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11754","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://web.archive.org/web/20040823075750/http://www.linksys.com/download/firmware.asp?fwid=201","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.nwfusion.com/news/2004/0607confuse.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6577","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/365175","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/365227/30/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10441","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16274","source":"cve@mitre.org"},{"url":"ftp://ftp.linksys.com/pub/network/wrt54g_2.02.8_US_code_beta.zip","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0316.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0020.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0190.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://web.archive.org/web/20040823075750/http://www.linksys.com/download/firmware.asp?fwid=201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.nwfusion.com/news/2004/0607confuse.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/365175","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/365227/30/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10441","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16274","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2607","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A numeric casting discrepancy in sdla_xfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of kernel memory via a large len argument, which is received as an int but cast to a short, which prevents a read loop from filling a buffer."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:x86:*:*:*:*:*","matchCriteriaId":"D77F8919-4064-4EA5-A948-76178EA21F83"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*","matchCriteriaId":"E1D21AD5-C34F-4005-92F3-98F714DE98D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*","matchCriteriaId":"6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*","matchCriteriaId":"C5FE15BF-91C7-452A-BE1B-7EC9632421C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*","matchCriteriaId":"15C1923C-D9C4-400D-9F0F-20B519EEC9C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*","matchCriteriaId":"E51913F9-FC7D-450A-9A82-5084AA74A5B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*","matchCriteriaId":"B62E02D5-9EEE-439B-A510-BEEE28A9F358"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*","matchCriteriaId":"02278C07-E649-427D-9E5C-F1738A01BCBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*","matchCriteriaId":"E120257D-346B-4BA6-A431-E6F820FBB5FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*","matchCriteriaId":"361D407D-A4BE-491D-BC8E-32E78DC4A8F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*","matchCriteriaId":"4F83D55B-3106-4907-A75F-A7EBF0EC6974"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"}]}]}],"references":[{"url":"http://secunia.com/advisories/18977","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/19369","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1018","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:072","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/16759","source":"cve@mitre.org"},{"url":"http://www.uwsg.iu.edu/hypermail/linux/kernel/0404.2/0313.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.uwsg.iu.edu/hypermail/linux/kernel/0404.2/0743.html","source":"cve@mitre.org"},{"url":"http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/18977","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1018","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/16759","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uwsg.iu.edu/hypermail/linux/kernel/0404.2/0313.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.uwsg.iu.edu/hypermail/linux/kernel/0404.2/0743.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2608","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SmartWebby Smart Guest Book stores SmartGuestBook.mdb (aka the \"news database\") under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the unencrypted username and password of the administrator's account."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:smartwebby:smart_guest_book:2:*:*:*:*:*:*:*","matchCriteriaId":"22DDFDA0-9B34-4E01-8187-1A64BF0C102F"}]}]}],"references":[{"url":"http://secunia.com/advisories/12401","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011084","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/9363","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17146","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12401","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/9363","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17146","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2609","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The stuffit.com executable on Symantec PowerQuest DeployCenter 5.5 boot disks allows local users to obtain sensitive information (an unencrypted password for a Windows domain account) via four \"stuffit /f:stuffit.dat\" invocations, possibly due to a buffer overflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:powerquest_deploycenter:5.5:*:*:*:*:*:*:*","matchCriteriaId":"AA287ECA-8A85-4728-9F41-334EA0530264"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1180.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011081","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9276","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11068","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17147","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1180.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9276","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11068","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17147","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2610","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mntd_mount.c in mntd before 0.4.2 might allow local users to gain privileges via shell metacharacters in a remount option in the configuration file.  NOTE: It is not clear whether this is a vulnerability because there is not necessarily any common usage in which privilege boundaries are crossed.  Typical usage would restrict write access to the configuration file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_bambach:mntd:0.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F41A89E9-DFA3-4D80-A137-11FC6AC81375"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_bambach:mntd:0.3.5:*:*:*:*:*:*:*","matchCriteriaId":"F794DF4A-BA30-42EF-BF5D-5C49D58BB540"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_bambach:mntd:0.4.0:*:*:*:*:*:*:*","matchCriteriaId":"E86CE418-9D01-4923-85FB-FC2D48E529E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:stefan_bambach:mntd:0.4.1:*:*:*:*:*:*:*","matchCriteriaId":"332300F8-FD1C-47D0-9D75-8E7998C7C636"}]}]}],"references":[{"url":"http://prdownloads.sourceforge.net/mntd/mntd-0.4.2.tar.gz?download","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1011088","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/9380","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17149","source":"cve@mitre.org"},{"url":"http://prdownloads.sourceforge.net/mntd/mntd-0.4.2.tar.gz?download","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1011088","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/9380","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17149","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2611","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Change Permissions function in the Sophster suite before 0.9.6 28 May 2004 (aka 0.9.6-r5), possibly including Sophster, FreeSophster, and FreeSophsterPAM, removes the (1) setuid, (2) setgid, and (3) sticky bits when changing a file, which might allow attackers to gain privileges or conduct other unauthorized activities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:steven_schaefer:sophster:0.9.5_r8:*:*:*:*:*:*:*","matchCriteriaId":"1184CE98-CB70-4074-98A0-DD0E695C12D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:steven_schaefer:sophster:0.9.5_r10:*:*:*:*:*:*:*","matchCriteriaId":"6194DC91-3060-4749-9B54-C5E3A8D77B73"},{"vulnerable":true,"criteria":"cpe:2.3:a:steven_schaefer:sophster:0.9.5_r12:*:*:*:*:*:*:*","matchCriteriaId":"A268501A-275C-4567-9A86-507E6D513E53"},{"vulnerable":true,"criteria":"cpe:2.3:a:steven_schaefer:sophster:0.9.5_r15:*:*:*:*:*:*:*","matchCriteriaId":"2460BD82-EF71-4331-827A-4DB9CE2B1F6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:steven_schaefer:sophster:0.9.6_r1:*:*:*:*:*:*:*","matchCriteriaId":"D8BF740A-C0FB-46E1-9B05-3FAF48A8F43F"},{"vulnerable":true,"criteria":"cpe:2.3:a:steven_schaefer:sophster:0.9.6_r2:*:*:*:*:*:*:*","matchCriteriaId":"F971CDEE-95DF-4DB1-99D9-008421897BEF"},{"vulnerable":true,"criteria":"cpe:2.3:a:steven_schaefer:sophster:0.9.6_r3:*:*:*:*:*:*:*","matchCriteriaId":"E3FDCF8B-7A34-4ADF-9B46-4E31126E89C5"}]}]}],"references":[{"url":"http://securitytracker.com/id?1010431","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/6657","source":"cve@mitre.org"},{"url":"http://www.schaefer.dhcp.biz/CHANGELOG.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16359","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/6657","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.schaefer.dhcp.biz/CHANGELOG.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16359","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2612","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BNC 2.9.0 only grants access when an incorrect password is provided, which allows remote attackers to use the functionality intended for authorized users."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bnc:bnc:2.9.0:*:*:*:*:*:*:*","matchCriteriaId":"FA18E05B-D7F7-482F-BA4D-73130A1F60C7"}]}]}],"references":[{"url":"http://secunia.com/advisories/13302","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gotbnc.com/changes.html#2.9.1","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12144","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11650","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18103","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13302","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.gotbnc.com/changes.html#2.9.1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12144","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11650","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18103","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2613","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in procfs in the Linux-VServer stable branch for the 2.4 kernel before 1.23 and Linux-VServer development branch for the 2.4 kernel before 1.3.5 has unspecified impact and attack vectors, related to \"write access to specific proc entries from a vserver context\", a different vulnerability than CVE-2004-2408."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.3.0:*:*:*:*:*:*:*","matchCriteriaId":"FC4E0322-CB40-4F6A-AC8D-65E88D4DCB6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.3.1:*:*:*:*:*:*:*","matchCriteriaId":"611D1000-D652-4A4E-B586-AA86CFE46037"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.3.2:*:*:*:*:*:*:*","matchCriteriaId":"659AADB3-F844-4862-9AD4-93606EE87A06"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.3.3:*:*:*:*:*:*:*","matchCriteriaId":"B191BAB9-5A4B-44CF-B621-36A812827E5F"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.3.4:*:*:*:*:*:*:*","matchCriteriaId":"1492C2F9-FDB8-46C6-AC31-A08DF3346690"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.20:*:*:*:*:*:*:*","matchCriteriaId":"3A4697C1-A42F-4361-B551-1829CDA8BB3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.21:*:*:*:*:*:*:*","matchCriteriaId":"986B4DA4-1C72-4BE1-9D41-0C1A6B908C0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:vserver:linux-vserver:1.22:*:*:*:*:*:*:*","matchCriteriaId":"4A730470-F8A0-44A8-A228-935A7C8217D2"}]}]}],"references":[{"url":"http://linux-vserver.org/ChangeLog","source":"cve@mitre.org"},{"url":"http://list.linux-vserver.org/archive/vserver/msg05824.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/7586","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://linux-vserver.org/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://list.linux-vserver.org/archive/vserver/msg05824.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/7586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2004-2614","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MyWeb 3.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xuebrothers:myweb:3.3:*:*:*:*:*:*:*","matchCriteriaId":"78598535-DB51-4BB1-BD77-3AAAF5EF2E44"}]}]}],"references":[{"url":"http://fux0r.phathookups.com/advisory/sp-x11-advisory.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11566","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://security-protocols.com/modules.php?name=News&file=article&sid=1931","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5983","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10303","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16101","source":"cve@mitre.org","tags":["VDB Entry"]},{"url":"http://fux0r.phathookups.com/advisory/sp-x11-advisory.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/11566","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://security-protocols.com/modules.php?name=News&file=article&sid=1931","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/5983","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/10303","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16101","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["VDB Entry"]}]}},{"cve":{"id":"CVE-2004-2615","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The documentation for CuteNews 1.3.6 and possibly other versions specifies that files under cutenews/data must be manually given world-writable permissions, which allows local users to insert false news, delete news, and possibly gain privileges or have other unknown impact."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cutephp:cutenews:1.3.6:*:*:*:*:*:*:*","matchCriteriaId":"EF7BF20D-34F9-453A-A54A-3A0B39EAAD58"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0396.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011099","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9385","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17161","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0396.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011099","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9385","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17161","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2616","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to obtain sensitive information by uploading a file, which reveals the path in a success message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:onnuri_infotek:activepost_standard:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1","matchCriteriaId":"977A5E48-D1FD-497A-AB56-49219AAB9EFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:onnuri_infotek:activepost_standard:2.5:*:*:*:*:*:*:*","matchCriteriaId":"1756BB8D-2E82-44A3-B540-F0CB71A95D96"},{"vulnerable":true,"criteria":"cpe:2.3:a:onnuri_infotek:activepost_standard:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EB8141A2-2C10-4D23-A18C-7B074F417966"}]}]}],"references":[{"url":"http://aluigi.altervista.org/adv/actp-adv.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0852.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&amp%3Bm=109597139011373&amp%3Bw=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011406","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/10235","source":"cve@mitre.org"},{"url":"http://aluigi.altervista.org/adv/actp-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0852.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&amp%3Bm=109597139011373&amp%3Bw=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1011406","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/10235","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2617","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to read files outside of the web root via a .. (dot dot) directly after the initial '/' (slash) in the URI."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pegasi_web_server:pegasi_web_server:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2F282B0A-F426-4AFF-8E05-96583B8EC2B1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0109.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0136.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11122","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=359660","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.autistici.org/fdonato/advisory/pws0.2.2-adv.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/4254","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/9847","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15435","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0109.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0136.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=359660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.autistici.org/fdonato/advisory/pws0.2.2-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.osvdb.org/4254","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/9847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2618","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to inject arbitrary web script or HTML via the URI, directly after the initial '/' (slash)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pegasi_web_server:pegasi_web_server:0.2.2:*:*:*:*:*:*:*","matchCriteriaId":"2F282B0A-F426-4AFF-8E05-96583B8EC2B1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0109.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0136.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/11122","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=359660","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.autistici.org/fdonato/advisory/pws0.2.2-adv.txt","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4255","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9847","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15436","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0109.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-03/0136.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://secunia.com/advisories/11122","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=359660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.autistici.org/fdonato/advisory/pws0.2.2-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/4255","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9847","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15436","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2619","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ripMIME 1.3.2.3 and earlier allows remote attackers to bypass e-mail protection via a base64 MIME encoded attachment containing invalid characters that are not properly extracted."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.2.3","matchCriteriaId":"631CE139-C22E-4282-8E7D-CC19A3376A0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.0:*:*:*:*:*:*:*","matchCriteriaId":"7E021143-608B-44A2-84FB-8F8AC00A9985"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.1:*:*:*:*:*:*:*","matchCriteriaId":"0A9BB1C1-2CB2-426D-A8CE-AF5CB0B98674"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.2:*:*:*:*:*:*:*","matchCriteriaId":"7AC4686E-B92F-47ED-90DA-42AF650521D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.3:*:*:*:*:*:*:*","matchCriteriaId":"80EF73F0-1FE1-4041-9C07-A89D153DA41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.4:*:*:*:*:*:*:*","matchCriteriaId":"EF45C4F8-A20C-4D7D-B203-AF36FB046C63"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.5:*:*:*:*:*:*:*","matchCriteriaId":"75222D1B-1384-4C74-A54F-BC028C5CDB69"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.6:*:*:*:*:*:*:*","matchCriteriaId":"A5129FD4-C011-4EA9-B8A1-256E95494FE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.2.7:*:*:*:*:*:*:*","matchCriteriaId":"8F33D78C-9CD1-49A6-A43E-D0187600C033"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"E6D3CF1D-64E1-47DB-8767-EF8DBF4E17AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9E725208-BA0C-41D9-BC45-84577A94AAA1"}]}]}],"references":[{"url":"http://secunia.com/advisories/12201","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8287","source":"cve@mitre.org"},{"url":"http://www.pldaniels.com/ripmime/CHANGELOG","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10848","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16867","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12201","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8287","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pldaniels.com/ripmime/CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10848","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16867","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2620","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The MIMEH_read_headers function in ripMIME 1.3.1.0 does not properly handle trailing \"\\r\" and \"\\n\" characters in headers, which leads to a buffer underflow."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:paul_l_daniels:ripmime:1.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"78D557AA-70D0-4E3C-A64A-9CD50786D268"}]}]}],"references":[{"url":"http://www.osvdb.org/8731","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.pldaniels.com/ripmime/CHANGELOG","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.pldaniels.com/ripmime/CHANGELOG","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2621","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Nortel Contivity VPN Client 2.1.7, 3.00, 3.01, 4.91, and 5.01, when opening a VPN tunnel, does not check the gateway certificate until after a dialog box has been displayed to the user, which creates a race condition that allows remote attackers to perform a man-in-the-middle (MITM) attack."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:contivity:2.1.7:*:*:*:*:*:*:*","matchCriteriaId":"E1F8A65F-C993-4BC4-A189-F6585B42AA61"},{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:contivity:3.00:*:*:*:*:*:*:*","matchCriteriaId":"A101AB6E-3D11-41F7-99B6-6E516D28F729"},{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:contivity:3.01:*:*:*:*:*:*:*","matchCriteriaId":"D1ED7923-FB6C-4788-8831-D5529AC73E98"},{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:contivity:4.91:*:*:*:*:*:*:*","matchCriteriaId":"F4AB1910-C2B3-4982-AE4D-20342924A010"},{"vulnerable":true,"criteria":"cpe:2.3:h:nortel:contivity:5.01:*:*:*:*:*:*:*","matchCriteriaId":"37D59E92-E606-4C59-9D34-B921A00F096A"}]}]}],"references":[{"url":"http://secunia.com/advisories/12881","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011846","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11002","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11495","source":"cve@mitre.org"},{"url":"http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?level=6&category=8&subcategory=6&subtype=&DocumentOID=276620&RenditionID=REND159588","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17812","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12881","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11002","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11495","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www130.nortelnetworks.com/cgi-bin/eserv/cs/main.jsp?level=6&category=8&subcategory=6&subtype=&DocumentOID=276620&RenditionID=REND159588","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17812","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2622","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:altiris:deployment_server_extension_for_ibm_director:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AA040850-DCAF-46F4-B71B-01F568357E02"},{"vulnerable":true,"criteria":"cpe:2.3:a:altiris:deployment_server_extension_for_ibm_director:5.5:*:*:*:*:*:*:*","matchCriteriaId":"1066B592-FF74-4EA0-BC6B-303E55360AEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:altiris:deployment_server_extension_for_ibm_director:6.0:*:*:*:*:*:*:*","matchCriteriaId":"B04343ED-B796-4205-9826-247E6218829E"},{"vulnerable":true,"criteria":"cpe:2.3:a:altiris:deployment_server_extension_for_ibm_director:6.1:*:*:*:*:*:*:*","matchCriteriaId":"94A19001-29B1-4C22-B863-7BD6C9AF87F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:altiris:deployment_server_extension_for_ibm_director:6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"01B173BC-734F-42AE-A4F3-C4E1DFD4DCDA"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html","source":"cve@mitre.org"},{"url":"http://packetstorm.linuxsecurity.com/0410-advisories/index2.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12944","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011862","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc&art=AKB6859&source=Altiris%20Helpdesk&artID=23644&refpara=532392&key=akb6859","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11031","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11498","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17814","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstorm.linuxsecurity.com/0410-advisories/index2.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12944","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc&art=AKB6859&source=Altiris%20Helpdesk&artID=23644&refpara=532392&key=akb6859","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11031","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11498","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17814","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2623","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unknown vulnerability in Rippy the Aggregator before 0.10, when register_globals is enabled, has unknown attack vectors and impact, possibly related to the \"user-controlled filter.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_skala:rippy_the_aggregator:0.1:*:*:*:*:*:*:*","matchCriteriaId":"4061EA0F-6EAA-4B57-AA3D-220108F5451F"},{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_skala:rippy_the_aggregator:0.2:*:*:*:*:*:*:*","matchCriteriaId":"37B9E210-24D2-4603-9C1D-EFF65C3B445C"},{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_skala:rippy_the_aggregator:0.3:*:*:*:*:*:*:*","matchCriteriaId":"35C35D5B-A66A-481D-8D9B-C8982F444B9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_skala:rippy_the_aggregator:0.4:*:*:*:*:*:*:*","matchCriteriaId":"4790E6F4-EECA-4CE2-80C0-0A4922333F19"},{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_skala:rippy_the_aggregator:0.5:*:*:*:*:*:*:*","matchCriteriaId":"B35E4FB9-C976-4887-BE7C-E4D4D651C6A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_skala:rippy_the_aggregator:0.6:*:*:*:*:*:*:*","matchCriteriaId":"CA9784BC-3DF7-4FE0-9539-8E86C7C10202"},{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_skala:rippy_the_aggregator:0.7:*:*:*:*:*:*:*","matchCriteriaId":"7418376C-4121-4D4E-AF2E-B4948786A2A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_skala:rippy_the_aggregator:0.8:*:*:*:*:*:*:*","matchCriteriaId":"B5F79A97-968F-4EBA-884B-0941EC91CFBA"},{"vulnerable":true,"criteria":"cpe:2.3:a:matthew_skala:rippy_the_aggregator:0.9:*:*:*:*:*:*:*","matchCriteriaId":"D191BC4C-6E26-42A2-9B8D-37A9954C6B38"}]}]}],"references":[{"url":"http://ansuz.sooke.bc.ca/rippy/ChangeLog","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/rippy/?branch_id=30091&release_id=173997","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12769","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011582","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10481","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17674","source":"cve@mitre.org"},{"url":"http://ansuz.sooke.bc.ca/rippy/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://freshmeat.net/projects/rippy/?branch_id=30091&release_id=173997","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12769","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10481","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17674","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2624","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in \"TextSearch\" in WackoWiki 3.5 allows remote attackers to inject arbitrary web script or HTML via the \"phrase\" parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wackowiki:wackowiki:r3:*:*:*:*:*:*:*","matchCriteriaId":"E6DE55C6-025E-464D-BE50-E35D893FE030"},{"vulnerable":true,"criteria":"cpe:2.3:a:wackowiki:wackowiki:r3.5:*:*:*:*:*:*:*","matchCriteriaId":"E8916CA7-7E5C-4BC4-9063-325BCE709A4A"}]}]}],"references":[{"url":"http://secunia.com/advisories/12209","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://wackowiki.com/WackoDownload/VersionHistory?v=yrv","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8295","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10860","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16878","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12209","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://wackowiki.com/WackoDownload/VersionHistory?v=yrv","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8295","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10860","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16878","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2625","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HTML via Javascript in an attribute of an IMG tag."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:outblaze:outblaze_email:*:*:*:*:*:*:*:*","matchCriteriaId":"90D03662-B177-4E77-8AEA-D13521C9006C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0733.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12084","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Jul/1010735.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/8104","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/securitynews/5CP0O20DFI.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10756","source":"cve@mitre.org"},{"url":"http://www.swp-zone.org/archivos/advisory-09.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16788","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0733.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Jul/1010735.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/8104","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/securitynews/5CP0O20DFI.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10756","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.swp-zone.org/archivos/advisory-09.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16788","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2626","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SMS messages by overlaying a confirmation message with a malicious message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:siemens:s55:09.2179:*:*:*:*:*:*:*","matchCriteriaId":"289355D4-4858-438E-9775-ACDEA3CDD87A"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=108308895624565&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=108325033624812&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11492","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Apr/1009959.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5703","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10227","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15995","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=108308895624565&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=108325033624812&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11492","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Apr/1009959.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10227","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15995","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2627","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:sun:j2me:micro:*:*:*:*:*:*:*","matchCriteriaId":"A8C4EA2A-7EC2-49D6-A2D2-D3A3B8FC1F31"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0231.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0884.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12945","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011898","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11041","source":"cve@mitre.org"},{"url":"http://www.theregister.co.uk/2004/10/22/mobile_java_peril/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17825","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-10/0231.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0884.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12945","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011898","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11041","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.theregister.co.uk/2004/10/22/mobile_java_peril/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17825","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2628","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote attackers to read arbitrary files via a URL that contains (1) a hex-encoded backslash dot-dot sequence (\"%5C..\") or (2) a drive letter (such as \"C:\")."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:acme_labs:thttpd:2.0.7_beta_0.4:*:*:*:*:*:*:*","matchCriteriaId":"223262EF-8131-4D4B-8A44-4388E6393F2D"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0097.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109164010629836&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Aug/1010850.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.acme.com/software/thttpd/#releasenotes","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=8372","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10862","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16882","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0097.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=109164010629836&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2004/Aug/1010850.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.acme.com/software/thttpd/#releasenotes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=8372","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10862","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16882","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2629","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple vulnerabilities in the H.323 protocol implementation for First Virtual Communications Click to Meet Express (when used with H.323 conferencing endpoints), Click to Meet Premier, Conference Server, and V-Gate allow remote attackers to cause a denial of service, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:first_virtual_communications:click_to_meet_express:h.323:*:*:*:*:*:*:*","matchCriteriaId":"111AC189-C71C-4BE9-A793-EF3162818022"},{"vulnerable":true,"criteria":"cpe:2.3:a:first_virtual_communications:click_to_meet_premier:h.323:*:*:*:*:*:*:*","matchCriteriaId":"B2DAA0BB-FA0E-41D1-9885-B8C212017F6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:first_virtual_communications:conference_server:h.323:*:*:*:*:*:*:*","matchCriteriaId":"1E861CDB-26C8-4133-94DF-463840FAB598"},{"vulnerable":true,"criteria":"cpe:2.3:a:first_virtual_communications:v-gate:h.323:*:*:*:*:*:*:*","matchCriteriaId":"7B97C3E4-E126-45B8-8E1D-B7FDC5608E2E"}]}]}],"references":[{"url":"http://secunia.com/advisories/11192","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.fvc.com/eng/docs/misc_docs/H.323_Security_Bulletin.pdf","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2004-01.html","source":"cve@mitre.org","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.uniras.gov.uk/vuls/2004/006489/h323.htm","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11192","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.fvc.com/eng/docs/misc_docs/H.323_Security_Bulletin.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2004-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]},{"url":"http://www.uniras.gov.uk/vuls/2004/006489/h323.htm","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2630","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The MIME transformation system (transformations/text_plain__external.inc.php) in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"1B9C4839-2356-4630-BDB3-4A0171F3A785"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"22C55462-6370-45B3-8F00-50F4502981F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"18BBE005-1FEC-4178-A6A0-CAAB148948F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2_pl1:*:*:*:*:*:*:*","matchCriteriaId":"701F99C8-D803-4D28-AFDA-B3DB5EBD5EEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"6D2E7577-5F89-4B2C-9C28-A5268B539968"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"929F5CD6-51F3-42CF-8BA8-579120DD835D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*","matchCriteriaId":"0F86B56F-510F-4C6F-A259-6200DC2B05ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"92B58A87-7A30-494D-9A9A-AF9FE6E59600"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"F56E2F91-DC93-4FF0-AFF2-DBB5E13B467D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F2C2D276-CFA3-40CB-AEAF-C641BAD4EB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc2:*:*:*:*:*:*:*","matchCriteriaId":"6F6E3468-78AF-471C-A09E-1ACCC6867256"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"DF345665-3C1D-4F44-B648-B695D88267BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7_pl1:*:*:*:*:*:*:*","matchCriteriaId":"99FD7D45-135D-4AE7-83E0-FDFE436DFE4E"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.6.0_pl1:*:*:*:*:*:*:*","matchCriteriaId":"D7C3F2E1-FEFC-4C04-B337-7AC3E38AE430"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109816584519779&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=109810251501643&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12813","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/12859","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Oct/1011761.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-14.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/10715","source":"cve@mitre.org"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-2","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11391","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17698","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109816584519779&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=109810251501643&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12813","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/12859","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Oct/1011761.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-14.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/10715","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11391","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17698","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2631","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"22C55462-6370-45B3-8F00-50F4502981F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"18BBE005-1FEC-4178-A6A0-CAAB148948F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2_pl1:*:*:*:*:*:*:*","matchCriteriaId":"701F99C8-D803-4D28-AFDA-B3DB5EBD5EEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"6D2E7577-5F89-4B2C-9C28-A5268B539968"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"929F5CD6-51F3-42CF-8BA8-579120DD835D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*","matchCriteriaId":"0F86B56F-510F-4C6F-A259-6200DC2B05ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"92B58A87-7A30-494D-9A9A-AF9FE6E59600"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"F56E2F91-DC93-4FF0-AFF2-DBB5E13B467D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F2C2D276-CFA3-40CB-AEAF-C641BAD4EB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc2:*:*:*:*:*:*:*","matchCriteriaId":"6F6E3468-78AF-471C-A09E-1ACCC6867256"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"DF345665-3C1D-4F44-B648-B695D88267BF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0444.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0473.html","source":"cve@mitre.org"},{"url":"http://eagle.kecapi.com/sec/fd/phpMyAdmin.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109816584519779&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11974","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010614","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-22.xml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7314","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securiteam.com/unixfocus/5QP040ADFW.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10629","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16542","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0444.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://eagle.kecapi.com/sec/fd/phpMyAdmin.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109816584519779&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7314","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securiteam.com/unixfocus/5QP040ADFW.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16542","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2632","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"phpMyAdmin 2.5.1 up to 2.5.7 allows remote attackers to modify configuration settings and gain unauthorized access to MySQL servers via modified $cfg['Servers'] variables."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.1:*:*:*:*:*:*:*","matchCriteriaId":"22C55462-6370-45B3-8F00-50F4502981F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2:*:*:*:*:*:*:*","matchCriteriaId":"18BBE005-1FEC-4178-A6A0-CAAB148948F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.2_pl1:*:*:*:*:*:*:*","matchCriteriaId":"701F99C8-D803-4D28-AFDA-B3DB5EBD5EEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.3:*:*:*:*:*:*:*","matchCriteriaId":"A47F3385-8681-4A7D-BF64-8F6EA7FBDFE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.4:*:*:*:*:*:*:*","matchCriteriaId":"6D2E7577-5F89-4B2C-9C28-A5268B539968"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5:*:*:*:*:*:*:*","matchCriteriaId":"929F5CD6-51F3-42CF-8BA8-579120DD835D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_pl1:*:*:*:*:*:*:*","matchCriteriaId":"0F86B56F-510F-4C6F-A259-6200DC2B05ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc1:*:*:*:*:*:*:*","matchCriteriaId":"92B58A87-7A30-494D-9A9A-AF9FE6E59600"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.5_rc2:*:*:*:*:*:*:*","matchCriteriaId":"F56E2F91-DC93-4FF0-AFF2-DBB5E13B467D"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc1:*:*:*:*:*:*:*","matchCriteriaId":"F2C2D276-CFA3-40CB-AEAF-C641BAD4EB61"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.6_rc2:*:*:*:*:*:*:*","matchCriteriaId":"6F6E3468-78AF-471C-A09E-1ACCC6867256"},{"vulnerable":true,"criteria":"cpe:2.3:a:phpmyadmin:phpmyadmin:2.5.7:*:*:*:*:*:*:*","matchCriteriaId":"DF345665-3C1D-4F44-B648-B695D88267BF"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0444.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0473.html","source":"cve@mitre.org"},{"url":"http://eagle.kecapi.com/sec/fd/phpMyAdmin.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11974","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Jun/1010614.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-22.xml","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/7315","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10629","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16555","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0444.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0473.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://eagle.kecapi.com/sec/fd/phpMyAdmin.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11974","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Jun/1010614.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-22.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/7315","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16555","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2633","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sesamie 1.0 allows remote anonymous attackers to gain access to repositories of other users via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arjohn_kampman:sesame_rdf_container:1.0:*:*:*:*:*:*:*","matchCriteriaId":"8DC6B47A-52E9-436D-A86B-7FB27A143007"},{"vulnerable":true,"criteria":"cpe:2.3:a:arjohn_kampman:sesame_rdf_container:1.0_pre1:*:*:*:*:*:*:*","matchCriteriaId":"870909FB-73E8-478A-9822-647E760AB584"},{"vulnerable":true,"criteria":"cpe:2.3:a:arjohn_kampman:sesame_rdf_container:1.0_pre2:*:*:*:*:*:*:*","matchCriteriaId":"DFB785EC-DDDD-4122-B0BB-DF3B44C845D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:arjohn_kampman:sesame_rdf_container:1.0_pre3:*:*:*:*:*:*:*","matchCriteriaId":"2FC087B8-70C0-4DFE-990F-5B6D591B8C0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:arjohn_kampman:sesame_rdf_container:1.0_pre4:*:*:*:*:*:*:*","matchCriteriaId":"F2C1BEC5-D043-4E00-8021-91AFA0E6DF5A"}]}]}],"references":[{"url":"http://secunia.com/advisories/11497","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Apr/1009978.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=234477","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/5710","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10239","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16006","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11497","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Apr/1009978.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=234477","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/5710","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10239","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16006","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2634","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) bos.rte.serv_aid or (2) bos.rte.console filesets in IBM AIX 5.1 and 5.2 allow local users to overwrite arbitrary files via a symlink attack on temporary files via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.2},"baseSeverity":"MEDIUM","exploitabilityScore":1.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"},{"vulnerable":false,"criteria":"cpe:2.3:o:ibm:aix:5.2:*:*:*:*:*:*:*","matchCriteriaId":"17EECCCB-D7D1-439A-9985-8FAE8B44487B"}]}]}],"references":[{"url":"http://secunia.com/advisories/11496","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009975","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY55789&apar=only","source":"cve@mitre.org"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY55790&apar=only","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5711","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/5712","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10231","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16008","source":"cve@mitre.org"},{"url":"https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=18&ID=279","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/11496","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY55789&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-1.ibm.com/support/search.wss?rs=0&q=IY55790&apar=only","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5711","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/5712","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=18&ID=279","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2635","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"An ActiveX control for McAfee Security Installer Control System 4.0.0.81 allows remote attackers to access the Windows registry via web pages that use the control's RegQueryValue() method."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:security_installer_control_system:4.0.0.81:*:*:*:*:*:*:*","matchCriteriaId":"4DA71782-490D-45DA-92D0-CC824ED5FD43"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2004-q2/0026.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11493","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5713","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10236","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/Apr/1009956.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15994","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2004-q2/0026.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11493","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5713","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10236","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/alerts/2004/Apr/1009956.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15994","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2636","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"TinyWeb 1.9 allows remote attackers to read source code of scripts via \"/./\" in the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:rit_research_labs:tinyweb:1.92:*:*:*:*:*:*:*","matchCriteriaId":"4F0EAB94-2F86-416E-B657-BB9D17D31E17"}]}]}],"references":[{"url":"http://secunia.com/advisories/11731","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/May/1010346.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/6517","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10445/info","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16275","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11731","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/May/1010346.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/6517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10445/info","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16275","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2637","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zonet:zsr1104we_wireless_router_runtime_code:2.41:*:*:*:*:*:*:*","matchCriteriaId":"89A945F3-FD13-43B1-8C04-6608927B9D3B"}]}]}],"references":[{"url":"http://marc.info/?l=full-disclosure&m=108324905314026&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11499","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009967","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5716","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10225","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16005","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=108324905314026&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11499","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009967","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5716","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10225","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16005","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2638","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the \"admin/\" directory by modifying the in_login parameter to a non-zero value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oscommerce:oscommerce:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"D66A817F-919C-4BE2-A7C2-A97AD4DA528B"}]}]}],"references":[{"url":"http://secunia.com/advisories/11473","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secwatch.org/advisories/1007857","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5717","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10235","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16009","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11473","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secwatch.org/advisories/1007857","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/5717","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10235","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16009","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2639","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Journalness 3.0.7 and earlier allows remote attackers to create or modify posts via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:drew_withers:journalness:1.11:*:*:*:*:*:*:*","matchCriteriaId":"DA0118AC-F82D-4453-B08E-C3FA09567619"},{"vulnerable":true,"criteria":"cpe:2.3:a:drew_withers:journalness:1.12:*:*:*:*:*:*:*","matchCriteriaId":"A820B4A1-D4EE-4349-91C9-0300B0AF8C76"},{"vulnerable":true,"criteria":"cpe:2.3:a:drew_withers:journalness:1.12_r1:*:*:*:*:*:*:*","matchCriteriaId":"5AE20283-B73E-451E-BECD-1229975DAE8F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drew_withers:journalness:1.13:*:*:*:*:*:*:*","matchCriteriaId":"2777388F-9EDA-45AA-AB13-26205301F46B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drew_withers:journalness:1.13_r1:*:*:*:*:*:*:*","matchCriteriaId":"56717F37-100A-4466-872B-7DE78D57305F"},{"vulnerable":true,"criteria":"cpe:2.3:a:drew_withers:journalness:2.1:*:*:*:*:*:*:*","matchCriteriaId":"170A975B-CBBC-4202-8B28-B04A2C9255CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:drew_withers:journalness:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"FC6410EF-FFA9-4763-A83A-A6D83F8D2770"},{"vulnerable":true,"criteria":"cpe:2.3:a:drew_withers:journalness:2.1.2:*:*:*:*:*:*:*","matchCriteriaId":"1EF773DF-15C8-4ADE-9C58-260564E6475B"},{"vulnerable":true,"criteria":"cpe:2.3:a:drew_withers:journalness:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"9631990B-7D1B-434A-86C0-FF2EAA95033E"},{"vulnerable":true,"criteria":"cpe:2.3:a:drew_withers:journalness:3.0.0:*:*:*:*:*:*:*","matchCriteriaId":"2385A2C5-D03F-4015-B7B4-183FE82F16CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drew_withers:journalness:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"2F5D2DA6-AFCC-4EA7-9790-E6379BEF55DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:drew_withers:journalness:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"21CA44C6-CC2B-44FB-B9E9-05B8B7DEA253"},{"vulnerable":true,"criteria":"cpe:2.3:a:drew_withers:journalness:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"5B77258E-C095-4C30-8ECD-1BC1A4B829D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:drew_withers:journalness:3.0.4:*:*:*:*:*:*:*","matchCriteriaId":"21BCB02C-BE59-4AC1-A21C-428A1437FE17"},{"vulnerable":true,"criteria":"cpe:2.3:a:drew_withers:journalness:3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"CDBE854D-0589-4BEE-A1A5-89DBF1BA35F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:drew_withers:journalness:3.0.7:*:*:*:*:*:*:*","matchCriteriaId":"52A38D14-6960-4CD1-ACA5-08D592F0CBEE"}]}]}],"references":[{"url":"http://secunia.com/advisories/11431","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Apr/1009909.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/5572","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15923","source":"cve@mitre.org"},{"url":"https://sourceforge.net/project/shownotes.php?release_id=232566&group_id=101583","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11431","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Apr/1009909.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/5572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15923","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sourceforge.net/project/shownotes.php?release_id=232566&group_id=101583","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2640","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary files via (1) .. (dot dot) sequences or (2) absolute paths to the template parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:ryszard_pydo:linuxstat:0.90:*:*:*:*:*:*:*","matchCriteriaId":"CA0BEDE0-7457-4CFC-BE15-41666E3FC7DD"},{"vulnerable":false,"criteria":"cpe:2.3:a:ryszard_pydo:linuxstat:0.94:*:*:*:*:*:*:*","matchCriteriaId":"43D570A0-2B02-450A-9CBA-CC092907F507"},{"vulnerable":false,"criteria":"cpe:2.3:a:ryszard_pydo:linuxstat:2.0:*:*:*:*:*:*:*","matchCriteriaId":"B08472E7-A49A-47C6-869E-73B93D279AE7"},{"vulnerable":false,"criteria":"cpe:2.3:a:ryszard_pydo:linuxstat:2.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"45DAD623-D766-4DD4-8AEC-0F82888F51F3"},{"vulnerable":false,"criteria":"cpe:2.3:a:ryszard_pydo:linuxstat:2.0_beta2:*:*:*:*:*:*:*","matchCriteriaId":"2B582411-9B91-4934-A431-41C3DE634010"},{"vulnerable":false,"criteria":"cpe:2.3:a:ryszard_pydo:linuxstat:2.1:*:*:*:*:*:*:*","matchCriteriaId":"CB3BE0BD-19E4-44C9-9A56-8DFB81040797"},{"vulnerable":false,"criteria":"cpe:2.3:a:ryszard_pydo:linuxstat:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D666A29D-0764-463F-A9F5-1863A97B00CD"},{"vulnerable":false,"criteria":"cpe:2.3:a:ryszard_pydo:linuxstat:2.3:*:*:*:*:*:*:*","matchCriteriaId":"A5F527EC-124E-420D-91D2-E4F43D71D0D8"}]}]}],"references":[{"url":"http://secunia.com/advisories/12963","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011920","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=277371","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11103","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11517","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17833","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12963","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011920","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://sourceforge.net/project/shownotes.php?release_id=277371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11103","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11517","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17833","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2641","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Sun Fire 3800/4800/4810/6800, Sun Fire V1280, and Netra 1280 allows remote attackers to cause a denial of service (system controller hang) via IP Packets With Type of Service (TOS) Bits set."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sun_fire:3800:*:*:*:*:*:*:*","matchCriteriaId":"91D5F2D6-D0BF-4D6A-AB19-5C1301D71E8A"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sun_fire:4800:*:*:*:*:*:*:*","matchCriteriaId":"D964A21B-E067-4D89-A5E0-339817CB8544"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sun_fire:4810:*:*:*:*:*:*:*","matchCriteriaId":"6759A24A-8ED7-4C60-92ED-2CE3D95DF6A3"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sun_fire:6800:*:*:*:*:*:*:*","matchCriteriaId":"3F5F659A-CAA8-488C-8C67-B95984055803"},{"vulnerable":true,"criteria":"cpe:2.3:h:sun:sun_fire:v1280:*:*:*:*:*:*:*","matchCriteriaId":"0C258A35-787A-49FF-A7C4-39B11747EBF9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:sun:netra_1280:*:*:*:*:*:*:*:*","matchCriteriaId":"5AB7C17E-2075-440D-81A8-A93A467A7369"}]}]}],"references":[{"url":"http://secunia.com/advisories/11439","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009888","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57544-1","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/5577","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10189","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15925","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11439","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1009888","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57544-1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/5577","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10189","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15925","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2642","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Yeemp 0.9.9 and earlier does not properly encrypt inbound files, which allows remote attackers to spoof the identity of the sender."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"099E3C48-BF49-4CA3-AC9B-8901193FB3D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.6:*:*:*:*:*:*:*","matchCriteriaId":"DF7541A5-8A27-4567-A247-823F24F48CA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.6.1:*:*:*:*:*:*:*","matchCriteriaId":"FFA1B45F-E264-4C11-ADA1-A73F68A25A52"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.6.2:*:*:*:*:*:*:*","matchCriteriaId":"D116193B-5636-4284-ACBE-29B5C09B88F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.7:*:*:*:*:*:*:*","matchCriteriaId":"5CF3E7C9-74EB-4C28-8471-3D3135A11DF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.7.1:*:*:*:*:*:*:*","matchCriteriaId":"877FD564-2C3B-4C89-A1F8-0334FBFE5D52"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.7.2:*:*:*:*:*:*:*","matchCriteriaId":"E7C02664-113F-4550-AB4C-C30E278F69B2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.8:*:*:*:*:*:*:*","matchCriteriaId":"ADA6AE71-E793-44E3-815D-6A64F55ED83A"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.9:*:*:*:*:*:*:*","matchCriteriaId":"2A5DF76A-74C7-45A8-938C-AB6FDDC079F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A90B5EC4-379C-4835-94C7-580CBB7F7054"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.9.2:*:*:*:*:*:*:*","matchCriteriaId":"1B09F444-6306-4AE5-A9E1-EA5E19C64520"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.9.2pre2:*:*:*:*:*:*:*","matchCriteriaId":"14FFAF52-6996-4B5E-A6B2-4A3933751CC9"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"671B7FE8-4054-4D0A-A6A3-8826BFEA8A27"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"FB30DD13-F065-4DD3-B9FD-10A75A0F5A39"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.9.7:*:*:*:*:*:*:*","matchCriteriaId":"582EFC53-E21D-4752-B30C-8301BEE2448F"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.9.8:*:*:*:*:*:*:*","matchCriteriaId":"1C2BF442-FE6C-471D-B359-C626187C1196"},{"vulnerable":true,"criteria":"cpe:2.3:a:nathaniel_bray:yeemp:0.9.9:*:*:*:*:*:*:*","matchCriteriaId":"2DC2E942-E288-4AD2-A1FD-270F1E73EAE6"}]}]}],"references":[{"url":"http://deekoo.net/technocracy/yeemp/#advisory","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://deekoo.net/technocracy/yeemp/changes.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12795","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011586","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/10671","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11353","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17692","source":"cve@mitre.org"},{"url":"http://deekoo.net/technocracy/yeemp/#advisory","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://deekoo.net/technocracy/yeemp/changes.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12795","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011586","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/10671","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11353","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17692","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2643","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via \"../\" sequences in file names in a CAB archive."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":3.7},"baseSeverity":"LOW","exploitabilityScore":1.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:cabarc:*:*:*:*:*:*:*:*","matchCriteriaId":"7BD1E76E-337D-45E5-96C8-EE86C001191B"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0341.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109759710121018&w=2","source":"cve@mitre.org"},{"url":"http://packetstormsecurity.org/0410-exploits/cabarc.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12816","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1011626","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10714","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11376","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17693","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0341.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://marc.info/?l=bugtraq&m=109759710121018&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://packetstormsecurity.org/0410-exploits/cabarc.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12816","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1011626","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11376","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17693","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2644","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack vectors when processing \"ANY\" type tags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asn.1_compiler:asn.1_compiler:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"7C648CA3-5ECE-410E-A980-3F96448FF04A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asn.1_compiler:asn.1_compiler:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"FDE9DCB9-F218-413A-9AE5-E4F9472A762E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asn.1_compiler:asn.1_compiler:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"E2DA73F6-6953-4872-A2E9-3709D1913F12"}]}]}],"references":[{"url":"http://secunia.com/advisories/12794","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011622","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=103893&release_id=274592","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10685","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11370","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17695","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=103893&release_id=274592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10685","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17695","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2645","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack vectors when processing \"CHOICE\" types with \"indefinite length structures.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:asn.1_compiler:asn.1_compiler:0.9.4:*:*:*:*:*:*:*","matchCriteriaId":"7C648CA3-5ECE-410E-A980-3F96448FF04A"},{"vulnerable":true,"criteria":"cpe:2.3:a:asn.1_compiler:asn.1_compiler:0.9.5:*:*:*:*:*:*:*","matchCriteriaId":"FDE9DCB9-F218-413A-9AE5-E4F9472A762E"},{"vulnerable":true,"criteria":"cpe:2.3:a:asn.1_compiler:asn.1_compiler:0.9.6:*:*:*:*:*:*:*","matchCriteriaId":"E2DA73F6-6953-4872-A2E9-3709D1913F12"}]}]}],"references":[{"url":"http://secunia.com/advisories/12794","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011622","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=103893&release_id=274592","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10684","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11370","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17696","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12794","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011622","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://sourceforge.net/project/shownotes.php?group_id=103893&release_id=274592","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11370","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17696","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2646","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The addUser function in UserManager.java in Free Web Chat 2.0 allows remote attackers to cause a denial of service (uncaught NullPointerException) via unknown attack vectors that cause the usrName variable to be null."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:reid_garner:free_web_chat:initial_release:*:*:*:*:*:*:*","matchCriteriaId":"0F341D41-7FF8-47DB-99C0-DBA34D849DD9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0102.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=109164397601049&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Aug/1010851.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/8369","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10863","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16893","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0102.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=109164397601049&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2004/Aug/1010851.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/8369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16893","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2647","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Free Web Chat 2.0 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections from the same user."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:reid_garner:free_web_chat:initial_release:*:*:*:*:*:*:*","matchCriteriaId":"0F341D41-7FF8-47DB-99C0-DBA34D849DD9"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0102.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=109164397601049&w=2","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Aug/1010851.html","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/8370","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10863","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16901","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0102.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=109164397601049&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2004/Aug/1010851.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/8370","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10863","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2648","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"FreezeX 1.00.100.0666 allows local users with administrator privileges to cause a denial of service (FreezeX application) by overwriting the db.fzx file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:H/Au:S/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"HIGH","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":1.0},"baseSeverity":"LOW","exploitabilityScore":1.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:faronics:freezex:1.00.100.0666:*:*:*:*:*:*:*","matchCriteriaId":"E3B98998-F9F2-412E-ADBD-D860E052F824"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0458.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1012699","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/12659","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18643","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0458.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://securitytracker.com/id?1012699","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/12659","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18643","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2649","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is addressed in the following product release:\r\nQualcomm, Eudora, 6.1.2","cveTags":[],"descriptions":[{"lang":"en","value":"Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large number of characters (e.g. spaces coded as \"&#32\") in the middle of the URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:eudora:eudora:6.1.0.6:*:*:*:*:*:*:*","matchCriteriaId":"BAE2C1F9-431A-4CA8-AEAA-318C40EC8265"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0066.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11581","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/May/1010117.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.eudora.com/download/eudora/windows/6.1.2/RelNotes.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/6009","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10305","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16105","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0066.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11581","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/May/1010117.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.eudora.com/download/eudora/windows/6.1.2/RelNotes.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/6009","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10305","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2650","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Spooler in Apache Foundation James 2.2.0 allows local users to cause a denial of service (memory consumption) by triggering various error conditions in the retrieve function, which prevents a lock from being released and causes a memory leak."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:james:2.2.0:*:*:*:*:*:*:*","matchCriteriaId":"46288D7B-23FB-440D-8533-26870E081E70"}]}]}],"references":[{"url":"http://issues.apache.org/jira/browse/JAMES-268","source":"cve@mitre.org"},{"url":"http://james.apache.org/changelog.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/15765","source":"cve@mitre.org"},{"url":"http://issues.apache.org/jira/browse/JAMES-268","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://james.apache.org/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15765","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2651","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in YaCy before 0.32 allow remote attackers to inject arbitrary web script or HTML via the (1) urlmaskfilter parameter to index.html or the (2) page parameter to Wiki.html."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.1_build2004-01-19:*:*:*:*:*:*:*","matchCriteriaId":"CD51396A-60D6-411F-8A6D-A665D7F086E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.11_build2004-01-24:*:*:*:*:*:*:*","matchCriteriaId":"5615D5BE-70CE-4C42-862D-E4EC8E7FCAC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.12_build2004-02-04:*:*:*:*:*:*:*","matchCriteriaId":"2AA76E5A-0CE8-422F-8C45-4A431BCDFB0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.13_build2004-02-10:*:*:*:*:*:*:*","matchCriteriaId":"B16AE207-B9D3-469D-9102-9699F37F05A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.14_build2004-02-13:*:*:*:*:*:*:*","matchCriteriaId":"AA2398A7-2BC8-4D61-8A96-6B2733F969B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.15_build2004-03-18:*:*:*:*:*:*:*","matchCriteriaId":"855B5A40-BA77-4C7B-BEA0-D1BC2CB16E1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.16_build2004-05-03:*:*:*:*:*:*:*","matchCriteriaId":"467CB8FF-3022-4294-AB4F-EFFF0637A553"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.20_build2004-06-14:*:*:*:*:*:*:*","matchCriteriaId":"CF09D549-C540-428C-B616-1709C7224C6B"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.21_build2004-06-27:*:*:*:*:*:*:*","matchCriteriaId":"C92E2772-A440-43B1-9897-075AB8C07310"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.22_build2004-07-11:*:*:*:*:*:*:*","matchCriteriaId":"8CF6FE0C-54A0-42B9-A960-866A111B7F43"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.23_build2004-08-08:*:*:*:*:*:*:*","matchCriteriaId":"B40D1222-0DA2-409E-B53C-F2C6910FF32D"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.24_build2004-08-16:*:*:*:*:*:*:*","matchCriteriaId":"2179CD5C-59F5-4FF6-8C00-44DBBC15D084"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.25_build2004-08-22:*:*:*:*:*:*:*","matchCriteriaId":"CE1DDC0E-8146-4F48-B672-28CB8E4A337A"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.26_build2004-09-16:*:*:*:*:*:*:*","matchCriteriaId":"D740CD27-9692-43E8-950E-1EBC4367C7E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.27_build2004-09-24:*:*:*:*:*:*:*","matchCriteriaId":"04EFD8AB-4884-4FA8-8607-69104BB25976"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.28_build2004-10-01:*:*:*:*:*:*:*","matchCriteriaId":"AFA08BCA-2EAD-40D3-82D9-534B09F32F3F"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.29_build2004-10-22:*:*:*:*:*:*:*","matchCriteriaId":"1D0A9201-C5E9-4FBF-8C33-16B3EF4C1063"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.30_build2004-11-25:*:*:*:*:*:*:*","matchCriteriaId":"AE9614DD-D293-49BC-86AE-31EDEC60E348"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:0.31_build2004-12-09:*:*:*:*:*:*:*","matchCriteriaId":"8A191F6A-15F7-4EAD-B784-A716CA2410A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:build2003-12-15:*:*:*:*:*:*:*","matchCriteriaId":"6847C171-862E-4DDF-BBDE-C463ED743BB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:build2003-12-18:*:*:*:*:*:*:*","matchCriteriaId":"EC57CC4A-F535-42F7-9F73-113A7577621E"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:build2003-12-29:*:*:*:*:*:*:*","matchCriteriaId":"381A6A3C-8860-41BC-A65D-97CC95112618"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:build2004-01-05:*:*:*:*:*:*:*","matchCriteriaId":"06D988EA-94ED-4AFF-B3FD-CDD9E898183C"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:build2004-01-07:*:*:*:*:*:*:*","matchCriteriaId":"349E575E-E47A-48CF-9290-50BFABBF0D1A"},{"vulnerable":true,"criteria":"cpe:2.3:a:michael_christen:yacy:build2004-01-10:*:*:*:*:*:*:*","matchCriteriaId":"E739D42E-096C-4C51-B64D-0C41E20514C2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-12/0413.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012686","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/12629","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12630","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/12104","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.yacy.net/yacy/News.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18688","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18690","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-12/0413.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012686","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/12629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12630","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/12104","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.yacy.net/yacy/News.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18688","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18690","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2652","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remote attackers to cause a denial of service (crash) via packets with invalid TCP/IP options, which trigger a null dereference."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sourcefire:snort:2.1.0:*:*:*:*:*:*:*","matchCriteriaId":"11C03A21-9920-44BC-AE7F-D551AA95BF2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sourcefire:snort:2.1.1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"DCD1C39E-CF11-44F4-8ED4-5836414CEA1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sourcefire:snort:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6FDD4F38-F403-4219-A671-C6C34B2C57E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sourcefire:snort:2.2:*:*:*:*:*:*:*","matchCriteriaId":"D52DF39F-5A63-4211-8871-6FBD72839833"}]}]}],"references":[{"url":"http://secunia.com/advisories/13664","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012656","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://taosecurity.blogspot.com/2004/12/details-on-snort-dos-condition-you-may.html","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.frsirt.com/exploits/20041222.angelDust.c.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12578","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securiteam.com/exploits/6X00L20C0S.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12084","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.snort.org/arc_news/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18689","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13664","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012656","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://taosecurity.blogspot.com/2004/12/details-on-snort-dos-condition-you-may.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.frsirt.com/exploits/20041222.angelDust.c.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12578","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securiteam.com/exploits/6X00L20C0S.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/12084","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.snort.org/arc_news/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18689","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2653","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in PD9 Software MegaBBS 2.0 and 2.1 allows attackers to gain privileges via unknown vectors involving (1) admin/userlevelmembers-edit.asp and (2) admin/edit-groups.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pd9_software:megabbs:2.0:*:*:*:*:*:*:*","matchCriteriaId":"95C4B04B-7762-4684-9251-71E8B6AB1EC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:pd9_software:megabbs:2.1:*:*:*:*:*:*:*","matchCriteriaId":"76865EDA-44F1-467E-9AA2-39017EB73868"}]}]}],"references":[{"url":"http://www.pd9soft.com/megabbs/forums/thread-view.asp?tid=4924","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.pd9soft.com/megabbs/forums/thread-view.asp?tid=4924","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2654","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors that trigger a null dereference.  NOTE: in a followup advisory, a researcher claimed that the issue was a buffer overflow that was not fixed in STABLE6. However, the vendor's bug report clearly shows that the researcher later retracted this claim, because the tested product was actually STABLE5."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable.  This issue only affected 2.5 STABLE4 and 2.5 STABLE5 versions of Squid and does not affect the versions of Squid distributed with Red Hat Enterprise Linux.","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:squid:squid:2.5_stable5:*:*:*:*:*:*:*","matchCriteriaId":"8029358E-A209-4570-8ECE-57920C88E72E"}]}]}],"references":[{"url":"http://secunia.com/advisories/12508","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12754","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011214","source":"cve@mitre.org"},{"url":"http://www.attrition.org/pipermail/vim/2006-February/000570.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9801","source":"cve@mitre.org"},{"url":"http://www.securitylab.ru/47881.html","source":"cve@mitre.org"},{"url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=972","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12508","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12754","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011214","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.attrition.org/pipermail/vim/2006-February/000570.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9801","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitylab.ru/47881.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.squid-cache.org/bugs/show_bug.cgi?id=972","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2655","sourceIdentifier":"secalert@redhat.com","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is addressed in the following product release:\r\nXScreenSaver, XScreenSaver, 4.18","cveTags":[],"descriptions":[{"lang":"en","value":"rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.4},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xscreensaver:xscreensaver:4.14:*:*:*:*:*:*:*","matchCriteriaId":"17F03388-1B06-467B-BFA8-6CAE540A2F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:xscreensaver:xscreensaver:4.16:*:*:*:*:*:*:*","matchCriteriaId":"E616DD75-B4D7-4373-8052-89D1D6F57E8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:xscreensaver:xscreensaver:4.17:*:*:*:*:*:*:*","matchCriteriaId":"22E03490-9A7F-43E0-B19C-379E71607A73"}]}]}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/20226","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/20456","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/20782","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/22080","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1016150","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1016151","source":"secalert@redhat.com"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-107.htm","source":"secalert@redhat.com"},{"url":"http://www.derkeiler.com/Newsgroups/comp.os.linux.security/2004-08/0018.html","source":"secalert@redhat.com"},{"url":"http://www.jwz.org/xscreensaver/changelog.html","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:071","source":"secalert@redhat.com"},{"url":"http://www.novell.com/linux/security/advisories/2006_23_sr.html","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0498.html","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/17471","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188149","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10096","source":"secalert@redhat.com"},{"url":"https://usn.ubuntu.com/269-1/","source":"secalert@redhat.com"},{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20226","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20456","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20782","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1016150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1016151","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-107.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.derkeiler.com/Newsgroups/comp.os.linux.security/2004-08/0018.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.jwz.org/xscreensaver/changelog.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:071","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2006_23_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0498.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/17471","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=188149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10096","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/269-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2656","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) before R_2_5_0_41 allow remote attackers to inject arbitrary web script or HTML via (1) the topic parameter in search.pl and (2) the filter parameter in submit.pl."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:*:*:*:*:*:*:*:*","versionEndIncluding":"r_2_5_0_41","matchCriteriaId":"677C87E7-BD7C-4275-961C-E7CF41F5BB28"},{"vulnerable":true,"criteria":"cpe:2.3:a:open_source_development_network:slashcode:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"0330B326-3443-4090-A3D4-5C60B74CA865"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-12/0170.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/13491","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/21874","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/21875","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/11993","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.slashcode.com/slash/04/12/20/1946225.shtml?tid=11&tid=5&tid=4","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18508","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-12/0170.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/13491","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/21874","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.osvdb.org/21875","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.securityfocus.com/bid/11993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.slashcode.com/slash/04/12/20/1946225.shtml?tid=11&tid=5&tid=4","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18508","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2657","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability has been disputed by the vendor.","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of user activity even after uninstalling, which allows local users who share a Windows profile to view the records after a new installation of Firefox, as reported for the list of Passwords Never Saved web sites.  NOTE: The vendor has disputed this issue, stating that \"The uninstaller is primarily there to uninstall the application. It is not there to uninstall user data. For the moment I will stick by my module-owner decision."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:S/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":1.7},"baseSeverity":"LOW","exploitabilityScore":3.1,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"7D6BF5B1-86D1-47FE-9D9C-735718F94874"}]}]}],"references":[{"url":"http://www.securityfocus.com/archive/1/431021/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/431063/100/0/threaded","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=234680","source":"cve@mitre.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=330884","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/431021/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/431063/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=234680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=330884","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2658","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"resmgr in SUSE CORE 9 does not properly identify terminal names, which allows local users to spoof terminals and login types."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:P/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"}]}]}],"references":[{"url":"http://support.novell.com/techcenter/psdb/fa6c6a3e792bf79b1d85821c689ea578.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://support.novell.com/techcenter/psdb/fa6c6a3e792bf79b1d85821c689ea578.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2659","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Opera offers an Open button to verify that a user wishes to execute a downloaded file, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking Open via a request for a different mouse or keyboard action very shortly before the Open dialog appears.  NOTE: this is a different issue than CVE-2005-2407."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mozilla:mozilla:-:*:*:*:*:*:*:*","matchCriteriaId":"03F4563F-7761-429A-971A-96EC556F7E06"},{"vulnerable":true,"criteria":"cpe:2.3:a:opera:opera_browser:-:*:*:*:*:*:*:*","matchCriteriaId":"4545786D-3129-4D92-B218-F4A92428ED48"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html","source":"cve@mitre.org","tags":["Broken Link","Exploit"]},{"url":"http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Exploit"]},{"url":"http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2004-2660","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is addressed in the following product release:\r\nLinux, Linux kernel, 2.6.10","cveTags":[],"descriptions":[{"lang":"en","value":"Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.10 allows local users to cause a denial of service (memory consumption) via certain O_DIRECT (direct IO) write requests."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:64-bit_x86:*:*:*:*:*","matchCriteriaId":"A12077FF-39D0-474A-AB6C-62926CC065B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:itanium_ia64_montecito:*:*:*:*:*","matchCriteriaId":"508BC14E-41D8-4847-AE0F-7830E2EE0522"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test1:*:*:*:*:*:*","matchCriteriaId":"7BCA84E2-AC4A-430D-8A30-E660D2A232A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test10:*:*:*:*:*:*","matchCriteriaId":"2255842B-34CD-4062-886C-37161A065703"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test11:*:*:*:*:*:*","matchCriteriaId":"F0ED322D-004C-472E-A37F-89B78C55FE5B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test2:*:*:*:*:*:*","matchCriteriaId":"412F7334-C46B-4F61-B38A-2CA56B498151"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test3:*:*:*:*:*:*","matchCriteriaId":"5967AF83-798D-4B1E-882A-5737FFC859C9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test4:*:*:*:*:*:*","matchCriteriaId":"A90D2123-D55B-4104-8D82-5B6365AA3B77"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test5:*:*:*:*:*:*","matchCriteriaId":"DCCDFD49-D402-420E-92F5-20445A0FE139"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test6:*:*:*:*:*:*","matchCriteriaId":"2A073700-E8A9-4F76-9265-2BE0D5AC9909"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test7:*:*:*:*:*:*","matchCriteriaId":"8877D178-1655-46E9-8F5A-2DD576601F38"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test8:*:*:*:*:*:*","matchCriteriaId":"0D55059C-B867-4E0F-B29C-9CD2C86915A5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:test9:*:*:*:*:*:*","matchCriteriaId":"8358E965-3689-4B05-8470-C4A1463FA0E9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc1:*:*:*:*:*:*","matchCriteriaId":"D2A55C17-C530-4898-BC95-DE4D495F0D7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc2:*:*:*:*:*:*","matchCriteriaId":"2C14A949-E2B8-4100-8ED4-645CB996B08A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:rc3:*:*:*:*:*:*","matchCriteriaId":"81941077-0011-4272-A8C7-21D0AFE7DECB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc1:*:*:*:*:*:*","matchCriteriaId":"9B2EDDD7-5B3E-45AA-BC42-A6FF516B8F57"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc2:*:*:*:*:*:*","matchCriteriaId":"02F89C7A-24F2-4518-A605-78A5B7056A1A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:rc3:*:*:*:*:*:*","matchCriteriaId":"2C43BA02-0686-42F0-B901-4CB88459E2D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc1:*:*:*:*:*:*","matchCriteriaId":"59393187-1D1E-45CD-BE0E-385F978E4834"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc2:*:*:*:*:*:*","matchCriteriaId":"D0CCDF6B-0365-4553-B161-3F6D68A58F72"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc3:*:*:*:*:*:*","matchCriteriaId":"A9B2BB71-0489-40F6-9CB6-A95B96E92106"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:rc4:*:*:*:*:*:*","matchCriteriaId":"842ECCE2-60F0-41C0-9EAA-A43AF97F61AF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:rc1:*:*:*:*:*:*","matchCriteriaId":"05F0391C-D4CC-4652-A24C-DC47F4C3DC91"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:rc2:*:*:*:*:*:*","matchCriteriaId":"56340FF9-EE77-4EB3-9720-240FAAEF39F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:rc3:*:*:*:*:*:*","matchCriteriaId":"79EB0E94-6AE8-4703-96BD-B927E0F2893F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:rc1:*:*:*:*:*:*","matchCriteriaId":"8A1F1242-0F07-4D81-9175-3BA5B2C7B564"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:rc2:*:*:*:*:*:*","matchCriteriaId":"3ECBCF2E-95B3-4BE9-9B93-6390AB578C7B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:rc3:*:*:*:*:*:*","matchCriteriaId":"1CF4EC75-06A2-4BD4-A39A-183F00C46E11"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc1:*:*:*:*:*:*","matchCriteriaId":"A0934C49-5F88-4189-BD88-2F32C39C2F25"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc2:*:*:*:*:*:*","matchCriteriaId":"DFC3618C-FBE8-4F7C-BECE-F2CDDF785599"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:rc3:*:*:*:*:*:*","matchCriteriaId":"A6501752-2595-4412-9140-C78EB9FD41CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc1:*:*:*:*:*:*","matchCriteriaId":"14B0A230-4054-4483-A3A7-9A5A286C7552"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc2:*:*:*:*:*:*","matchCriteriaId":"0D78F881-DB3A-423A-8DAD-314645B2B3EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:rc3:*:*:*:*:*:*","matchCriteriaId":"D77D4CC4-7008-4E6F-A8CA-62DA244BB3AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*","matchCriteriaId":"C16E3D04-EC66-41FD-9CFA-FE0C21952CAB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc1:*:*:*:*:*:*","matchCriteriaId":"F90242EF-048B-4539-AA41-87AA84875A9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc2:*:*:*:*:*:*","matchCriteriaId":"3C4E9325-2A70-4E15-9AAF-5588BF218055"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc3:*:*:*:*:*:*","matchCriteriaId":"01402A85-B681-4DE0-B7BB-F52567DA29E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8:rc4:*:*:*:*:*:*","matchCriteriaId":"70D1E088-5A9B-4CBF-A4FF-969201942CCC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*","matchCriteriaId":"455E647F-73DD-400A-AA19-3D93FE2E57AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:*:*:*:*:*:*","matchCriteriaId":"ABEBD63E-6194-4CB4-A1CE-E4FBB6F0A6E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:386:*:*:*:*:*","matchCriteriaId":"27B3F220-7FE0-4D47-918B-C9CBFAD23808"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686:*:*:*:*:*","matchCriteriaId":"813C1C54-697D-4170-8202-E07FF578815A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:686_smp:*:*:*:*:*","matchCriteriaId":"51403992-077A-4F6F-8722-DAAD30489DB3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64:*:*:*:*:*","matchCriteriaId":"BD22CEB2-838D-4D03-B1D0-2735CA5CA7EB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8:*:*:*:*:*","matchCriteriaId":"0B066E6A-B150-4D5F-8263-F955EB366806"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_k8_smp:*:*:*:*:*","matchCriteriaId":"6D4A2EB4-9F3C-4FEC-96FA-339C6FBD8D6A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:amd64_xeon:*:*:*:*:*","matchCriteriaId":"2A58C85C-BF31-4EDB-9CEA-1F31EA0AEC58"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7:*:*:*:*:*","matchCriteriaId":"72587FF5-B82D-42DE-A35B-0ECA76C37D54"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:k7_smp:*:*:*:*:*","matchCriteriaId":"013D2D76-AFAD-4479-B814-8597D8F51B7C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3:*:*:*:*:*","matchCriteriaId":"86F9C61A-913C-42BA-BD16-BF82F75AA84B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power3_smp:*:*:*:*:*","matchCriteriaId":"B6E51493-8AE7-4F18-85BD-D0444A297C1B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4:*:*:*:*:*","matchCriteriaId":"CD68B4B3-CCF4-4A64-8C67-F549CC905A06"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:power4_smp:*:*:*:*:*","matchCriteriaId":"D9350C90-D7A3-4DFF-A574-D079A4DCC453"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc:*:*:*:*:*","matchCriteriaId":"9A27FA94-0483-4DD7-A2C4-9FA246526243"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.8.1.5:*:powerpc_smp:*:*:*:*:*","matchCriteriaId":"E2076DD5-3110-4C81-BD0B-3B2A4D75AAE7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*","matchCriteriaId":"B812DFE2-6FFA-4D31-839C-0CCB2B1310EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:2.6.20:*:*:*:*:*:*","matchCriteriaId":"1FC53528-A67F-42DF-B8DA-778A65893F9D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*","matchCriteriaId":"FC106BDA-2EA4-41A2-AA01-6352A5C255B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*","matchCriteriaId":"FB515243-7519-4CA4-9267-D9A6798CBC49"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*","matchCriteriaId":"B672E1B6-E8E9-473F-853F-906EA56D712E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*","matchCriteriaId":"0EA23C4F-0848-4680-ACB0-CBC57D3F8C5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6_test9_cvs:*:*:*:*:*:*:*","matchCriteriaId":"608FDE1E-B02A-45A2-8877-0E52A5BD0963"}]}]}],"references":[{"url":"http://linux.bkbits.net:8080/linux-2.6/cset%404182a613oVsK0-8eCWpyYFrUf8rhLA","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21605","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22093","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22174","source":"cve@mitre.org"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1184","source":"cve@mitre.org"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.10","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0617.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/19665","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10165","source":"cve@mitre.org"},{"url":"http://linux.bkbits.net:8080/linux-2.6/cset%404182a613oVsK0-8eCWpyYFrUf8rhLA","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/21605","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22093","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-203.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1184","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0617.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/19665","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10165","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2661","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Soft3304 04WebServer before 1.41 does not properly check file names, which allows remote attackers to obtain sensitive information (CGI source code)."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:soft3304:04webserver:1.40:*:*:*:*:*:*:*","matchCriteriaId":"F5F49262-ECC9-4231-A38F-A808F31C6543"}]}]}],"references":[{"url":"http://www.soft3304.net/04WebServer/Security.html","source":"cve@mitre.org"},{"url":"http://www.soft3304.net/04WebServer/Security.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2662","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Soft3304 04WebServer before 1.41 allows remote attackers to cause a denial of service (resource consumption or crash) via certain data related to OpenSSL, which causes a thread to terminate but continue to hold resources."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:soft3304:04webserver:1.41:*:*:*:*:*:*:*","matchCriteriaId":"5B119958-1FD8-4EB5-B24F-52ED07D3A2B8"}]}]}],"references":[{"url":"http://www.soft3304.net/04WebServer/Security.html","source":"cve@mitre.org"},{"url":"http://www.soft3304.net/04WebServer/Security.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2663","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The (1) SetDebugging and (2) RunEgatherer methods in IBM Access Support eGatherer ActiveX control 2.0.0.16 allow remote attackers to create files with arbitrary content, as demonstrated by creating a .hta file in a Startup folder."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:egatherer:2.0.0.16:*:*:*:*:*:*:*","matchCriteriaId":"C6D35238-A755-426D-9CE7-60B0E71E944C"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108746693619324&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=full-disclosure&m=108741557604568&w=2","source":"cve@mitre.org"},{"url":"http://research.eeye.com/html/advisories/published/AD20040615B.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11072","source":"cve@mitre.org"},{"url":"http://www.eeye.com/html/research/advisories/AD20040615B.html","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7090","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10562","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16428","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108746693619324&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=full-disclosure&m=108741557604568&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://research.eeye.com/html/advisories/published/AD20040615B.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11072","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.eeye.com/html/research/advisories/AD20040615B.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7090","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10562","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16428","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2664","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is addressed in the following product release:\r\nJohn Lim, ADOdb, 4.23","cveTags":[],"descriptions":[{"lang":"en","value":"John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests to certain scripts that result in an undefined value of ADODB_DIR, which reveals the installation path in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:john_lim:adodb:*:*:*:*:*:*:*:*","versionEndIncluding":"4.22","matchCriteriaId":"BFF0AAE7-8D24-4012-893C-ECA1AF77571A"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_lim:adodb:3.94:*:*:*:*:*:*:*","matchCriteriaId":"BDBA517D-4748-4E9E-8E7C-1F04BAB821F9"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_lim:adodb:4.00:*:*:*:*:*:*:*","matchCriteriaId":"B96898C8-2F5F-40BC-924D-42990FD8A63B"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_lim:adodb:4.01:*:*:*:*:*:*:*","matchCriteriaId":"1166C876-A81E-4EEF-8B68-8B4DC931BEBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_lim:adodb:4.02:*:*:*:*:*:*:*","matchCriteriaId":"2603746F-1BB3-48FA-9BD0-A9C3D7C29F60"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_lim:adodb:4.03:*:*:*:*:*:*:*","matchCriteriaId":"D442F8CD-E903-4835-B3FF-3C763DEC0E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_lim:adodb:4.04:*:*:*:*:*:*:*","matchCriteriaId":"06742D26-85FB-43BD-992E-57846C2C172F"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_lim:adodb:4.05:*:*:*:*:*:*:*","matchCriteriaId":"06F51DCF-55A7-4B23-A21D-476AAF92D4EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_lim:adodb:4.10:*:*:*:*:*:*:*","matchCriteriaId":"1768F8F3-AA47-445D-97C9-2527D5B6DDD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_lim:adodb:4.11:*:*:*:*:*:*:*","matchCriteriaId":"41547706-2DEE-4C8B-B9B9-67F54BECB2CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_lim:adodb:4.20:*:*:*:*:*:*:*","matchCriteriaId":"E5D4086F-9589-44D2-9101-DCF5A10B01FA"},{"vulnerable":true,"criteria":"cpe:2.3:a:john_lim:adodb:4.21:*:*:*:*:*:*:*","matchCriteriaId":"5E81CD9A-5CAD-4785-B556-9D6C0F2C4E9B"}]}]}],"references":[{"url":"http://phplens.com/lens/adodb/docs-adodb.htm#changes","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://phplens.com/lens/adodb/docs-adodb.htm#changes","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2665","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport software in HP-UX B.11.00, B.11.04, and B.11.11 before 20040628 allows local users to cause a denial of service via unspecified vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":4.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.4:*:*:*:*:*:*:*","matchCriteriaId":"F038B325-A982-43FB-9146-E103CCFB5C41"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=PSD_HPSBUX01054","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=PSD_HPSBUX01054","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11970","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5694","source":"cve@mitre.org"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=PSD_HPSBUX01054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=PSD_HPSBUX01054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11970","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5694","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2666","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Mantis before 20041016 provides a complete Issue History (Bug History) in the web interface regardless of view_history_threshold, which allows remote attackers to obtain sensitive information (private bug details) by visiting a bug's web page."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9:*:*:*:*:*:*:*","matchCriteriaId":"0266C2F7-FB20-44EF-B0BB-ECCF055D03A8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"A21FF02F-982C-429F-A14D-D6E18058DD61"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10:*:*:*:*:*:*:*","matchCriteriaId":"9407F704-FF3C-4976-BE4C-A1DDC16715D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.1:*:*:*:*:*:*:*","matchCriteriaId":"A5173B32-1099-47C9-996B-56DB29456BB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.10.2:*:*:*:*:*:*:*","matchCriteriaId":"A6CA26FD-9C45-4628-82B7-E37E3EA3E2A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11:*:*:*:*:*:*:*","matchCriteriaId":"7B9B4611-C002-40F5-978C-BB90F1A893C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.11.1:*:*:*:*:*:*:*","matchCriteriaId":"4C7C8B5A-A630-4EDD-A6E8-27D2E1139CF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.12:*:*:*:*:*:*:*","matchCriteriaId":"B347D6C8-4607-481D-863E-7F41E9868041"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13:*:*:*:*:*:*:*","matchCriteriaId":"4F434D16-4F09-4BCF-BD3E-9114876C2575"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.13.1:*:*:*:*:*:*:*","matchCriteriaId":"F6D8FD23-C9A3-40AB-B3ED-86739BA8A362"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14:*:*:*:*:*:*:*","matchCriteriaId":"72BD480B-7CFB-4FD3-8E47-028F32AEF902"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.1:*:*:*:*:*:*:*","matchCriteriaId":"AC7C781D-F5D1-4C63-B6E3-230DEC80104E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.2:*:*:*:*:*:*:*","matchCriteriaId":"D0755FA0-2365-42B4-8E42-214D5BAD71A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.3:*:*:*:*:*:*:*","matchCriteriaId":"35248DDA-D37D-4D72-9FF8-6813BA4C87BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.4:*:*:*:*:*:*:*","matchCriteriaId":"A67C54F4-4155-43DA-8E07-579249759989"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.5:*:*:*:*:*:*:*","matchCriteriaId":"9DE7BEF1-1522-4666-B6B1-36A308FBC0A3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.6:*:*:*:*:*:*:*","matchCriteriaId":"C376D216-914A-4D96-8603-C6861B3E2857"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.7:*:*:*:*:*:*:*","matchCriteriaId":"CF0636CA-49A5-4463-B22B-6C5E1E2D44AC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.14.8:*:*:*:*:*:*:*","matchCriteriaId":"E3A07B4C-CE12-4381-BFE4-CE79411F5069"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15:*:*:*:*:*:*:*","matchCriteriaId":"DB6E1BE3-BF57-4ED4-918D-8B23CB195ECE"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.1:*:*:*:*:*:*:*","matchCriteriaId":"BB502B29-FBC5-4984-A735-AA0B6DF4A58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.2:*:*:*:*:*:*:*","matchCriteriaId":"3F759138-7079-471F-B30D-ED62351CFCB9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.3:*:*:*:*:*:*:*","matchCriteriaId":"5DF83421-973D-4AC9-BDA3-4161B9CF2D91"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.4:*:*:*:*:*:*:*","matchCriteriaId":"1633BF3C-89C2-4BEF-9F56-6F19984D3CA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.5:*:*:*:*:*:*:*","matchCriteriaId":"084BD5F4-37F8-4913-8045-769FD81F8C36"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.6:*:*:*:*:*:*:*","matchCriteriaId":"76B09948-A44C-47D8-A5EC-3873FF36F451"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.7:*:*:*:*:*:*:*","matchCriteriaId":"89D72C1E-73E5-4F51-9D30-D28026939C57"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.8:*:*:*:*:*:*:*","matchCriteriaId":"E9EDAA7A-DF0C-4D9E-9D30-0422E4801612"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.9:*:*:*:*:*:*:*","matchCriteriaId":"2C469C66-B64B-49BD-9D1C-D15F0E9028EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.10:*:*:*:*:*:*:*","matchCriteriaId":"C28223A1-359F-434C-BAAA-82A5F310FA44"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.11:*:*:*:*:*:*:*","matchCriteriaId":"7BF1F18B-AE36-48F3-B784-5C97B3F2535E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.15.12:*:*:*:*:*:*:*","matchCriteriaId":"F073B8A1-3339-4BF2-B8D1-F6BA5CF9695A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16:*:*:*:*:*:*:*","matchCriteriaId":"3A62328B-4C77-4FF4-B1D9-BE4A2E5C61FF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.16.1:*:*:*:*:*:*:*","matchCriteriaId":"03A0C36A-83DF-4E67-BA82-0ACE4D50C7D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17:*:*:*:*:*:*:*","matchCriteriaId":"7C074DBE-AFC9-4094-A170-A31D79C139D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.1:*:*:*:*:*:*:*","matchCriteriaId":"8462CB86-30B1-43D8-B306-271709423DB2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.2:*:*:*:*:*:*:*","matchCriteriaId":"131A96BB-EF2E-4AE2-9334-91CA96222BA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.3:*:*:*:*:*:*:*","matchCriteriaId":"17DC6205-7016-40C3-921A-B5AEC8513CCC"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4:*:*:*:*:*:*:*","matchCriteriaId":"721A536A-9626-4BD7-B84A-E3C4074F1217"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.4a:*:*:*:*:*:*:*","matchCriteriaId":"4D77F95A-0059-4442-8D9D-AA7F101FBBE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.17.5:*:*:*:*:*:*:*","matchCriteriaId":"89786096-AE1B-491B-8284-DBCC2F6112F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18:*:*:*:*:*:*:*","matchCriteriaId":"E0BC255D-6B0F-412D-B639-B9F9656E4839"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"4B4CFE80-223F-45DA-A9FB-03474F61E027"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a1:*:*:*:*:*:*:*","matchCriteriaId":"B29FF305-E773-497E-9C47-7D87383F1440"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a2:*:*:*:*:*:*:*","matchCriteriaId":"8724300D-CBDC-4C66-BF78-038F838C06DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a3:*:*:*:*:*:*:*","matchCriteriaId":"B7283A58-EE8E-493F-8E51-C97FF87ECA16"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.0a4:*:*:*:*:*:*:*","matchCriteriaId":"E3CF3162-EAF8-438C-891A-FD13ECF6D6A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.1:*:*:*:*:*:*:*","matchCriteriaId":"1E42F3A0-5FDB-4053-9EA5-D19B7061CDE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.2:*:*:*:*:*:*:*","matchCriteriaId":"101BF6DC-0F73-41E0-A0EE-BA1EA7397423"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18.3:*:*:*:*:*:*:*","matchCriteriaId":"FCC458D9-12B1-4CF1-980E-BC86E874BBA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.18a1:*:*:*:*:*:*:*","matchCriteriaId":"2202C65A-33FB-4742-8706-2BDD5B442030"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19:*:*:*:*:*:*:*","matchCriteriaId":"9C6C0D59-A086-4A38-8F94-C35B8A1A0D1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*","matchCriteriaId":"D3C48B8F-633E-4D69-A174-26C19829DE98"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a:*:*:*:*:*:*:*","matchCriteriaId":"C1E7658F-A543-46F5-B79D-E0E25B7C574F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*","matchCriteriaId":"DD259C18-7111-45C9-B6C3-6A5F29998146"},{"vulnerable":true,"criteria":"cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*","matchCriteriaId":"7CBA3B4B-D7E6-4555-969F-66217ACDACDA"}]}]}],"references":[{"url":"http://bugs.mantisbugtracker.com/view.php?id=4724","source":"cve@mitre.org"},{"url":"http://mantisbt.cvs.sourceforge.net/mantisbt/mantisbt/history_inc.php?r1=1.24&r2=1.25","source":"cve@mitre.org"},{"url":"http://mantisbt.cvs.sourceforge.net/mantisbt/mantisbt/history_inc.php?view=log","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://bugs.mantisbugtracker.com/view.php?id=4724","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mantisbt.cvs.sourceforge.net/mantisbt/mantisbt/history_inc.php?r1=1.24&r2=1.25","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mantisbt.cvs.sourceforge.net/mantisbt/mantisbt/history_inc.php?view=log","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2667","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Lotus Domino 6.0.x before 6.0.4 and 6.5.x before 6.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.0:*:*:*:*:*:*:*","matchCriteriaId":"A9989FEB-3B5E-40FF-BDBF-CFC835BCF93B"},{"vulnerable":false,"criteria":"cpe:2.3:a:ibm:lotus_domino:6.5:*:*:*:*:*:*:*","matchCriteriaId":"53D6F4E6-2C8A-40B6-9DB9-38E15D2AFEEF"}]}]}],"references":[{"url":"http://secunia.com/advisories/11925","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21171253","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=7268","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11925","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21171253","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/displayvuln.php?osvdb_id=7268","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2668","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in Interchange before 4.8.9 allows remote attackers to execute arbitrary SQL commands via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:interchange_development_group:interchange:*:*:*:*:*:*:*:*","versionEndIncluding":"4.8.8","matchCriteriaId":"57995F58-41D0-493A-BFAD-520B734CB840"},{"vulnerable":false,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.0:*:*:*:*:*:*:*","matchCriteriaId":"D9940525-76CD-49B7-827A-6FD0262E559B"},{"vulnerable":false,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.1:*:*:*:*:*:*:*","matchCriteriaId":"D3442CBE-86D6-4FA8-AC79-29F18BB6F2A9"},{"vulnerable":false,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.2:*:*:*:*:*:*:*","matchCriteriaId":"50FA48BD-CAA7-40E3-8672-871CF61A3AFE"},{"vulnerable":false,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.3:*:*:*:*:*:*:*","matchCriteriaId":"4B329F4D-9B47-41E0-979F-72DA04CFA90E"},{"vulnerable":false,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.4:*:*:*:*:*:*:*","matchCriteriaId":"DE32376A-4A29-4510-938C-9CBE052CDFF9"},{"vulnerable":false,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.5:*:*:*:*:*:*:*","matchCriteriaId":"3DE765B9-338F-4C32-99C8-C3F1BDD259A3"},{"vulnerable":false,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.6:*:*:*:*:*:*:*","matchCriteriaId":"2AC3C90B-5058-460A-99AF-E79A80B116D4"},{"vulnerable":false,"criteria":"cpe:2.3:a:interchange_development_group:interchange:4.8.7:*:*:*:*:*:*:*","matchCriteriaId":"6166A6EA-551E-4E0E-AC38-53776D817207"}]}]}],"references":[{"url":"http://ftp.icdevgroup.org/interchange/4.8/WHATSNEW","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7140","source":"cve@mitre.org"},{"url":"http://ftp.icdevgroup.org/interchange/4.8/WHATSNEW","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7140","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2669","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL commands or obtain the installation path via parameters including (1) s, w, and d in users.php, (2) id in comments.php, (3) rusername in auth.php, or (4) h in plug.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:neocrome:land_down_under:701:*:*:*:*:*:*:*","matchCriteriaId":"F1D278AA-9952-4117-B789-0E597D0E5599"}]}]}],"references":[{"url":"http://secunia.com/advisories/13034","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012015","source":"cve@mitre.org"},{"url":"http://www.neocrome.net/index.php?m=single&id=91","source":"cve@mitre.org"},{"url":"http://www.neocrome.net/page.php?id=1573","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11299","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11300","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11301","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11302","source":"cve@mitre.org"},{"url":"http://www.ptsecurity.ru/advisory.asp","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11569","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17912","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13034","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012015","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.neocrome.net/index.php?m=single&id=91","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.neocrome.net/page.php?id=1573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11299","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11300","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11301","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11302","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ptsecurity.ru/advisory.asp","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11569","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17912","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2670","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter in a viewcat operation or (2) the query parameter in a search operation in the publisher module."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:endonesia:endonesia:8.3:*:*:*:*:*:*:*","matchCriteriaId":"67EC4834-E498-4B44-90FD-3A747C509FB8"}]}]}],"references":[{"url":"http://echo.or.id/adv/adv02-y3dips-2004.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010864","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/370855","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10856","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8506","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13041","source":"cve@mitre.org"},{"url":"http://echo.or.id/adv/adv02-y3dips-2004.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/370855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10856","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13041","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2671","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod.php in eNdonesia 8.3 allows remote attackers to obtain sensitive information via certain direct requests, and certain requests with invalid parameter values, which reveal the path in various error messages, as demonstrated by the (1) mod and (2) cid parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:endonesia:endonesia:8.3:*:*:*:*:*:*:*","matchCriteriaId":"67EC4834-E498-4B44-90FD-3A747C509FB8"}]}]}],"references":[{"url":"http://echo.or.id/adv/adv02-y3dips-2004.txt","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12231","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010864","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/370855","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8507","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13042","source":"cve@mitre.org"},{"url":"http://echo.or.id/adv/adv02-y3dips-2004.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/12231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010864","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/370855","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/8507","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/13042","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2672","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","evaluatorSolution":"This vulnerability is addressed in the following product release:\r\nArGoSoft, FTP server, 1.4.2.2","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in ArGoSoft FTP server before 1.4.2.2 allows attackers to upload .lnk files via unknown vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.2.1","matchCriteriaId":"DCC322D3-1D6B-4735-8341-97659736C284"},{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:1.4.2:*:*:*:*:*:*:*","matchCriteriaId":"5D0097A7-8713-4979-A6CD-F5086741706D"}]}]}],"references":[{"url":"http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx","source":"cve@mitre.org"},{"url":"http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2673","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in ArGoSoft FTP Server before 1.4.1.6 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a SITE ZIP command with a long first or second argument, or (2) a SITE COPY with a long argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.1.5","matchCriteriaId":"6B097BAF-0481-4241-A684-C5B1364F0B0A"}]}]}],"references":[{"url":"http://secunia.com/advisories/11002","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11334","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5RP010KCAO.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9770","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15410","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5RP010KCAO.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15410","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2674","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to determine the existence of arbitrary files via \"..\" sequences in the SITE UNZIP argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.1.5","matchCriteriaId":"6B097BAF-0481-4241-A684-C5B1364F0B0A"}]}]}],"references":[{"url":"http://secunia.com/advisories/11002","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11333","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5RP010KCAO.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9770","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15411","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11333","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5RP010KCAO.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15411","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2675","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service (crash) via a SITE PASS command with a long password parameter, which causes the database to be corrupted."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:argosoft:ftp_server:*:*:*:*:*:*:*:*","versionEndIncluding":"1.4.1.5","matchCriteriaId":"6B097BAF-0481-4241-A684-C5B1364F0B0A"}]}]}],"references":[{"url":"http://secunia.com/advisories/11002","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11332","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5RP010KCAO.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9770","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15412","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11002","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11332","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5RP010KCAO.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9770","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15412","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2676","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in WebRoot Spy Sweeper before 2.0 does not drop privileges when using the help functionality, which allows local users to gain privileges."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webroot_software:spy_sweeper_enterprise:1.5.1_build_3698:*:*:*:*:*:*:*","matchCriteriaId":"42DE7BAB-625B-45BF-8078-2FC3C5367DD7"}]}]}],"references":[{"url":"http://secunia.com/advisories/13187","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2004-14/advisory/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012652","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/12534","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18628","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://secunia.com/secunia_research/2004-14/advisory/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012652","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/12534","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2677","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:qwikmail:qwikmail_smtp:0.3:*:*:*:*:*:*:*","matchCriteriaId":"25B9FEE0-9D5C-4377-BE95-28B418073827"}]}]}],"references":[{"url":"http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/13037","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012016","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://unl0ck.info/advisories/qwik-smtpd.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/460600/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11572","source":"cve@mitre.org","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/0687","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17917","source":"cve@mitre.org"},{"url":"http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/13037","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012016","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://unl0ck.info/advisories/qwik-smtpd.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/460600/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11572","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/0687","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17917","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2678","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2(BL22) and PK3(BL24), and 5.1A PK6(BL24), when using IPsec/IKE (Internet Key Exchange) with Certificates, allows remote attackers to gain privileges via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.1},"baseSeverity":"MEDIUM","exploitabilityScore":4.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1a:pk6:*:*:*:*:*:*","matchCriteriaId":"BA274FCB-748E-4EEB-9C77-DD5DF1ABB303"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1b_p3k_bl24:*:*:*:*:*:*:*","matchCriteriaId":"9A51B497-493B-4A6D-B83D-CA2BC8B32CF6"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:tru64:5.1b_pk2_bl22:*:*:*:*:*:*:*","matchCriteriaId":"5F6E90A8-BF8E-46AD-A0E6-4266EE0AE70C"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/tru64/2004-q1/0004.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/tru64/2004-q1/0004.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009329","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9803","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15397","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/tru64/2004-q1/0004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/tru64/2004-q1/0004.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9803","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15397","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2679","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange (IKE) with a certain Vendor ID payload that causes Firewall-1 to return a response containing version and other information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:*:*:*:*:*:*:*","matchCriteriaId":"0F543272-8C7E-4326-BA97-142FBEA641E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:sp1:*:*:*:*:*:*","matchCriteriaId":"74D81CF6-8E46-4BED-BC1E-9470E6088521"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:sp2:*:*:*:*:*:*","matchCriteriaId":"84C971FD-7282-4806-A717-686C3AE72A33"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:sp3:*:*:*:*:*:*","matchCriteriaId":"D8B8D963-B447-4B53-8449-D53E1CED11BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:sp4:*:*:*:*:*:*","matchCriteriaId":"5F7A328F-CB62-40FA-A9B0-BFAB9F487689"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:sp5:*:*:*:*:*:*","matchCriteriaId":"2AA58BEC-68C0-401A-A1DE-353451E86648"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:sp6:*:*:*:*:*:*","matchCriteriaId":"D5AA0024-EBDC-42F7-8ED6-4651FFBA9668"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:sp7:*:*:*:*:*:*","matchCriteriaId":"743B9B05-7D09-4AA1-A1CC-D249F57B8156"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.0:sp8:*:*:*:*:*:*","matchCriteriaId":"5ADFB8F4-21EF-4E74-BD0E-DF4692DC9842"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:*:*:*:*:*:*:*","matchCriteriaId":"100F03E3-1538-47AF-9CA6-E9E5C1DF05D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp1:*:*:*:*:*:*","matchCriteriaId":"AFCB5D3D-E8C6-43CE-A1D4-7F46519E9893"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp2:*:*:*:*:*:*","matchCriteriaId":"0A7ED9A2-3996-4ABE-B0EF-92ACF6C8A38B"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp3:*:*:*:*:*:*","matchCriteriaId":"997ABD78-6DF8-440C-B90A-E5CD7C6ACA75"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp4:*:*:*:*:*:*","matchCriteriaId":"60536AAF-76BC-4773-98FA-5F01E2D231FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp5:*:*:*:*:*:*","matchCriteriaId":"1E4206C4-05A7-46D1-90C7-6BA7744C7AD9"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp5a:*:*:*:*:*:*","matchCriteriaId":"B78091F6-C3A7-4842-B555-D7ECC080E565"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:4.1:sp6:*:*:*:*:*:*","matchCriteriaId":"8505646A-6118-4274-9281-FC3C383E30E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:checkpoint:firewall-1:r55:*:ng-ai:*:*:*:*:*","matchCriteriaId":"56C27C63-9254-4BAC-83C3-EB7EBDBF0FB8"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0477.html","source":"cve@mitre.org"},{"url":"http://www.nta-monitor.com/news/checkpoint2004/index.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10558","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16434","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0477.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.nta-monitor.com/news/checkpoint2004/index.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16434","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2680","sourceIdentifier":"security@ubuntu.com","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"mod_python (libapache2-mod-python) 3.1.4 and earlier does not properly handle when output filters process more than 16384 bytes, which can cause filter.read to return portions of previously freed memory."}],"vendorComments":[{"organization":"Red Hat","comment":"Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2004-2680\n\nThe Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here: http://www.redhat.com/security/updates/classification/","lastModified":"2009-05-21T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apache:mod_python:*:*:*:*:*:*:*:*","versionEndIncluding":"3.1.4","matchCriteriaId":"E9CA3501-ED5C-4CF8-A40B-5784F3502729"}]}]}],"references":[{"url":"http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3c6DCA8C14-8FFA-11D8-8B4E-000A95B0D772%40pixar.com%3e","source":"security@ubuntu.com"},{"url":"http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3cCD485B27-8F3E-11D8-934B-000A95B0D772%40pixar.com%3e","source":"security@ubuntu.com"},{"url":"http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3cEB279100-9000-11D8-8B4E-000A95B0D772%40pixar.com%3e","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/24418","source":"security@ubuntu.com"},{"url":"http://secunia.com/advisories/24424","source":"security@ubuntu.com"},{"url":"http://svn.apache.org/viewvc/httpd/mod_python/trunk/src/filterobject.c?r1=102649&r2=103561&pathrev=103561","source":"security@ubuntu.com"},{"url":"http://www.securityfocus.com/archive/1/462185/100/0/threaded","source":"security@ubuntu.com"},{"url":"http://www.securityfocus.com/bid/22849","source":"security@ubuntu.com"},{"url":"http://www.ubuntu.com/usn/usn-430-1","source":"security@ubuntu.com"},{"url":"http://www.vupen.com/english/advisories/2007/0846","source":"security@ubuntu.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14751","source":"security@ubuntu.com"},{"url":"https://issues.rpath.com/browse/RPL-1105","source":"security@ubuntu.com"},{"url":"https://launchpad.net/bugs/89308","source":"security@ubuntu.com","tags":["Patch"]},{"url":"http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3c6DCA8C14-8FFA-11D8-8B4E-000A95B0D772%40pixar.com%3e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3cCD485B27-8F3E-11D8-934B-000A95B0D772%40pixar.com%3e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3cEB279100-9000-11D8-8B4E-000A95B0D772%40pixar.com%3e","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/24424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://svn.apache.org/viewvc/httpd/mod_python/trunk/src/filterobject.c?r1=102649&r2=103561&pathrev=103561","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/462185/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/22849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/usn-430-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/0846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://issues.rpath.com/browse/RPL-1105","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/89308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2681","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PeerSec MatrixSSL before 1.1 caches session keys for an indefinitely long time, which might make it easier for remote attackers to hijack a session."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peersec_networks:matrixssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"ABDAF2B9-FB86-4E56-9EA7-492D9FCF6A93"}]}]}],"references":[{"url":"http://www.matrixssl.org/archives/000076.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40483","source":"cve@mitre.org"},{"url":"http://www.matrixssl.org/archives/000076.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40483","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2682","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PeerSec MatrixSSL before 1.1 does not implement RSA blinding, which allows context-dependent attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms (\"Karatsuba\" and normal), a related issue to CVE-2003-0147."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:peersec_networks:matrixssl:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"ABDAF2B9-FB86-4E56-9EA7-492D9FCF6A93"}]}]}],"references":[{"url":"http://www.matrixssl.org/archives/000075.html","source":"cve@mitre.org"},{"url":"http://www.matrixssl.org/archives/000075.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2683","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the %XML.Utils.SchemaServer class in InterSystems Cache' 5.0 allows attackers to access arbitrary files on a server."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intersystems:cache:5:*:*:*:*:*:*:*","matchCriteriaId":"AE68922A-7098-4F8B-8B07-FE72422C2C3B"}]}]}],"references":[{"url":"http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/53db65fbb73fc254/37358d45de1cc583","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/809f96becb84b6da/938000c0f3d48a48","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/53db65fbb73fc254/37358d45de1cc583","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/809f96becb84b6da/938000c0f3d48a48","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2684","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in the %template package in InterSystems Cache' 5.0 allows attackers to access certain files on a server, including (1) cache.key and (2) cache.dat, related to .csp files under (a) Dev\\studio\\templates and (b) Devuser\\studio\\templates."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:intersystems:cache_database:5:*:*:*:*:*:*:*","matchCriteriaId":"861AC5ED-A105-4D1A-99AF-2C92A4AFBDE3"}]}]}],"references":[{"url":"http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/7af3237a57e97f14/da52318590c68c75","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/cda052864061faf7/b1c4ad61ca27c514","source":"cve@mitre.org"},{"url":"http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/7af3237a57e97f14/da52318590c68c75","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/cda052864061faf7/b1c4ad61ca27c514","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2685","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long address in a ping (p) command to the Telnet proxy service, a different vector than CVE-2004-2416."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:youngzsoft:ccproxy:*:*:*:*:*:*:*:*","versionEndIncluding":"6.2","matchCriteriaId":"37395ED6-7BA7-48D4-8A4D-E79EDC35F0C3"}]}]}],"references":[{"url":"http://secunia.com/advisories/13085","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.youngzsoft.net/ccproxy/whatsnew.htm","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/4360","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/621","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13085","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.youngzsoft.net/ccproxy/whatsnew.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/4360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/621","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2686","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modules via crafted (1) mount or (2) sysfs system calls.  NOTE: this might be the same issue as CVE-2004-1767, but there are insufficient details to be sure."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*","matchCriteriaId":"34EBF074-78C8-41AF-88F1-DA6726E56F8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*","matchCriteriaId":"8F1F312C-413F-4DB4-ABF4-48E33F6FECF2"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*","matchCriteriaId":"1894C542-AA81-40A9-BF47-AE24C93C1ACB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*","matchCriteriaId":"0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*","matchCriteriaId":"369207B4-96FA-4324-9445-98FAE8ECF5DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*","matchCriteriaId":"08003947-A4F1-44AC-84C6-9F8D097EB759"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*","matchCriteriaId":"A2475113-CFE4-41C8-A86F-F2DA6548D224"},{"vulnerable":true,"criteria":"cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"}]}]}],"references":[{"url":"http://seclists.org/bugtraq/2004/Apr/0081.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008833","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-04/0297.html","source":"cve@mitre.org"},{"url":"http://www.immunitysec.com/downloads/solaris_kernel_vfs.sxw.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9962","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1381","source":"cve@mitre.org"},{"url":"http://seclists.org/bugtraq/2004/Apr/0081.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008833","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-04/0297.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.immunitysec.com/downloads/solaris_kernel_vfs.sxw.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9962","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1381","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2687","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:xcode:1.5:*:*:*:*:*:*:*","matchCriteriaId":"B66C7172-0104-41B7-8291-62B7E72B3AEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","versionEndIncluding":"2.18.3","matchCriteriaId":"76C7EB0C-C0C3-4B43-8AB1-76105351AF69"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2005-03/0183.html","source":"cve@mitre.org"},{"url":"http://distcc.samba.org/security.html","source":"cve@mitre.org"},{"url":"http://lists.samba.org/archive/distcc/2004q3/002550.html","source":"cve@mitre.org"},{"url":"http://lists.samba.org/archive/distcc/2004q3/002562.html","source":"cve@mitre.org"},{"url":"http://www.metasploit.org/projects/Framework/exploits.html#distcc_exec","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/13378","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2005-03/0183.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://distcc.samba.org/security.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.samba.org/archive/distcc/2004q3/002550.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.samba.org/archive/distcc/2004q3/002562.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.metasploit.org/projects/Framework/exploits.html#distcc_exec","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/13378","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2688","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter.  NOTE: this issue might overlap vector 3 in CVE-2006-3358."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:newsphp:newsphp:*:*:*:*:*:*:*:*","matchCriteriaId":"8D729EF1-C025-42DF-B628-3E261DD13238"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11346","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Apr/1009740.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15837","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Apr/1009740.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15837","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2689","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the \"autorized=admin; root=admin\" value."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:newsphp:newsphp:*:*:*:*:*:*:*:*","matchCriteriaId":"8D729EF1-C025-42DF-B628-3E261DD13238"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11346","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Apr/1009740.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15836","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11346","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/alerts/2004/Apr/1009740.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15836","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2690","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":8.5},"baseSeverity":"HIGH","exploitabilityScore":6.8,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:newsphp:newsphp:*:*:*:*:*:*:*:*","matchCriteriaId":"8D729EF1-C025-42DF-B628-3E261DD13238"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/alerts/2004/Apr/1009740.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15838","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/alerts/2004/Apr/1009740.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2691","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service (device reset) via a crafted request to the web management interface.  NOTE: the provenance of this information is unknown; details are obtained from third party reports."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3c17205-us:*:firmware_3.30:*:*:*:*:*:*","matchCriteriaId":"4C168429-2810-494E-8BE3-E09CBF46811A"},{"vulnerable":true,"criteria":"cpe:2.3:h:3com:3c17210-us:*:firmware_3.30:*:*:*:*:*:*","matchCriteriaId":"018AE4EE-FDCD-4694-8AAF-0DDCF53E1644"},{"vulnerable":true,"criteria":"cpe:2.3:h:3com:superstack_3_switch:4400:firmware_3.30:*:*:*:*:*:*","matchCriteriaId":"A960B1BB-ECFC-4D0B-8744-CC09DFDF1C99"},{"vulnerable":true,"criteria":"cpe:2.3:h:3com:superstack_3_switch:4400_se:firmware_3.30:*:*:*:*:*:*","matchCriteriaId":"66527D04-C95A-4D73-BDA2-2CAC4005386F"}]}]}],"references":[{"url":"http://secunia.com/advisories/11934","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7246","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16497","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11934","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/7246","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2692","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not handled using the php_escape_shell_cmd function."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.3},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"},{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:kyberdigi_labs:php-exec-dir:4.3.2:*:*:*:*:*:*:*","matchCriteriaId":"50938DB4-C710-4AC3-8786-E8820D383B0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:kyberdigi_labs:php-exec-dir:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"204770F1-9BB2-4B84-B695-38817B961FC3"},{"vulnerable":true,"criteria":"cpe:2.3:a:kyberdigi_labs:php-exec-dir:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"6414E201-1124-47CA-B583-483AA6037E3A"},{"vulnerable":true,"criteria":"cpe:2.3:a:kyberdigi_labs:php-exec-dir:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"EF59403D-09D7-4B8E-BBC1-21518E1ADD01"},{"vulnerable":true,"criteria":"cpe:2.3:a:kyberdigi_labs:php-exec-dir:4.3.6:*:*:*:*:*:*:*","matchCriteriaId":"DC0B27B3-D2D7-42B3-AFA3-0B41E70F70A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:kyberdigi_labs:php-exec-dir:4.3.7:*:*:*:*:*:*:*","matchCriteriaId":"202EC6C0-C693-46DC-9F6A-8AAD3BA270D6"}]}]}],"references":[{"url":"http://kyberdigi.cz/projects/execdir/english.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://seclists.org/fulldisclosure/2004/Jul/0347.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2004/Jul/0350.html","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2004/Jul/0357.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11928","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/7243","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10598","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16498","source":"cve@mitre.org"},{"url":"http://kyberdigi.cz/projects/execdir/english.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://seclists.org/fulldisclosure/2004/Jul/0347.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2004/Jul/0350.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/fulldisclosure/2004/Jul/0357.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11928","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/7243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10598","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16498","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2693","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HP-UX B.11.00 and B.11.11 with B6848AB GTK+ Support Libraries installed uses insecure directory permissions, which allows local users to gain privileges via files in /opt/gnome/src/GLib/."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":7.2},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.04:*:*:*:*:*:*:*","matchCriteriaId":"9B7A7B90-9086-4A10-8FB4-1C1D909BC173"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108455531606056&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11615","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.hp.com/products1/unix/java/mozilla/HPSBUX01034.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6120","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6105","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108455531606056&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11615","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.hp.com/products1/unix/java/mozilla/HPSBUX01034.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6120","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6105","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2694","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing attacks via a \"BASE HREF\" with the target set to \"_top\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*","matchCriteriaId":"85FD3557-956D-4A96-8AA5-5FD9DB87FD11"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=108448627120764&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11607","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6121","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=108448627120764&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11607","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6121","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2695","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the x_invoice_num parameter.  NOTE: this issue might be related to CVE-2006-4267."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0:*:*:*:*:*:*:*","matchCriteriaId":"EA1A0EF6-1267-463E-B4F7-83D2ACB64E43"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"90BE006A-0F2D-4F3A-A335-176C5A5978E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.2:*:*:*:*:*:*:*","matchCriteriaId":"151876D4-B72E-4D5F-A151-5A3DCAE51299"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0.3:*:*:*:*:*:*:*","matchCriteriaId":"984E8E57-57E5-4FEC-9210-4083AD400F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_beta_2:*:*:*:*:*:*:*","matchCriteriaId":"0A4E9C82-64CF-4487-8947-ED745C41945A"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_beta_3:*:*:*:*:*:*:*","matchCriteriaId":"D099410F-AD78-4EF1-879E-BEED838B90E0"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_beta_4:*:*:*:*:*:*:*","matchCriteriaId":"B411D271-87B5-4A82-8E05-5277E8E205E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_beta_5:*:*:*:*:*:*:*","matchCriteriaId":"09FD2B80-AEB5-444D-AEC3-F59E6727BCF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_beta_6:*:*:*:*:*:*:*","matchCriteriaId":"1CA6003D-1E93-472E-B037-8D0922C4247C"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_beta_7:*:*:*:*:*:*:*","matchCriteriaId":"5B366723-3598-4B4A-AFB9-E4A9616D033B"},{"vulnerable":true,"criteria":"cpe:2.3:a:jelsoft:vbulletin:3.0_gamma:*:*:*:*:*:*:*","matchCriteriaId":"0EFD7266-0E3B-44B3-AC8E-DE0BFC5E2939"},{"vulnerable":true,"criteria":"cpe:2.3:a:point-to-point_protocol_project:point-to-point_protocol:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"1616F663-E821-4CC2-A62F-3F4010F62084"}]}]}],"references":[{"url":"http://secunia.com/advisories/12531/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/unixfocus/5BP0E15E0M.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11193","source":"cve@mitre.org"},{"url":"http://www.vbulletin.com/forum/bugs.php?do=view&bugid=3379","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.vbulletin.com/forum/showthread.php?t=124876","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17365","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12531/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/unixfocus/5BP0E15E0M.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vbulletin.com/forum/bugs.php?do=view&bugid=3379","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.vbulletin.com/forum/showthread.php?t=124876","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17365","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2696","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation (RMI) over Internet Inter-ORB Protocol (IIOP), does not properly handle when multiple logins for different users coming from the same client, which could cause an \"unexpected user identity\" to be used in an RMI call."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.5},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:*:*:*:*:*:*","matchCriteriaId":"1FDCF6AE-43DC-4AE5-9260-CA657F40BE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:express:*:*:*:*:*","matchCriteriaId":"05AFBE78-C611-4EA2-8B00-5F8B61696CBE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:*:win32:*:*:*:*:*","matchCriteriaId":"AC5439C1-D06F-44C6-94F5-2BD8598A506C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:*:*:*:*:*:*","matchCriteriaId":"5DFE26B3-31F2-4FC0-854D-56EA4D08C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:express:*:*:*:*:*","matchCriteriaId":"C3B7752C-B297-480A-B3FC-948EA081670C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"E40C38EC-ECA4-4F0C-8468-16191CDB9997"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:*:*:*:*:*:*","matchCriteriaId":"63017BF8-D681-45EC-9C31-09D029F1126D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:express:*:*:*:*:*","matchCriteriaId":"71892EC0-E6B1-4214-AC53-06489F711829"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"C4FD8871-680E-40F9-85AB-417B5195D4BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:*:*:*:*:*:*","matchCriteriaId":"8E0B1791-974A-4967-8CF9-33BE8183200B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:express:*:*:*:*:*","matchCriteriaId":"696F52AE-FEB9-4090-872E-FDFD969F5604"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp3:win32:*:*:*:*:*","matchCriteriaId":"2B4BC3F5-BFE8-4834-B427-B6260D5B7A85"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:*:*:*:*:*:*","matchCriteriaId":"7B12A8B1-F78E-46B3-8872-4C6484345477"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:express:*:*:*:*:*","matchCriteriaId":"DCED03B6-7565-4F53-8D85-F3391BF66988"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp4:win32:*:*:*:*:*","matchCriteriaId":"D2FE768F-363B-49BC-8410-739B164FB32E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:*:*:*:*:*:*","matchCriteriaId":"CB2FB0E9-3812-49C5-94F4-3B39D5BE2EED"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:express:*:*:*:*:*","matchCriteriaId":"B70F0353-635F-465B-A7E5-AF2D017AB008"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp5:win32:*:*:*:*:*","matchCriteriaId":"D3DA28D0-18CC-4F99-AABB-EC7863CBD455"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp6:*:*:*:*:*:*","matchCriteriaId":"6B091903-943F-4822-9F24-9D109B2D76A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp6:express:*:*:*:*:*","matchCriteriaId":"FED6AE20-974B-44A7-98C4-F69E6E33D9DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:6.1:sp6:win32:*:*:*:*:*","matchCriteriaId":"CE1D6EE4-8545-4D0A-A50B-C8009F054DC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"F9C5AFCF-79D8-4005-B800-B0C6BD461276"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:express:*:*:*:*:*","matchCriteriaId":"FBDF3AC0-0680-4EEE-898C-47D194667BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:*:win32:*:*:*:*:*","matchCriteriaId":"8DEDDAF2-555D-4425-B4B6-65B1E9C21FF1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:*:*:*:*:*:*","matchCriteriaId":"6828CE4B-91E8-4688-977F-DC7BC21131C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:express:*:*:*:*:*","matchCriteriaId":"BBDB9094-78E8-4CBF-9F5F-321D5174F1EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp1:win32:*:*:*:*:*","matchCriteriaId":"9CD2BB36-AC0B-48E9-91E1-A4465896E87A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:*:*:*:*:*:*","matchCriteriaId":"E141AA86-C6D0-4FA8-9268-0FB0635DF9CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:express:*:*:*:*:*","matchCriteriaId":"6FB8930F-C6D8-40B9-8D08-751F5B47229B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp2:win32:*:*:*:*:*","matchCriteriaId":"A5C59B80-279B-45B3-9CC1-5A263681025B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:*:*:*:*:*:*","matchCriteriaId":"893D9D88-43C4-4F9F-A364-0585DE6FA9E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:express:*:*:*:*:*","matchCriteriaId":"D59F9859-7344-43F0-9348-E57FABB9E431"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp3:win32:*:*:*:*:*","matchCriteriaId":"D2D05BAB-AB3B-466E-8301-01A41644DE77"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:*:*:*:*:*:*","matchCriteriaId":"D34E2925-DE2A-437F-B349-BD7103F4C37E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:express:*:*:*:*:*","matchCriteriaId":"0A4EC87D-EF83-48C5-B516-A6A482D9F525"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp4:win32:*:*:*:*:*","matchCriteriaId":"935F28E3-9799-4EF6-AB83-62E9C214DD0D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp5:*:*:*:*:*:*","matchCriteriaId":"16E3F943-D920-4C0A-8545-5CF7D792011F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp5:express:*:*:*:*:*","matchCriteriaId":"6BBA04D4-BA2E-4495-85DE-38918A878012"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0:sp5:win32:*:*:*:*:*","matchCriteriaId":"6C444DA3-69E3-4465-9173-85966B1162A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"74AE35FF-AC1C-435B-8CE9-F40AFFFA3A46"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:express:*:*:*:*:*","matchCriteriaId":"25C711BB-E7E0-41D8-985E-5DD386C54637"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:*:win32:*:*:*:*:*","matchCriteriaId":"38EFE72C-10E5-4EED-B016-D914FA52DE6F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:*:*:*:*:*:*","matchCriteriaId":"32E8797D-1B62-4480-A79D-0345E65699E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:express:*:*:*:*:*","matchCriteriaId":"071FAD20-D502-4634-852A-4CD06FE8E114"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"97E6F518-D320-4655-B698-2D1A82CA3EDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:*:*:*:*:*:*","matchCriteriaId":"2FC1486C-6AC4-44F7-9015-40FD4A341C38"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:express:*:*:*:*:*","matchCriteriaId":"AB5909DB-B2E2-4358-9D45-C225C6B02360"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"04C3F96B-A1FF-4E3E-B059-366E176E5E19"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:*:*:*:*:*:*","matchCriteriaId":"5485722F-5DE4-4CD4-865F-32585537F523"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp3:express:*:*:*:*:*","matchCriteriaId":"BCB01060-2C29-4F75-8D0A-74F62E9F0A17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:*:*:*:*:*:*","matchCriteriaId":"3CCEDE54-97F3-457A-9886-5BD91C9AED2B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:7.0.0.1:sp4:express:*:*:*:*:*","matchCriteriaId":"2269D44C-65EA-4ED0-9F03-A32AC5D44EEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:*:*:*:*:*:*","matchCriteriaId":"E08D4CEA-9ACC-4869-BC87-3524A059914F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:express:*:*:*:*:*","matchCriteriaId":"ADED8968-EA9C-4F0E-AD2F-BC834F4D8A58"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:*:win32:*:*:*:*:*","matchCriteriaId":"A3DFE048-905E-4890-809D-F6BCEF7F83C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:*:*:*:*:*:*","matchCriteriaId":"6F5B2A06-CE19-4A57-9566-09FC1E259CDB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:express:*:*:*:*:*","matchCriteriaId":"F7560131-A6AC-4BBB-AA2D-C7C63AB51226"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp1:win32:*:*:*:*:*","matchCriteriaId":"349036A0-B5E2-4656-8D2D-26BEE9EF9DFB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:*:*:*:*:*:*","matchCriteriaId":"D18E22CC-A0FC-4BC7-AD39-2645F57486C1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:express:*:*:*:*:*","matchCriteriaId":"893C2387-03E3-4F8E-9029-BC64C64239EF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bea:weblogic_server:8.1:sp2:win32:*:*:*:*:*","matchCriteriaId":"D00633D1-4B38-48D9-B5CD-E8D66EA90599"}]}]}],"references":[{"url":"http://dev2dev.bea.com/pub/advisory/59","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11865","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010493","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7081","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10545","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16421","source":"cve@mitre.org"},{"url":"http://dev2dev.bea.com/pub/advisory/59","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11865","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010493","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7081","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10545","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16421","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2697","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument (log file).  NOTE: this might be related to CVE-2006-5002."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"465B06C4-136D-4CD8-BA38-B6B50511624C"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1:*:*:*:*:*:*:*","matchCriteriaId":"BCB23261-D5A9-4C49-B08E-97A63ED6F84A"},{"vulnerable":true,"criteria":"cpe:2.3:o:ibm:aix:5.1l:*:*:*:*:*:*:*","matchCriteriaId":"43E38D56-80BA-460C-A296-ED7F506E4364"}]}]}],"references":[{"url":"http://secunia.com/advisories/11200","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4582","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/exploits/5CP0F0UDFG.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9982","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.xfocus.org/exploits/200403/31.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15620","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11200","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/4582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/exploits/5CP0F0UDFG.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9982","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.xfocus.org/exploits/200403/31.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15620","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2698","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Race condition in IMWheel 1.0.0pre11 and earlier, when running with the -k option, allows local users to cause a denial of service (IMWheel crash) and possibly modify arbitrary files via a symlink attack on the imwheel.pid file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:C/I:C/A:C","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":6.9},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-362"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:imwheel:imwheel:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0pre11","matchCriteriaId":"5E022CC3-729B-4F9C-A8F7-810A66A60AB1"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0914.html","source":"cve@mitre.org"},{"url":"http://imwheel.sourceforge.net/files/DEVELOPMENT.txt","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12349","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011049","source":"cve@mitre.org"},{"url":"http://www.caughq.org/advisories/CAU-2004-0002.txt","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9111","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11008","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17082","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0914.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://imwheel.sourceforge.net/files/DEVELOPMENT.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12349","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011049","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.caughq.org/advisories/CAU-2004-0002.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9111","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11008","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17082","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2699","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary product images via a modified ProductID parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspdotnetstorefront:aspdotnetstorefront:3.3:*:*:*:*:*:*:*","matchCriteriaId":"026EB42B-87DF-4616-81A2-AB36F6C8CECE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0235.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11839","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3206","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6958","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/365559","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10506","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16377","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0235.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3206","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/365559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10506","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16377","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2700","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unrestricted file upload vulnerability in AspDotNetStorefront 3.3 allows remote authenticated administrators to upload arbitrary files with executable extensions via admin/images.aspx."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":9.0},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspdotnetstorefront:aspdotnetstorefront:3.3:*:*:*:*:*:*:*","matchCriteriaId":"026EB42B-87DF-4616-81A2-AB36F6C8CECE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0230.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11839","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6959","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0230.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/6959","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2701","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote attackers to inject arbitrary web script or HTML via the returnurl parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aspdotnetstorefront:aspdotnetstorefront:3.3:*:*:*:*:*:*:*","matchCriteriaId":"026EB42B-87DF-4616-81A2-AB36F6C8CECE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0129.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0229.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11839","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10507","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16426","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0129.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0229.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11839","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/10507","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16426","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2702","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in login_up.php3 in Plesk 7.0 and 7.1 Reloaded allows remote attackers to inject arbitrary web script or HTML via the login_name parameter.  NOTE: this might be the same vector as CVE-2006-6451."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:swsoft:plesk:7.0:*:*:*:*:*:*:*","matchCriteriaId":"4D71AEA1-8A0F-4DA6-A142-DB64DDB9F542"},{"vulnerable":true,"criteria":"cpe:2.3:a:swsoft:plesk:7.1:*:*:*:*:*:*:*","matchCriteriaId":"6827D827-878A-4164-82FA-82D7A62AD541"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1022.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1031.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0554.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12368","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011042","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9149","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11024","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17085","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1022.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1031.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0554.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12368","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011042","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11024","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17085","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2703","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by including encrypted data in a mail message, which causes the message to be marked as \"Clean\" instead of \"Encrypted\"."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper_business_suite_i:*:*:*:*:*:*:*:*","matchCriteriaId":"22D367E0-7BBF-4069-8BAF-22354D126362"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper_business_suite_ii:*:*:*:*:*:*:*:*","matchCriteriaId":"2F701A23-4D0E-40D2-8CE9-3529346065F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mailsweeper_for_smtp:4.3:*:*:*:*:*:*:*","matchCriteriaId":"11667D6A-A1BA-4FF4-BE5F-194A743167FE"},{"vulnerable":true,"criteria":"cpe:2.3:a:clearswift:mimesweeper_for_web:5.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2D98B72C-99E5-4980-8305-EF40C469C33F"}]}]}],"references":[{"url":"http://download.mimesweeper.com/www/TechnicalDocumentation/MSWSMTP505UpdateReadMe.htm","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13160","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/11602","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11669","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18035","source":"cve@mitre.org"},{"url":"http://download.mimesweeper.com/www/TechnicalDocumentation/MSWSMTP505UpdateReadMe.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13160","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/11602","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11669","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18035","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2704","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Hastymail 1.0.1 and earlier (stable) and 1.1 and earlier (development) does not send the \"attachment\" parameter in the Content-Disposition field for attachments, which causes the attachment to be rendered inline by Internet Explorer when the victim clicks the download link, which facilitates cross-site scripting (XSS) and possibly other attacks."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hastymail:hastymail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"8E2249CA-8B7D-4C5A-B342-B1A7B95A91EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:hastymail:hastymail:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1","matchCriteriaId":"34B6D795-D041-41FD-A11B-04389CE3343A"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*","matchCriteriaId":"8682FAF3-98E3-485C-89CB-C0358C4E2AB0"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0322.html","source":"cve@mitre.org"},{"url":"http://hastymail.sourceforge.net/security.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/12358","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011054","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9131","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11022","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17091","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0322.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://hastymail.sourceforge.net/security.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/12358","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9131","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11022","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17091","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2705","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pvpgn:pvpgn:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6.3","matchCriteriaId":"42CB6756-1FA5-4A5B-8A02-319305D9DE9A"},{"vulnerable":true,"criteria":"cpe:2.3:a:pvpgn:pvpgn:1.6.0:*:*:*:*:*:*:*","matchCriteriaId":"BF225ED2-15BB-4D3C-87E6-3DED4EE8DFC6"},{"vulnerable":true,"criteria":"cpe:2.3:a:pvpgn:pvpgn:1.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4F87D163-7550-4853-AE95-9ADBECC4A28D"},{"vulnerable":true,"criteria":"cpe:2.3:a:pvpgn:pvpgn:1.6.2:*:*:*:*:*:*:*","matchCriteriaId":"1C6632E2-D8F4-4A37-AFBA-6BADDC1DCD12"}]}]}],"references":[{"url":"http://forums.pvpgn.org/index.php/topic%2C2655.0.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12360","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011050","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9144","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11035","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17094","source":"cve@mitre.org"},{"url":"http://forums.pvpgn.org/index.php/topic%2C2655.0.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/12360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011050","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9144","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11035","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17094","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2706","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Gyach Enhanced (Gyach-E) before 1.0.4 allows remote attackers to cause a denial of service (crash) via conference packets with error messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"},{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phrozensmoke:gyach_enhanced:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.4","matchCriteriaId":"1278A00C-5953-4AD2-8658-8C2679230E90"}]}]}],"references":[{"url":"http://www.osvdb.org/8938","source":"cve@mitre.org"},{"url":"http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8938","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2707","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in Gyach Enhanced (Gyach-E) before 1.0.5 have unknown impact and attack vectors related to \"several security flaws,\" probably related to buffer overflows in HTTP server responses."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phrozensmoke:gyach_enhanced:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.4","matchCriteriaId":"1278A00C-5953-4AD2-8658-8C2679230E90"}]}]}],"references":[{"url":"http://securitytracker.com/id?1011058","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8937","source":"cve@mitre.org"},{"url":"http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10975","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17096","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8937","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/10975","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17096","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2708","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Gyach Enhanced (Gyach-E) before 1.0.0 stores passwords in plaintext, which allows attackers to obtain user passwords by reading the configuration file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phrozensmoke:gyach_enhanced:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0_pre","matchCriteriaId":"CE2C7D6F-865B-4026-8AE5-71369AE0145A"}]}]}],"references":[{"url":"http://www.osvdb.org/8834","source":"cve@mitre.org"},{"url":"http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8834","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2709","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the strip_html_tags method for Gyach Enhanced (Gyach-E) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown vectors involving HTML tags."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phrozensmoke:gyach_enhanced:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.3","matchCriteriaId":"16D0155D-4A7C-4093-821D-2557E5B6E34D"}]}]}],"references":[{"url":"http://www.osvdb.org/8969","source":"cve@mitre.org"},{"url":"http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2710","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Gyach Enhanced (Gyach-E) before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to (1) sending certain typing statuses or (2) setting the chat room status bar to the current chat room name."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phrozensmoke:gyach_enhanced:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.2","matchCriteriaId":"1153FCA9-E521-4490-9019-6DB6F26DE088"}]}]}],"references":[{"url":"http://www.osvdb.org/8970","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8971","source":"cve@mitre.org"},{"url":"http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8970","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8971","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2711","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple buffer overflows in Gyach Enhanced (Gyach-E) before 1.0.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to \"avatar retrieval.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phrozensmoke:gyach_enhanced:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.1","matchCriteriaId":"46855785-9C49-44FF-A62A-C5789D7AD824"}]}]}],"references":[{"url":"http://www.osvdb.org/8972","source":"cve@mitre.org"},{"url":"http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8972","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2712","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in Gyach Enhanced (Gyach-E) before 1.0.0-SneakPeek-3 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to \"URL data.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phrozensmoke:gyach_enhanced:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0.0_sneakpeek_2","matchCriteriaId":"F937AC4F-F31E-4F99-BFDA-73FF70DFBD8D"}]}]}],"references":[{"url":"http://www.osvdb.org/8973","source":"cve@mitre.org"},{"url":"http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/8973","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2004-2713","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\\Internet Logs\\* to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissions. NOTE: this issue has been disputed by the vendor, who claims that it does not affect product functionality since the same information is also saved in a protected file"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:N/I:N/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":1.9},"baseSeverity":"LOW","exploitabilityScore":3.4,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zonelabs:zonealarm:1.0:*:pro:*:*:*:*:*","matchCriteriaId":"C754CC13-8B9A-40BE-A2EE-25E3ADCBE8E3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0389.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0871.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0883.html","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0933.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9761","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17099","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-08/0389.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0871.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0883.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0933.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9761","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17099","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2714","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Window Maker 0.80.2 and earlier allows attackers to perform unknown actions via format string specifiers in a font specification in WMGLOBAL, probably a format string vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.0},"baseSeverity":"MEDIUM","exploitabilityScore":6.8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-134"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.20.1.3:*:*:*:*:*:*:*","matchCriteriaId":"6217910D-C42C-45A1-9093-79AC7913E8D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.52.2:*:*:*:*:*:*:*","matchCriteriaId":"24D2F210-3F2C-4E59-881B-527C6D97C074"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.53:*:*:*:*:*:*:*","matchCriteriaId":"258F7285-39B4-4324-A764-135C6E5BC05F"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.60:*:*:*:*:*:*:*","matchCriteriaId":"B7608D98-51FF-4B72-B264-997F1CDC52AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.60.0:*:*:*:*:*:*:*","matchCriteriaId":"70AFC929-AB90-4914-A900-056C074D4CCD"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.61:*:*:*:*:*:*:*","matchCriteriaId":"61B98917-1DCD-4E44-B795-77D6E5EF4591"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.61.1:*:*:*:*:*:*:*","matchCriteriaId":"C68989EA-4697-45D7-9AEC-A14DE785A00A"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.62:*:*:*:*:*:*:*","matchCriteriaId":"E2AA2B5B-C63F-4076-A759-2B9C04D6151B"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.62.1:*:*:*:*:*:*:*","matchCriteriaId":"C9F849D3-AF59-4318-8205-8B6E7A8129D2"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.63:*:*:*:*:*:*:*","matchCriteriaId":"36012A18-0215-4357-94A0-A18A77165CC5"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.63.1:*:*:*:*:*:*:*","matchCriteriaId":"D19C4E0B-1E47-44E1-9963-6C8596B0E746"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.64:*:*:*:*:*:*:*","matchCriteriaId":"B674EE20-5629-4693-BC70-E72A32304F94"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.65:*:*:*:*:*:*:*","matchCriteriaId":"433971EF-9B9D-4C7A-840A-1CF06B8A08F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.65.1:*:*:*:*:*:*:*","matchCriteriaId":"13CADEFF-5ABD-4384-BAC1-18D2B625F42F"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.80:*:*:*:*:*:*:*","matchCriteriaId":"E462EB39-1D25-468F-A0CF-59BFB51C618C"},{"vulnerable":true,"criteria":"cpe:2.3:a:windowmaker:windowmaker:0.80.2:*:*:*:*:*:*:*","matchCriteriaId":"DFCA5698-8FB3-4B58-A276-21C273F9D919"}]}]}],"references":[{"url":"http://secunia.com/advisories/12961","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011918","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11108","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11512","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.windowmaker.org/src/ChangeLog","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17845","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12961","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011918","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11108","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11512","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.windowmaker.org/src/ChangeLog","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17845","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2715","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain administrative privileges by setting the do_not_login parameter to false."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_heaven:phpmychat:0.14.5:*:*:*:*:*:*:*","matchCriteriaId":"9DD185C4-281A-4385-9C71-EC0E9D6365EC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0252.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11894","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010515","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7149","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10556","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16440","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0252.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7149","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16440","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2716","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers to execute arbitrary SQL commands via the (1) sortBy, (2) sortOrder, (3) startReg, (4) U, (5) LastCheck , and (6) R parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_heaven:phpmychat:0.14.5:*:*:*:*:*:*:*","matchCriteriaId":"9DD185C4-281A-4385-9C71-EC0E9D6365EC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0252.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11894","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010515","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7152","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10556","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16442","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0252.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11894","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7152","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16442","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2717","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple directory traversal vulnerabilities in admin.php3 in PHPMyChat 0.14.5 allow remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the (1) sheet and (2) What parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_heaven:phpmychat:0.14.5:*:*:*:*:*:*:*","matchCriteriaId":"9DD185C4-281A-4385-9C71-EC0E9D6365EC"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0252.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11894","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010515","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7150","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10556","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0252.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010515","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7150","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10556","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2004-2718","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers to obtain sensitive information including database passwords via a direct request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_heaven:phpmychat:0.14.5:*:*:*:*:*:*:*","matchCriteriaId":"9DD185C4-281A-4385-9C71-EC0E9D6365EC"}]}]}],"references":[{"url":"http://secunia.com/advisories/11894","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/unixfocus/6D00S0KC0S.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securiteam.com/unixfocus/6D00S0KC0S.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2719","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the UrlToLocal function in PunyLib.dll of Foxmail 5.0.300 allows remote attackers to execute arbitrary code via a mail message with a long From field, a different issue than CVE-2005-0339."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:foxmail:foxmail:5.0.300:*:*:*:*:*:*:*","matchCriteriaId":"087C63A5-80C5-4102-AA07-4A931E162A0B"}]}]}],"references":[{"url":"http://secunia.com/advisories/11231","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9954","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15640","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/164","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11231","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/9954","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15640","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/164","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2720","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in register.asp in Snitz Forums 2000 3.4.04 and earlier allows remote attackers to inject arbitrary web script or HTML via javascript events in the Email parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:snitz_communications:snitz_forums_2000:*:*:*:*:*:*:*:*","versionEndIncluding":"3.4.04","matchCriteriaId":"4E608F58-FA9B-4683-ACE2-67581E80BD0A"}]}]}],"references":[{"url":"http://forum.snitz.com/forum/topic.asp?TOPIC_ID=53360","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11895","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3200","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010524","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/7190","source":"cve@mitre.org"},{"url":"http://www.sec-tec.co.uk/vulnerability/snitzxss.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/366309","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10564","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16444","source":"cve@mitre.org"},{"url":"http://forum.snitz.com/forum/topic.asp?TOPIC_ID=53360","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11895","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3200","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010524","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/7190","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sec-tec.co.uk/vulnerability/snitzxss.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/366309","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10564","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16444","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2721","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The CheckGroup function in openSkat VTMF before 2.1 generates public key pairs in which the \"p\" variable might not be prime, which allows remote attackers to determine the private key and decrypt messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:heiko_stamer:openskat:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0","matchCriteriaId":"3DA1A0B5-4B35-4953-84B4-A8E315707AEF"}]}]}],"references":[{"url":"http://freshmeat.net/projects/openskat/?branch_id=36295&release_id=178549","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://securitytracker.com/id?1012181","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11652","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11667","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18049","source":"cve@mitre.org"},{"url":"http://freshmeat.net/projects/openskat/?branch_id=36295&release_id=178549","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://securitytracker.com/id?1012181","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11652","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11667","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18049","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2722","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[{"sourceIdentifier":"cve@mitre.org","tags":["disputed"]}],"descriptions":[{"lang":"en","value":"Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords.  NOTE: the original researcher reports that the vendor has disputed this issue"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nessus:nessus:2.0.10a:*:*:*:*:*:*:*","matchCriteriaId":"4C99BF02-35DD-4FF1-9128-88D3BB405725"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-03/1363.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009575","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4816","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15644","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-03/1363.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009575","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4816","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15644","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2723","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain passwords."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-255"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nessus:nessuswx:1.4.4:*:*:*:*:*:*:*","matchCriteriaId":"43B53A05-7D4B-49EE-89CF-4E7119AB992A"}]}]}],"references":[{"url":"http://seclists.org/fulldisclosure/2004/Mar/1343.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1009577","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/4814","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9993","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15641","source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2004/Mar/1343.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1009577","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/4814","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9993","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15641","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2724","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a denial of service (server crash and client CPU consumption) via a username beginning with percent (%) followed by a null character."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:C","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":7.1},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lionmax_software:chat_anywhere:2.72a:*:*:*:*:*:*:*","matchCriteriaId":"60D0E032-8EFE-4A53-91CA-9C40D25FAB3F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1183.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12398","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011080","source":"cve@mitre.org"},{"url":"http://www.autistici.org/fdonato/advisory/ChatAnywhere2.72a-adv.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/9275","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17148","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1183.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/12398","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011080","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.autistici.org/fdonato/advisory/ChatAnywhere2.72a-adv.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/9275","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17148","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2725","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in (a) search.php, (2) the email parameter in (b) subscribe.php, and (3) the return and (4) title parameters in (c) forum_2.php."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:aztek_forum:aztek_forum:4.0:*:*:*:*:*:*:*","matchCriteriaId":"BEF91FDD-2582-4E67-BAA6-4B4EA4114E02"}]}]}],"references":[{"url":"http://secunia.com/advisories/13202","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012213","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.osvdb.org/11704","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11705","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11706","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11654","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18057","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13202","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012213","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.osvdb.org/11704","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11706","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11654","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18057","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2726","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which allows remote attackers to cause a denial of service (null dereference and application crash).  NOTE: This is a different vulnerability than CVE-2005-1348."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable:1.18:*:professional:*:*:*:*:*","matchCriteriaId":"C32BE32D-03F0-4C17-9F89-65F5D28E16DE"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0159.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11588","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oliverkarow.de/research/MailWebHTTPAuthCrash.txt","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0159.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.oliverkarow.de/research/MailWebHTTPAuthCrash.txt","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2727","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service (application crash) via a long HTTP GET request."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable:1.5:*:*:*:*:*:*:*","matchCriteriaId":"1B1C4F6E-5D9B-4EFA-BA05-E3B774333216"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable:1.6:*:*:*:*:*:*:*","matchCriteriaId":"76971583-B261-4101-AF38-D87477818806"},{"vulnerable":true,"criteria":"cpe:2.3:a:mailenable:mailenable:1.7:*:*:*:*:*:*:*","matchCriteriaId":"71997CBD-EAA2-4BB8-955C-D9EB5C3134B8"}]}]}],"references":[{"url":"http://secunia.com/advisories/11588","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010107","source":"cve@mitre.org"},{"url":"http://www.hat-squad.com/en/000071.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6037","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6038","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10312","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2005/0383","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16114","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16115","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11588","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010107","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.hat-squad.com/en/000071.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6037","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6038","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10312","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.vupen.com/english/advisories/2005/0383","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16115","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2728","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the FTP server of Hummingbird Connectivity 7.1 and 9.0 allows remote, authenticated users to cause a denial of service (application crash) via a long argument to the XCWD command."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":3.5},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hummingbird:connectivity:7.1:*:*:*:*:*:*:*","matchCriteriaId":"F3BB0FAB-DCC2-4B74-8B13-B1AC38EC5B6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hummingbird:connectivity:9.0:*:*:*:*:*:*:*","matchCriteriaId":"E78D1FD6-9918-41F9-8125-0F12E586B089"}]}]}],"references":[{"url":"http://secunia.com/advisories/12984","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011942","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11133","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11542","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2004/841713/index.htm","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17855","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11133","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11542","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2004/841713/index.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17855","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2729","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Inetd32 Administration Tool of Hummingbird Connectivity 7.1 and 9.0 allows local users to execute arbitrary code by changing the program for handling incoming connections."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hummingbird:connectivity:7.1:*:*:*:*:*:*:*","matchCriteriaId":"F3BB0FAB-DCC2-4B74-8B13-B1AC38EC5B6E"},{"vulnerable":true,"criteria":"cpe:2.3:a:hummingbird:connectivity:9.0:*:*:*:*:*:*:*","matchCriteriaId":"E78D1FD6-9918-41F9-8125-0F12E586B089"}]}]}],"references":[{"url":"http://secunia.com/advisories/12984","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011942","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11132","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11539","source":"cve@mitre.org"},{"url":"http://www.uniras.gov.uk/vuls/2004/841713/index.htm","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17854","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011942","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11132","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11539","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.uniras.gov.uk/vuls/2004/841713/index.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17854","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2730","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:psexec:*:*:*:*:*:*:*:*","versionEndIncluding":"1.53","matchCriteriaId":"A6C140D7-0DA3-453B-A06D-070DEBD943A0"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:psgetsid:*:*:*:*:*:*:*:*","versionEndIncluding":"1.40","matchCriteriaId":"4B9E0C2C-4BF7-4DBF-964E-F033943BEA73"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:psinfo:*:*:*:*:*:*:*:*","versionEndIncluding":"1.60","matchCriteriaId":"A550D0AA-1C64-4F47-BC34-50938AD19647"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:pskill:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"DC22873C-3E90-48F8-A7A0-924B77E6E14C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:pslist:*:*:*:*:*:*:*:*","versionEndIncluding":"1.25","matchCriteriaId":"68257748-F761-445C-A656-0E9390AB4723"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:psloglist:*:*:*:*:*:*:*:*","versionEndIncluding":"2.50","matchCriteriaId":"406120EC-5A6F-4C35-87CC-704A81276A01"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:pspasswd:*:*:*:*:*:*:*:*","versionEndIncluding":"1.20","matchCriteriaId":"30C0566A-E0C8-48F8-AFAB-9B791E683FD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:psservice:*:*:*:*:*:*:*:*","versionEndIncluding":"2.11","matchCriteriaId":"D0A29E57-7FED-43A7-8F2E-413D3A3DA08E"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:psshutdown:*:*:*:*:*:*:*:*","versionEndIncluding":"2.31","matchCriteriaId":"292787CF-D353-44D3-BBFE-F61A693D2B79"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:pssuspend:*:*:*:*:*:*:*:*","versionEndIncluding":"1.04","matchCriteriaId":"A76A6F29-D9EA-4C09-91D1-4408EDB4965C"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:sysinternals_pstools:*:*:*:*:*:*:*:*","versionEndIncluding":"2.04","matchCriteriaId":"026F39FC-E2B0-411C-A4D9-FC3DD0AC200D"}]}]}],"references":[{"url":"http://secunia.com/advisories/12108","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010737","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8140","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10759","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=28304","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16743","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12108","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010737","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8140","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10759","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=28304","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16743","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2731","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, 2.6.x up to 2.6.7, and possibly later versions, allow local users to execute arbitrary code by specifying (1) a small buffer size to the copyin_string function or (2) a negative buffer size to the copyin function."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. The Linux kernel as shipped with with Red Hat Enterprise Linux 2.1, 3, 4 and 5 did not include the Sbus PROM module and therefore are not affected by this issue.","lastModified":"2007-10-09T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.4},"baseSeverity":"MEDIUM","exploitabilityScore":3.4,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"C24A129D-2E5E-436C-95DE-AE75D2E8D092"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test1:*:*:*:*:*:*","matchCriteriaId":"2E244C37-E366-482E-9173-9376D0839839"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test10:*:*:*:*:*:*","matchCriteriaId":"11F96BB9-6509-4F1E-9590-E55EE8C6F992"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test11:*:*:*:*:*:*","matchCriteriaId":"AFAEE304-B9D4-4F1E-A2E0-9E5A4932096D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test12:*:*:*:*:*:*","matchCriteriaId":"12375EA9-EBFF-40B6-BCBC-E34BC3A6CDA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test2:*:*:*:*:*:*","matchCriteriaId":"718D4631-440E-4783-8966-B2A2D3EF89B3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test3:*:*:*:*:*:*","matchCriteriaId":"6111EDDB-065F-4AD1-925C-E0A3C1DE26AE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test4:*:*:*:*:*:*","matchCriteriaId":"A8A2F7E7-0C51-43F2-BCEA-01FF738971D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test5:*:*:*:*:*:*","matchCriteriaId":"40F5FFBB-05C8-4D65-9FCF-11E67BEE86AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test6:*:*:*:*:*:*","matchCriteriaId":"7015F57A-1E3B-42D2-9D12-F695078EFB21"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test7:*:*:*:*:*:*","matchCriteriaId":"467721EE-5130-46C5-BBB7-0F4878F3F171"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test8:*:*:*:*:*:*","matchCriteriaId":"171257E7-12C5-4283-88F7-FFE643995563"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.0:test9:*:*:*:*:*:*","matchCriteriaId":"0887E02F-9F36-41F0-9F75-060B8414D7BF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"55B85D5B-4EA1-4FCF-8D50-9C54E8FDA92F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"01408EC0-9C2D-4A44-8080-D7FC7E1A1FA1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"5F49A384-7222-41F3-9BE1-4E18C00E50A6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.3:pre3:*:*:*:*:*:*","matchCriteriaId":"74F962BE-2187-4C8F-BAE7-EFA3D79FCB8D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"05520FE3-C48D-42E8-BC24-C2396BD46CBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.5:*:*:*:*:*:*:*","matchCriteriaId":"D865FBB6-E07D-492F-A75E-168B06C8ADEE"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.6:*:*:*:*:*:*:*","matchCriteriaId":"598F24C2-0366-4799-865C-5EE4572B734B"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.7:*:*:*:*:*:*:*","matchCriteriaId":"D0399660-6385-45AB-9785-E504D8788146"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.8:*:*:*:*:*:*:*","matchCriteriaId":"DCBC50EA-130C-41B7-83EA-C523B3C3AAD7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9:*:*:*:*:*:*:*","matchCriteriaId":"B91F6CBE-400F-4D0B-B893-34577B47A342"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.9_pre5:*:*:*:*:*:*:*","matchCriteriaId":"D0B58DDD-D3C4-4A2E-A908-64485497207D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.10:*:*:*:*:*:*:*","matchCriteriaId":"1548ECFD-FCB5-4AE0-9788-42F61F25489F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:*:*:*:*:*:*:*","matchCriteriaId":"6ABB9787-5497-4BDC-8952-F99CF60A89BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.11:pre3:*:*:*:*:*:*","matchCriteriaId":"01278984-9712-48D0-B8B8-F9ACEB0FBA14"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.12:*:*:*:*:*:*:*","matchCriteriaId":"615F6BA2-CD51-4159-B28A-A018CA9FC25C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.13:*:*:*:*:*:*:*","matchCriteriaId":"093848CB-68A1-4258-8357-373A477FE4E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.14:*:*:*:*:*:*:*","matchCriteriaId":"E275F440-A427-465F-B314-BF0730C781DB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.15:*:*:*:*:*:*:*","matchCriteriaId":"98651D39-60CF-409F-8276-DBBB56B972AA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.16:*:*:*:*:*:*:*","matchCriteriaId":"067B8E09-C923-4DDA-92DB-4A2892CB526A"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.17:*:*:*:*:*:*:*","matchCriteriaId":"9EBE3738-E530-4EC6-9FC6-1A063605BE05"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:*:*:*:*:*:*:*","matchCriteriaId":"474384F1-FB2D-4C00-A4CD-0C2C5AE42DB4"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre1:*:*:*:*:*:*","matchCriteriaId":"5E7C423D-23DE-4C7B-A518-66F87E041925"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre2:*:*:*:*:*:*","matchCriteriaId":"8EA1382E-71B0-4E65-A310-716A244F4FB1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre3:*:*:*:*:*:*","matchCriteriaId":"AC955BD8-3ABB-4FDB-B37E-B1F0C47A5E0D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre4:*:*:*:*:*:*","matchCriteriaId":"2EBCA878-CCD0-4645-ACF6-12FB9C4B4A4D"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre5:*:*:*:*:*:*","matchCriteriaId":"B4BEF62D-2BEF-4CF8-9559-8A6D9631B0EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre6:*:*:*:*:*:*","matchCriteriaId":"824BBD31-8F3B-4F05-981B-ABF662BBF5F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre7:*:*:*:*:*:*","matchCriteriaId":"10F4CCC2-8AE5-4CFF-8DC4-126F02126E1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre8:*:*:*:*:*:*","matchCriteriaId":"388A5C99-1F60-4C20-9AE5-6E73E5A3F819"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.18:pre9:*:*:*:*:*:*","matchCriteriaId":"53B252BE-92F1-42E2-BF2F-EA6B6AFFEE0C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:*:*:*:*:*:*:*","matchCriteriaId":"F677E992-8D37-438F-97DF-9D98B28F020C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre1:*:*:*:*:*:*","matchCriteriaId":"5888F8D7-15C2-4435-BB3C-8674DFAF0089"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre2:*:*:*:*:*:*","matchCriteriaId":"29439AD0-EB8D-4675-A77A-6548FF27ADA3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre3:*:*:*:*:*:*","matchCriteriaId":"F27AADF6-1605-47FC-8C4D-87827A578A90"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre4:*:*:*:*:*:*","matchCriteriaId":"B42F4080-A76F-4D17-85E2-CD2D2E4D0450"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre5:*:*:*:*:*:*","matchCriteriaId":"6968EF1D-7CC5-430D-866D-206F66486F63"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.19:pre6:*:*:*:*:*:*","matchCriteriaId":"50E6F5C5-BF74-4C10-830A-F232D528D290"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.20:*:*:*:*:*:*:*","matchCriteriaId":"476687F9-722B-490C-BD0B-B5F2CD7891DC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:*:*:*:*:*:*:*","matchCriteriaId":"A399D94B-D08D-4454-A07A-6634C9AE612F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre1:*:*:*:*:*:*","matchCriteriaId":"8EEBFBB4-CC06-40D2-8DE9-22E82DBEFADA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre4:*:*:*:*:*:*","matchCriteriaId":"DCD8E4AE-FEF7-4CE2-B338-4F766921593F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.21:pre7:*:*:*:*:*:*","matchCriteriaId":"13A8B50A-73F6-4FCF-A81F-FB624FBA7143"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:*:*:*:*:*:*:*","matchCriteriaId":"9336ABDF-9928-49F6-BAA7-D6E9829F9B1F"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.22:pre10:*:*:*:*:*:*","matchCriteriaId":"E1D21AD5-C34F-4005-92F3-98F714DE98D8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:*:*:*:*:*:*:*","matchCriteriaId":"BB45C3B2-0F5D-4AE2-AE00-E1D6501E8D92"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23:pre9:*:*:*:*:*:*","matchCriteriaId":"8D27D843-2DA7-4481-857C-09FDC4FBD45C"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.23_ow2:*:*:*:*:*:*:*","matchCriteriaId":"BCB93128-2743-4668-8C48-9B7282D4A672"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24:*:*:*:*:*:*:*","matchCriteriaId":"040991B8-FB4B-480B-B53B-AA7A884F9F19"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.24_ow1:*:*:*:*:*:*:*","matchCriteriaId":"BFA592BC-5846-4FC1-B2A7-13E622705DA8"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.25:*:*:*:*:*:*:*","matchCriteriaId":"59688C40-C92F-431E-ADD7-6782622862D3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.26:*:*:*:*:*:*:*","matchCriteriaId":"D813900D-DCF3-4F5D-9D90-13EDE2CBB3DA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:*:*:*:*:*:*:*","matchCriteriaId":"6E4C7831-0296-4DFA-A4E9-F7B6B30FFB72"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre1:*:*:*:*:*:*","matchCriteriaId":"C5FE15BF-91C7-452A-BE1B-7EC9632421C2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre2:*:*:*:*:*:*","matchCriteriaId":"15C1923C-D9C4-400D-9F0F-20B519EEC9C0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre3:*:*:*:*:*:*","matchCriteriaId":"E51913F9-FC7D-450A-9A82-5084AA74A5B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre4:*:*:*:*:*:*","matchCriteriaId":"B62E02D5-9EEE-439B-A510-BEEE28A9F358"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.27:pre5:*:*:*:*:*:*","matchCriteriaId":"02278C07-E649-427D-9E5C-F1738A01BCBD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.28:*:*:*:*:*:*:*","matchCriteriaId":"E120257D-346B-4BA6-A431-E6F820FBB5FB"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:*:*:*:*:*:*:*","matchCriteriaId":"361D407D-A4BE-491D-BC8E-32E78DC4A8F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:rc1:*:*:*:*:*:*","matchCriteriaId":"4F83D55B-3106-4907-A75F-A7EBF0EC6974"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.29:rc2:*:*:*:*:*:*","matchCriteriaId":"0AFD594E-48BA-4281-8DEE-306E3008ABB9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:*:*:*:*:*:*:*","matchCriteriaId":"A3CD7983-4EB2-4D17-9332-493ECBADC284"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:rc2:*:*:*:*:*:*","matchCriteriaId":"AAB7E049-4B49-4FB5-815B-39CEAEDE6ACC"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.30:rc3:*:*:*:*:*:*","matchCriteriaId":"637A08D0-E382-4DE8-AEEC-6A53A72849B9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.31:*:*:*:*:*:*:*","matchCriteriaId":"550DFE6E-DCE6-4649-8746-522996021DBA"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.31:pre1:*:*:*:*:*:*","matchCriteriaId":"2D3D2AA2-05B2-46E3-96EE-27EB29795E04"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.32:*:*:*:*:*:*:*","matchCriteriaId":"E17BB496-749A-40C8-BAA9-6CFBBE308065"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.32:pre1:*:*:*:*:*:*","matchCriteriaId":"AF51F68C-60A5-451F-9150-6DABBAE1D41E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.32:pre2:*:*:*:*:*:*","matchCriteriaId":"0A3BF9D6-BE14-4590-91B8-501DC92261BD"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33:*:*:*:*:*:*:*","matchCriteriaId":"0C30F255-1297-46EA-9FBC-05564792FF65"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33:pre1:*:*:*:*:*:*","matchCriteriaId":"5A6E8B0E-DEDD-43D1-9841-4BAF5A805967"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.2:*:*:*:*:*:*:*","matchCriteriaId":"934CBC22-864C-468F-B267-3CDE4449DA9E"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.3:*:*:*:*:*:*:*","matchCriteriaId":"2AC432E3-7214-4B61-A666-2DAF5CCAEC52"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.4:*:*:*:*:*:*:*","matchCriteriaId":"7682650A-8332-484D-874F-2B67246880B0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.33.5:*:*:*:*:*:*:*","matchCriteriaId":"6DFF499A-6602-4BD3-90B5-E6C4AC888812"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34:*:*:*:*:*:*:*","matchCriteriaId":"0C406D55-D6CF-443B-B5DB-FC69FBEA01D0"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34:rc3:*:*:*:*:*:*","matchCriteriaId":"9484837D-600E-4378-8663-F7BA37E92EA6"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34.1:*:*:*:*:*:*:*","matchCriteriaId":"1C53EDB2-923D-4860-8251-9A07C9F8FDB2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.34.2:*:*:*:*:*:*:*","matchCriteriaId":"2E2A5D6B-7011-40AE-8A94-02B062B19010"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35:*:*:*:*:*:*:*","matchCriteriaId":"9E460A86-FD22-4023-A0D7-0D2F43131635"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.4.35.2:*:*:*:*:*:*:*","matchCriteriaId":"CFFCA2ED-2384-4DB7-9634-AEAEDFF57817"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*","matchCriteriaId":"142BCD48-8387-4D0C-A052-44DD4144CBFF"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*","matchCriteriaId":"E8220D81-9065-471F-9256-CFE7B9941555"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*","matchCriteriaId":"EB445E3E-CCBD-4737-BE30-841B9A79D558"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F5301E27-8021-467C-A9A2-AF2137EF0299"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*","matchCriteriaId":"79787868-2D77-4B55-AD61-C2B357CCE047"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*","matchCriteriaId":"2B3F27D3-8F1D-4576-A584-1E2059CC67B1"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*","matchCriteriaId":"FB5D260C-AE1C-47E9-A88C-B9C2B4349249"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*","matchCriteriaId":"AA9958C6-AB7D-4B67-9AA7-42B628CBC391"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0463.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11981","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29058","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1010617","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2008/dsa-1503","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/7345","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/8363","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/unixfocus/5GP0515DFW.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10632","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-06/0463.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/11981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/29058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1010617","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2008/dsa-1503","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/7345","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/8363","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/unixfocus/5GP0515DFW.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10632","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2732","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the cmd=test option, which can be leveraged to determine the access key."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netbilling:netbilling:2.0:*:*:*:*:*:*:*","matchCriteriaId":"63115A57-8FF7-4199-8E50-30FC014D1245"}]}]}],"references":[{"url":"http://securitytracker.com/id?1011881","source":"cve@mitre.org"},{"url":"http://web.archive.org/web/20041106200147/http://www.it-helpnet.de/bugless/bugs.php?mode=show&id=8&SID=","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/10902","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11504","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17865","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1011881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://web.archive.org/web/20041106200147/http://www.it-helpnet.de/bugless/bugs.php?mode=show&id=8&SID=","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/10902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11504","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17865","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2733","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitrary IP addresses via pop_up_ip_blocking.asp or (2) modify topics via pop_up_topic_admin.asp."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":5.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webwiz:web_wiz_forums:7.7:a:*:*:*:*:*:*","matchCriteriaId":"B46CAE13-08B2-418E-97E8-9D98E2175C7F"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-04/1119.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11525","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010012","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5750","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5751","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10255","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16030","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16031","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-04/1119.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11525","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5750","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5751","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10255","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16030","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16031","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2734","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"webadmin-apache.conf in Novell Web Manager of Novell NetWare 6.5 uses an uppercase Alias tag with an inconsistent lowercase directory tag for a volume, which allows remote attackers to bypass access control to the WEB-INF folder."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.5:*:*:*:*:*:*:*","matchCriteriaId":"D328A81E-DC60-4B67-B707-F0AD9A6F48E2"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.5:sp1:*:*:*:*:*:*","matchCriteriaId":"1CEB9CEA-9245-490F-88F6-EFD23B11A19B"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.5:sp1.1a:*:*:*:*:*:*","matchCriteriaId":"0669D0E2-AB83-44AE-A87C-C7EB7AA2953A"},{"vulnerable":true,"criteria":"cpe:2.3:o:novell:netware:6.5:sp1.1b:*:*:*:*:*:*","matchCriteriaId":"062E2A9A-CF88-4844-B5A1-7418722087D9"}]}]}],"references":[{"url":"http://secunia.com/advisories/12049","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011012","source":"cve@mitre.org"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10094233.htm","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/9103","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11000","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40478","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011012","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10094233.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/9103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11000","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40478","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2735","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in P4DB 2.01 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) SET_PREFERENCES parameter in SetPreferences.cgi; (2) BRANCH parameter in branchView.cgi; (3) FSPC and (4) COMPLETE parameters in changeByUsers.cgi; (5) FSPC, (6) LABEL, (7) EXLABEL, (8) STATUS, (9) MAXCH, (10) FIRSTCH, (11) CHOFFSETDISP, (12) SEARCHDESC, (13) SEARCH_INVERT, (14) USER, (15) GROUP, and (16) CLIENT parameters in changeList.cgi; (17) CH parameter in changeView.cgi; (18) USER parameter in clientList.cgi; (19) CLIENT parameter in clientView.cgi; (20) FSPC parameter in depotTreeBrowser.cgi; (21) FSPC parameter in depotStats.cgi; (22) FSPC, (23) REV, (24) ACT, (25) FSPC2, (26) REV2, (27) CH, and (28) CONTEXT parameters in fileDiffView.cgi; (29) FSPC and (30) REV parameters in fileDownLoad.cgi; (31) FSPC, (32) LISTLAB, and (33) SHOWBRANCH parameters in fileLogView.cgi; (34) FSPC and (35) LABEL parameters in fileSearch.cgi; (36) FSPC, (37) REV, and (38) FORCE parameters in fileViewer.cgi; (39) FSPC parameter in filesChangedSince.cgi; (40) GROUP parameter in groupView.cgi; (41) TYPE, (42) FSPC, and (43) REV parameters in htmlFileView.cgi; (44) CMD parameter in javaDataView.cgi; (45) JOBVIEW and (46) FLD parameters in jobList.cgi; (47) JOB parameter in jobView.cgi; (48) LABEL1 and (49) LABEL2 parameters in labelDiffView.cgi; (50) LABEL parameter in labelView.cgi; (51) FSPC parameter in searchPattern.cgi; (52) TYPE, (53) FSPC, and (54) REV parameters in specialFileView.cgi; (55) GROUPSONLY parameter in userList.cgi; or (56) USER parameter in userView.cgi."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:fredric_fredricson:p4db:*:*:*:*:*:*:*:*","versionEndIncluding":"2.01","matchCriteriaId":"B8C01F8F-2CD6-465B-839B-3CFB5444C9A6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0046.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/11559","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010078","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/5901","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10286","source":"cve@mitre.org"},{"url":"http://www.weak.org/~jammer/p4db_v2.01_patch_4.txt","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16070","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-05/0046.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/11559","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1010078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/5901","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10286","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.weak.org/~jammer/p4db_v2.01_patch_4.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16070","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2736","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cookie."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:polar_software:helpdesk:3.0:*:*:*:*:*:*:*","matchCriteriaId":"182A3343-539B-43DA-A746-F0BA17EE644B"}]}]}],"references":[{"url":"http://secunia.com/advisories/12120","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8168","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5OP0K0ADGA.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10775","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16778","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12120","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8168","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5OP0K0ADGA.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/10775","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16778","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2737","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in problist.asp in NetSupport DNA HelpDesk 1.01 allows remote attackers to execute arbitrary SQL commands via the where parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:netsupport:dna_helpdesk:1.01:*:*:*:*:*:*:*","matchCriteriaId":"19D4042C-EC74-4F27-BB01-8438E4A991C9"}]}]}],"references":[{"url":"http://secunia.com/advisories/12119","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8169","source":"cve@mitre.org"},{"url":"http://www.securiteam.com/windowsntfocus/5PP0L0ADGE.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/10772","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16782","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12119","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/8169","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securiteam.com/windowsntfocus/5PP0L0ADGE.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/10772","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16782","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2738","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in check_user_id.php in ZeroBoard 4.1pl4 and earlier allows remote attackers to inject arbitrary web script or HTML via the user_id parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:zeroboard:zeroboard:4.1_pl2:*:*:*:*:*:*:*","matchCriteriaId":"021147FB-D153-440D-95F2-B812FB9DEA19"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroboard:zeroboard:4.1_pl3:*:*:*:*:*:*:*","matchCriteriaId":"ABAEFB19-C049-4C09-89CF-00E128FEC5DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:zeroboard:zeroboard:4.1_pl4:*:*:*:*:*:*:*","matchCriteriaId":"D9FC71F5-C279-40A8-ABC3-5A141D7DF419"}]}]}],"references":[{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030224.html","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110391024404947&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13649","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012677","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12582","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12103","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18680","source":"cve@mitre.org"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030224.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110391024404947&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13649","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012677","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12582","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18680","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2739","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The setup routine (setup.php) in PHProjekt 4.2.1 and earlier allows remote attackers to modify system configuration via unknown attack vectors."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D245D09E-BF00-4E14-9A12-83BCAE55BD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"505FD923-F1FB-486A-B85A-DAC31982E21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.1:*:*:*:*:*:*:*","matchCriteriaId":"414705DF-A3AD-4CF1-8391-32F09EF8BAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.1a:*:*:*:*:*:*:*","matchCriteriaId":"16C2B2E2-AA2B-40B0-A7FB-D1A191D39939"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5ED3BCB7-D94E-4985-8951-01AD3C15C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F69C99BE-581F-4EE3-A798-E7FF0433CF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.4:*:*:*:*:*:*:*","matchCriteriaId":"960BD03B-D527-4EC4-B642-130F2AA49AC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.4a:*:*:*:*:*:*:*","matchCriteriaId":"F0B762E4-5E4D-4B9D-A756-6CDE49366317"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1C20E262-6E6B-48A2-B831-48A5A8C72F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.1:*:*:*:*:*:*:*","matchCriteriaId":"89E0C51C-F9DE-4140-97D9-4777811DFA1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.1a:*:*:*:*:*:*:*","matchCriteriaId":"4758B7C9-D6F3-47BC-A5AC-5DAC508DE18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.2:*:*:*:*:*:*:*","matchCriteriaId":"CC3EFC3B-C42D-4F79-B469-EBCB6811E090"}]}]}],"references":[{"url":"http://secunia.com/advisories/13355","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012369","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200412-06.xml","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2004_04_sr.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12174","source":"cve@mitre.org"},{"url":"http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=189&mode=thread&order=0","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11797","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18320","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13355","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012369","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200412-06.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2004_04_sr.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12174","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=189&mode=thread&order=0","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11797","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18320","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2740","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in authform.inc.php in PHProjekt 4.2.3 and earlier allows remote attackers to include arbitrary PHP code via a URL in the path_pre parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.0:*:*:*:*:*:*:*","matchCriteriaId":"D245D09E-BF00-4E14-9A12-83BCAE55BD0C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"505FD923-F1FB-486A-B85A-DAC31982E21C"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.1:*:*:*:*:*:*:*","matchCriteriaId":"414705DF-A3AD-4CF1-8391-32F09EF8BAB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.1a:*:*:*:*:*:*:*","matchCriteriaId":"16C2B2E2-AA2B-40B0-A7FB-D1A191D39939"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.2:*:*:*:*:*:*:*","matchCriteriaId":"5ED3BCB7-D94E-4985-8951-01AD3C15C28A"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F69C99BE-581F-4EE3-A798-E7FF0433CF16"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.4:*:*:*:*:*:*:*","matchCriteriaId":"960BD03B-D527-4EC4-B642-130F2AA49AC8"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:2.4a:*:*:*:*:*:*:*","matchCriteriaId":"F0B762E4-5E4D-4B9D-A756-6CDE49366317"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.0:*:*:*:*:*:*:*","matchCriteriaId":"1C20E262-6E6B-48A2-B831-48A5A8C72F25"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.1:*:*:*:*:*:*:*","matchCriteriaId":"89E0C51C-F9DE-4140-97D9-4777811DFA1F"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.1a:*:*:*:*:*:*:*","matchCriteriaId":"4758B7C9-D6F3-47BC-A5AC-5DAC508DE18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:3.2:*:*:*:*:*:*:*","matchCriteriaId":"CC3EFC3B-C42D-4F79-B469-EBCB6811E090"},{"vulnerable":true,"criteria":"cpe:2.3:a:phprojekt:phprojekt:4.2:*:*:*:*:*:*:*","matchCriteriaId":"B1B506A0-DFAC-40C6-9959-923C194AD745"}]}]}],"references":[{"url":"http://secunia.com/advisories/13660","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012708","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200412-27.xml","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/12613","source":"cve@mitre.org"},{"url":"http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=193","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/12116","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18683","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13660","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012708","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200412-27.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/12613","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=193","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/12116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18683","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2741","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the \"help window\" (help.php) in Horde Application Framework 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) module, (2) topic, or (3) module parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2D3532FD-0E85-4EDC-A3A7-76F8BA915B6C"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D39B3B91-16B9-4B5B-AB4E-9BA568CC1E5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"ACBE1BB3-EAB6-4388-95C2-0513B0D6A327"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2:*:*:*:*:*:*:*","matchCriteriaId":"8B402F70-BAAD-44D6-B414-F615F973DC9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F1F2DA0C-C8A3-429C-83C7-B2983D3FF148"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.3:*:*:*:*:*:*:*","matchCriteriaId":"7535FE38-0FBD-48CC-9FDE-C7CA2C18CA24"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.4:*:*:*:*:*:*:*","matchCriteriaId":"A14A770E-60BC-4698-8BFC-5FB745A52279"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.4_rc1:*:*:*:*:*:*:*","matchCriteriaId":"23A0AA21-C88D-45C4-9D95-414B2278E601"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.5:*:*:*:*:*:*:*","matchCriteriaId":"8AE35AF8-CA38-42FB-BA32-057BCA2CA2AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:horde:application_framework:2.2.6:*:*:*:*:*:*:*","matchCriteriaId":"C91CA767-F49D-48E9-80CE-78B65DD14DF2"}]}]}],"references":[{"url":"http://cvs.horde.org/diff.php/horde/templates/help/index.inc?r1=1.9.2.4&r2=1.9.2.5&ty=u","source":"cve@mitre.org"},{"url":"http://lists.horde.org/archives/announce/2004/000107.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://secunia.com/advisories/12992","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011959","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11164","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11546","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17881","source":"cve@mitre.org"},{"url":"http://cvs.horde.org/diff.php/horde/templates/help/index.inc?r1=1.9.2.4&r2=1.9.2.5&ty=u","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.horde.org/archives/announce/2004/000107.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://secunia.com/advisories/12992","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11164","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11546","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17881","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2742","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the report viewer in Crystal Enterprise 8.5, 9, and 10 allows remote attackers to inject arbitrary web script or HTML via script in the URL to a report (RPT) file."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_enterprise:8.5:*:aix:*:*:*:*:*","matchCriteriaId":"5ADD5E80-DCAC-4C06-986F-651989B6D72B"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_enterprise:8.5:*:solaris:*:*:*:*:*","matchCriteriaId":"C2F1EC12-38F0-4DB5-90DC-A1932A38CD8A"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_enterprise:8.5:*:windows:*:*:*:*:*","matchCriteriaId":"FA106A23-74E5-408C-954F-94245AAF3B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_enterprise:9:*:windows:*:*:*:*:*","matchCriteriaId":"EC102DAF-64D4-4B5F-8DA6-1389355E2095"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_enterprise:10:*:aix:*:*:*:*:*","matchCriteriaId":"77891037-D3CD-4457-BF8D-490CEE7FA67C"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_enterprise:10:*:hpux:*:*:*:*:*","matchCriteriaId":"35A374F1-9F78-45C8-8A7C-F4D03EED0FBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_enterprise:10:*:linux:*:*:*:*:*","matchCriteriaId":"DC7AF62C-2763-467F-BBB8-C2CF8ABEA532"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_enterprise:10:*:solaris:*:*:*:*:*","matchCriteriaId":"51428D65-D2DB-474D-8F30-B3C6C1C4DD48"},{"vulnerable":true,"criteria":"cpe:2.3:a:businessobjects:crystal_enterprise:10:*:windows:*:*:*:*:*","matchCriteriaId":"F1B2F81A-F8DB-4976-B1A2-1A191B83458B"}]}]}],"references":[{"url":"http://secunia.com/advisories/13644","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012703","source":"cve@mitre.org"},{"url":"http://support.businessobjects.com/library/kbase/articles/c2016559.asp","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/12596","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/12107","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18684","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13644","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1012703","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.businessobjects.com/library/kbase/articles/c2016559.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/12596","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/12107","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18684","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2743","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"upload.cgi in Mega Upload Progress Bar before 1.45 allows remote attackers to copy or overwrite arbitrary files via unspecified parameters related to names of uploaded files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":6.4},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:raditha_dissanayake:mega_upload_progress_bar:1.30:*:*:*:*:*:*:*","matchCriteriaId":"254A1C40-6AC2-4C2E-B29D-6ED3B8A1047C"},{"vulnerable":true,"criteria":"cpe:2.3:a:raditha_dissanayake:mega_upload_progress_bar:1.35:*:*:*:*:*:*:*","matchCriteriaId":"10EDD5B9-0ED6-4FA9-B96F-76F8BCBF2686"},{"vulnerable":true,"criteria":"cpe:2.3:a:raditha_dissanayake:mega_upload_progress_bar:1.43:*:*:*:*:*:*:*","matchCriteriaId":"52333D1B-0DEE-44B6-8820-1F04B9616FB4"},{"vulnerable":true,"criteria":"cpe:2.3:a:raditha_dissanayake:mega_upload_progress_bar:1.44:*:*:*:*:*:*:*","matchCriteriaId":"2EA4D8E2-F54A-4CA2-8BC6-4192CFD1C17F"}]}]}],"references":[{"url":"http://secunia.com/advisories/12993","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011960","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=277989","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/11171","source":"cve@mitre.org"},{"url":"http://www.raditha.com/blog/archives/000547.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11547","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17882","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12993","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011960","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=277989","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/11171","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.raditha.com/blog/archives/000547.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/11547","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17882","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2744","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in Tincan Limited PHPlist before 2.8.12 has unknown impact and attack vectors, related to a \"security update release.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:phplist:mailing_list_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"2.8.11","matchCriteriaId":"EDF78E57-1BF1-44AB-A5FA-3B522D6A027F"}]}]}],"references":[{"url":"http://secunia.com/advisories/12994","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011958","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=277981","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/11172","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17883","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/12994","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1011958","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=277981","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/11172","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17883","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2745","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Anteco Visual Technologies OwnServer 1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in a URL."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.8},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:anteco_visual_technologies:ownserver:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"FB2CEC3C-0657-408F-8EF8-D6EEE66C4844"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3329","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/350421/30/21610/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9461","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1008800","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3329","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/350421/30/21610/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9461","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securitytracker.com/id?1008800","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2746","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pensacola_web_designs:xtremeasp_photogallery:2.0:*:*:*:*:*:*:*","matchCriteriaId":"E52C098A-3746-4245-8629-D393DD86CBF5"}]}]}],"references":[{"url":"http://secunia.com/advisories/10659","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3346","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008745","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3585","source":"cve@mitre.org"},{"url":"http://www.pensacolawebdesigns.com/xtremeasp/readmore.asp","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/350028/30/21640/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9438","source":"cve@mitre.org"},{"url":"http://www.tripbit.org/advisories/TA-150104.txt","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14860","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10659","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3346","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008745","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3585","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.pensacolawebdesigns.com/xtremeasp/readmore.asp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/archive/1/350028/30/21640/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9438","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.tripbit.org/advisories/TA-150104.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14860","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2747","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. (dot dot) in the DEL command, which triggers different error messages depending on whether the file exists or not."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.0},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pablo_software_solutions:quick_n_easy_ftp_server:1.77:*:*:*:*:*:*:*","matchCriteriaId":"A47AC7A9-7F1C-4982-B452-0375660C8559"}]}]}],"references":[{"url":"http://secunia.com/advisories/10661","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3574","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/350224/30/21640/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9443","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1008756","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10661","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3574","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/350224/30/21640/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9443","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1008756","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2748","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an invalid profileid parameter, which leaks the pathname in an error message."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webtrends:reporting_center:6.1a:*:*:*:*:*:*:*","matchCriteriaId":"3329F621-D587-4671-8868-574538B6EB88"}]}]}],"references":[{"url":"http://secunia.com/advisories/10689","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3354","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3680","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/350419/30/21610/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9460","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/id?1008799","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10689","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3680","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/350419/30/21610/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9460","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id?1008799","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2749","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other product lines, allows remote attackers to read arbitrary files via a .. (dot dot) in the return parameter.  NOTE: this issue was reported as XSS, but this might be a terminology error."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:2wire:homeportal:100s:*:*:*:*:*:*:*","matchCriteriaId":"4BB84F51-8589-4A36-862E-366908B409A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:2wire:homeportal:100w:*:*:*:*:*:*:*","matchCriteriaId":"172F630A-DA60-44ED-BA58-D48A35CC7A21"},{"vulnerable":true,"criteria":"cpe:2.3:a:2wire:homeportal:1000:*:*:*:*:*:*:*","matchCriteriaId":"2EAAD73B-3AD3-43B5-8AD0-40A3E7418BBC"},{"vulnerable":true,"criteria":"cpe:2.3:a:2wire:homeportal:1000s:*:*:*:*:*:*:*","matchCriteriaId":"31625B41-988F-4427-AC51-06DB936B9ED4"},{"vulnerable":true,"criteria":"cpe:2.3:a:2wire:homeportal:1000sw:*:*:*:*:*:*:*","matchCriteriaId":"7F26C9B1-10B4-4AAF-AAA7-D4F3E38A7DD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:2wire:homeportal:1000w:*:*:*:*:*:*:*","matchCriteriaId":"9176AF59-0B69-45E8-AEDF-75B2F5755BEB"},{"vulnerable":true,"criteria":"cpe:2.3:a:2wire:homeportal:1500w:*:*:*:*:*:*:*","matchCriteriaId":"3FDBDF3E-E4BF-4A52-8FBD-31FF8E5DC8E3"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-01/0179.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/10666","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008798","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3683","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9463","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14894","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-01/0179.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/10666","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008798","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3683","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9463","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14894","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2750","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in browser.php in JBrowser 1.0 through 2.1 allows remote attackers to read arbitrary files via the directory parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-22"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:jbrowser:jbrowser:1.0:*:*:*:*:*:*:*","matchCriteriaId":"36C07C19-AA90-471E-870D-F28AFDE91CE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbrowser:jbrowser:2.0:*:*:*:*:*:*:*","matchCriteriaId":"45EDEEF6-CA0D-42DD-9163-44F10DE52E21"},{"vulnerable":true,"criteria":"cpe:2.3:a:jbrowser:jbrowser:2.1:*:*:*:*:*:*:*","matchCriteriaId":"460D1FFF-1601-4B66-A587-05B45052EB3B"}]}]}],"references":[{"url":"http://securitytracker.com/id?1008909","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9535","source":"cve@mitre.org","tags":["Exploit","Patch"]},{"url":"http://securitytracker.com/id?1008909","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9535","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]}]}},{"cve":{"id":"CVE-2004-2751","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in the members_list module in PostNuke 0.726, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the sortby parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.722:*:*:*:*:*:*:*","matchCriteriaId":"44D17AC0-46DE-4B86-9105-BA50FC178B12"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.723:*:*:*:*:*:*:*","matchCriteriaId":"FA866ACE-37FE-40FC-843D-FDFE65ECCE23"},{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.726:*:*:*:*:*:*:*","matchCriteriaId":"EED5E57D-A2EA-43C7-A29B-537FDE0656A2"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0117.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://community.postnuke.com/Article2535.htm","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://lists.postnuke.com/pipermail/postnuke-security/2004q1/000001.html","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008629","source":"cve@mitre.org"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0015.html","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.gulftech.org/01032004.php","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/3334","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11500","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0117.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://community.postnuke.com/Article2535.htm","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://lists.postnuke.com/pipermail/postnuke-security/2004q1/000001.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1008629","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0015.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.gulftech.org/01032004.php","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/3334","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11500","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2752","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web script via the ttitle parameter in a viewdownloaddetails action."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:postnuke_software_foundation:postnuke:0.726:*:*:*:*:*:*:*","matchCriteriaId":"EED5E57D-A2EA-43C7-A29B-537FDE0656A2"}]}]}],"references":[{"url":"http://securitytracker.com/id?1008629","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0015.html","source":"cve@mitre.org"},{"url":"http://www.gulftech.org/01032004.php","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008629","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0015.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gulftech.org/01032004.php","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2753","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Unspecified vulnerability in SharedX in HP-UX B.11.00, B.11.11, and B.11.22 allows local users to access unspecified files or cause a denial of service via unknown vectors related to handling of \"files in a potentially insecure manner.\""}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:C","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"COMPLETE","baseScore":5.6},"baseSeverity":"MEDIUM","exploitabilityScore":3.9,"impactScore":7.8,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*","matchCriteriaId":"771931F7-9180-4EBD-8627-E1CF17D24647"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*","matchCriteriaId":"EDD9BE2B-7255-4FC1-B452-E8370632B03F"},{"vulnerable":true,"criteria":"cpe:2.3:o:hp:hp-ux:11.22:*:*:*:*:*:*:*","matchCriteriaId":"EBD0DC0A-ACAD-4870-9C0F-3095F2AC8CCD"}]}]}],"references":[{"url":"http://secunia.com/advisories/10657","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-058.shtml","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9420","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1008712","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0401-307","source":"cve@mitre.org"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0401-307","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14838","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10657","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ciac.org/ciac/bulletins/o-058.shtml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9420","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1008712","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0401-307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0401-307","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14838","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2754","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the ID_MEMBER parameter to the (1) recentTopics and (2) welcome functions."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb_se:0.8:*:*:*:*:*:*:*","matchCriteriaId":"1C9279C9-ADB0-494F-B7E4-D6E9C8D49BE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb_se:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"F746D834-E0E5-45DF-8AEE-9237A752D8F7"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb_se:1.4.1:*:*:*:*:*:*:*","matchCriteriaId":"921416DC-FF9B-4E2F-9875-C4E348DC5DFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb_se:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"6A763982-00F4-4DAD-A6C2-A498E312F77F"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb_se:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"FEA224F5-6BA7-4885-9E4E-A74A61DEEC2C"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb_se:1.5.1_rc1:*:*:*:*:*:*:*","matchCriteriaId":"4275E27E-4DEB-41D7-A9F5-459B6E95B177"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb_se:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"50D04319-5F7E-4826-8C09-BA8AE8A0655A"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb_se:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"85ED5D04-553D-46A7-8231-E178CA338B55"},{"vulnerable":true,"criteria":"cpe:2.3:a:yabb:yabb_se:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"7B7E2361-7B2F-4F48-A574-A64375E31F6D"}]}]}],"references":[{"url":"http://securityreason.com/securityalert/3371","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=210608&group_id=57105","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.osvdb.org/3618","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/350244","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9449","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1008764","source":"cve@mitre.org"},{"url":"http://www.yabbse.org/community/index.php?thread=27122","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/3371","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=210608&group_id=57105","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.osvdb.org/3618","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/350244","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.securityfocus.com/bid/9449","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securitytracker.com/id?1008764","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.yabbse.org/community/index.php?thread=27122","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2755","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script or HTML via the query string in blocked URLs that are listed in (1) error or (2) block page messages."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:web_security:2.5:*:*:*:*:*:*:*","matchCriteriaId":"60B08F85-A0E6-4984-83E9-41CD29751BE4"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:web_security:3.0:*:*:*:*:*:*:*","matchCriteriaId":"690F3A5F-F990-41C9-9964-B033188C86F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:symantec:web_security:3.0.1:*:*:*:*:*:*:*","matchCriteriaId":"43E4FAC8-2893-48FA-B159-49C8AA380338"}]}]}],"references":[{"url":"http://secunia.com/advisories/10618","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2004.01.13.html","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/6754","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9418","source":"cve@mitre.org"},{"url":"http://www.securitytracker.com/alerts/2004/Jan/1008711.html","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14825","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10618","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityresponse.symantec.com/avcenter/security/Content/2004.01.13.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/6754","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/alerts/2004/Jan/1008711.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14825","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2756","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in viewtopic.php in Xoops 2.x, possibly 2 through 2.0.5, allows remote attackers to inject arbitrary web script or HTML via the (1) forum and (2) topic_id parameters."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0:*:*:*:*:*:*:*","matchCriteriaId":"1D649637-9772-4B71-B219-DD505CDB3549"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"33E91D0D-42F6-4FAC-BD04-AA4D77C6DAD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.2:*:*:*:*:*:*:*","matchCriteriaId":"881DDA3C-4D95-471F-95BA-6C4629B3CB68"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.3:*:*:*:*:*:*:*","matchCriteriaId":"E235D928-E2D9-46D3-B95F-C4AF556D3C01"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.5:*:*:*:*:*:*:*","matchCriteriaId":"0C32DECD-1E28-4CC1-812B-E8D54B5703EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.5.1:*:*:*:*:*:*:*","matchCriteriaId":"9AD25BC1-E435-4691-B42A-0D98D80F0F83"},{"vulnerable":true,"criteria":"cpe:2.3:a:xoops:xoops:2.0.5.2:*:*:*:*:*:*:*","matchCriteriaId":"1F58A3E7-4C21-48FD-AA26-7CCE85BAE887"}]}]}],"references":[{"url":"http://securitytracker.com/id?1008849","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9497","source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1008849","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9497","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2757","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the failed login page in Novell iChain before 2.2 build 2.2.113 and 2.3 First Customer Ship (FCS) allows remote attackers to inject arbitrary web script or HTML via url parameter."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":4.3},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:ichain:*:*:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"E515888D-84AA-4815-B0C1-28CE52E5CDA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:ichain:*:sp1:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"C46A5CED-54C9-4583-B417-2257DF70FE1D"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:ichain:*:sp1a:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"0F5E2295-13C5-42D5-A6A0-6282F0F77C92"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:ichain:*:sp2:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"C53A9678-1F5B-4AEE-8377-A20C85863BCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:ichain:*:sp3:*:*:*:*:*:*","versionEndIncluding":"2.2","matchCriteriaId":"5B5C45A8-E799-471A-81A5-85E3D2AA80E9"}]}]}],"references":[{"url":"http://secunia.com/advisories/10653","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10080762.htm","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/9412","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14873","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10653","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10080762.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/9412","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14873","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2758","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unspecified vulnerabilities in the H.323 protocol implementation for Sun SunForum 3.2 and 3D 1.0 allow remote attackers to cause a denial of service (segmentation fault and process crash), as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sunforum:3.2:*:*:*:*:*:*:*","matchCriteriaId":"5D8DE703-85C8-47A9-A437-8207798E9903"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:sunforum:3d_1.0:*:*:*:*:*:*:*","matchCriteriaId":"11F06110-7AB6-4C54-BF8A-269C76ADCC5F"}]}]}],"references":[{"url":"http://secunia.com/advisories/10665","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008749","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101429-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57476-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200181-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000135.1-1","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-2004-01.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/749342","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"http://www.uniras.gov.uk/vuls/2004/006489/h323.htm","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14173","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/10665","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1008749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101429-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-57476-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200181-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000135.1-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cert.org/advisories/CA-2004-01.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.kb.cert.org/vuls/id/749342","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"http://www.uniras.gov.uk/vuls/2004/006489/h323.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14173","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2759","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Shared Sun StorEdge QFS and SAM-QFS file systems, as used in Utilization Suite 4.0 through 4.1 and Performance Suite 4.0 through 4.1, might allow local users to read portions of deleted files by accessing data within sparse files."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:N/A:N","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.1},"baseSeverity":"LOW","exploitabilityScore":3.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sun:storedge_qfs:*:*:*:*:*:*:*:*","matchCriteriaId":"C752FE0E-186A-4CA2-B156-4E13E3568D31"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:storedge_sam-qfs:*:*:*:*:*:*:*:*","matchCriteriaId":"94F823B1-8B6D-40F2-8DEC-3B96864E63DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:storeedge_performance_suite:4.0:*:*:*:*:*:*:*","matchCriteriaId":"85F851FF-A5C2-4106-9170-6145C2EC12BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:storeedge_performance_suite:4.1:*:*:*:*:*:*:*","matchCriteriaId":"CB2A3C36-991D-4A1F-93C6-493E8600A372"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:storeedge_utilization_suite:4.0:*:*:*:*:*:*:*","matchCriteriaId":"F602369B-191A-4168-B95B-665A3BE44152"},{"vulnerable":true,"criteria":"cpe:2.3:a:sun:storeedge_utilization_suite:4.1:*:*:*:*:*:*:*","matchCriteriaId":"6BB89B3B-B93D-44D2-921D-BD90B6C5F031"}]}]}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101527-1","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200184-1","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11559","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17901","source":"cve@mitre.org"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-101527-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200184-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11559","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17901","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-2760","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attempt with the correct password, but leaves the connection open after an attempt with an incorrect password, which makes it easier for remote attackers to guess the password by observing the connection state, a different vulnerability than CVE-2003-0190.  NOTE: it could be argued that in most environments, this does not cross privilege boundaries without requiring leverage of a separate vulnerability."}],"vendorComments":[{"organization":"Red Hat","comment":"The risks associated with fixing this bug are greater than the low severity security risk. We therefore currently have no plans to fix this flaw in Red Hat Enterprise Linux 2.1 which is in maintenance mode.","lastModified":"2008-08-11T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.8},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-16"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.5:*:*:*:*:*:*:*","matchCriteriaId":"3FB9B4C7-4235-4388-8E5D-E72ECCC37A7E"},{"vulnerable":true,"criteria":"cpe:2.3:a:openbsd:openssh:3.5p1:*:*:*:*:*:*:*","matchCriteriaId":"86ACA0ED-A3D0-48A7-B06F-13709AD23B55"}]}]}],"references":[{"url":"http://archive.cert.uni-stuttgart.de/bugtraq/2004/04/msg00162.html","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/4100","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/360198","source":"cve@mitre.org"},{"url":"http://archive.cert.uni-stuttgart.de/bugtraq/2004/04/msg00162.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/4100","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/360198","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2004-9998","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2023-11-07T01:57:08.387","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate has been used as a placeholder by multiple organizations for multiple issues, but it is invalid.  Notes: All CVE users should search CVE for the proper identifier.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2004-9999","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2023-11-07T01:57:08.410","vulnStatus":"Rejected","cveTags":[],"descriptions":[{"lang":"en","value":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate has been used as a placeholder by multiple organizations for multiple issues, but it is invalid.  Notes: All CVE users should search CVE for the proper identifier.  All references and descriptions in this candidate have been removed to prevent accidental usage"}],"metrics":{},"references":[]}},{"cve":{"id":"CVE-2005-0066","sourceIdentifier":"cve@mitre.org","published":"2004-12-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within the range of possible values for data that has already been acknowledged (aka \"TCP acknowledgement number checking\"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged \"Destination Unreachable\" messages, (2) blind throughput-reduction attacks with forged \"Source Quench\" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tcp:tcp:*:*:*:*:*:*:*:*","matchCriteriaId":"A2E69CF1-D657-4511-8726-D122211B9002"}]}]}],"references":[{"url":"http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13124","source":"cve@mitre.org"},{"url":"http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13124","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-0067","sourceIdentifier":"cve@mitre.org","published":"2004-12-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The original design of TCP does not require that port numbers be assigned randomly (aka \"Port randomization\"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged \"Destination Unreachable\" messages, (2) blind throughput-reduction attacks with forged \"Source Quench\" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tcp:tcp:*:*:*:*:*:*:*:*","matchCriteriaId":"A2E69CF1-D657-4511-8726-D122211B9002"}]}]}],"references":[{"url":"http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13124","source":"cve@mitre.org"},{"url":"http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13124","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-0068","sourceIdentifier":"cve@mitre.org","published":"2004-12-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged \"Destination Unreachable\" messages, (2) blind throughput-reduction attacks with forged \"Source Quench\" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced.  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tcp:tcp:*:*:*:*:*:*:*:*","matchCriteriaId":"A2E69CF1-D657-4511-8726-D122211B9002"}]}]}],"references":[{"url":"http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13124","source":"cve@mitre.org"},{"url":"http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/13124","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-0188","sourceIdentifier":"cve@mitre.org","published":"2004-10-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Format string vulnerability in the SetBaseURL function in AtHoc toolbar allows remote attackers to execute arbitrary code via format string specifiers in an invalid URL that is recorded in the debug log."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:athoc:athoc_toolbar:*:*:*:*:*:*:*:*","matchCriteriaId":"520D2ACD-FFF3-46A2-BA9D-061638EA3E8D"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109710974324742&w=2","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=110616363415176&w=2","source":"cve@mitre.org"},{"url":"http://www.ngssoftware.com/advisories/athoc-01full.txt","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11341","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17628","source":"cve@mitre.org"},{"url":"http://marc.info/?l=bugtraq&m=109710974324742&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://marc.info/?l=bugtraq&m=110616363415176&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ngssoftware.com/advisories/athoc-01full.txt","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11341","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17628","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-0189","sourceIdentifier":"cve@mitre.org","published":"2004-10-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Stack-based buffer overflow in the HandleAction function in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to execute arbitrary code via a long ShowPreferences argument."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CF6535A6-6647-4E60-B5AA-24DFC06360AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:en:*:*:*:*","matchCriteriaId":"4EBB6E97-C8C0-49A7-BCDA-794C4986BAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:ja:*:*:*:*","matchCriteriaId":"0C9031C2-95D1-46D0-965A-F4BAA76FB29F"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:de:*:*:*:*:*","matchCriteriaId":"E5E04CB6-AD7E-4F38-A6D9-D68C35DC9EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*","matchCriteriaId":"01513F87-049E-46A9-A573-A7AF27EB30C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"9FDC43D9-C93E-4FB4-B05B-9FB519B03DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*","matchCriteriaId":"348F3214-E5C2-4D39-916F-1B0263D13F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:*","matchCriteriaId":"169753E3-949F-4B7D-9955-A52240CB8E6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*","matchCriteriaId":"91278EFD-0285-4389-9C53-50FE225C3C19"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2005-q1/0046.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109707741022291&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110616636318261&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://service.real.com/help/faq/security/040928_player/EN/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/698390","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/12311","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"http://archives.neohapsis.com/archives/ntbugtraq/2005-q1/0046.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=109707741022291&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110616636318261&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://service.real.com/help/faq/security/040928_player/EN/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.kb.cert.org/vuls/id/698390","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.securityfocus.com/bid/12311","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]}]}},{"cve":{"id":"CVE-2005-0190","sourceIdentifier":"cve@mitre.org","published":"2004-09-29T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages (RMP) file with a FILENAME tag containing .. (dot dot) sequences in a filename that ends with a ? (question mark) and an allowed file extension (e.g. .mp3), which bypasses the check for the file extension."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:N/I:P/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CF6535A6-6647-4E60-B5AA-24DFC06360AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:en:*:*:*:*","matchCriteriaId":"4EBB6E97-C8C0-49A7-BCDA-794C4986BAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:ja:*:*:*:*","matchCriteriaId":"0C9031C2-95D1-46D0-965A-F4BAA76FB29F"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:de:*:*:*:*:*","matchCriteriaId":"E5E04CB6-AD7E-4F38-A6D9-D68C35DC9EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0_6.0.12.690:*:*:*:*:*:*:*","matchCriteriaId":"01513F87-049E-46A9-A573-A7AF27EB30C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0_beta:*:*:*:*:*:*:*","matchCriteriaId":"9FDC43D9-C93E-4FB4-B05B-9FB519B03DCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*","matchCriteriaId":"348F3214-E5C2-4D39-916F-1B0263D13F40"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1016_beta:*:*:*:*:*:*:*","matchCriteriaId":"169753E3-949F-4B7D-9955-A52240CB8E6A"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.5_6.0.12.1040:*:*:*:*:*:*:*","matchCriteriaId":"91278EFD-0285-4389-9C53-50FE225C3C19"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109707741022291&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110616160228843&w=2","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/12672/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://service.real.com/help/faq/security/040928_player/EN/","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ngssoftware.com/advisories/real-02full.txt","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11308","source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17551","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=109707741022291&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110616160228843&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://secunia.com/advisories/12672/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://service.real.com/help/faq/security/040928_player/EN/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ngssoftware.com/advisories/real-02full.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11308","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17551","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2005-0192","sourceIdentifier":"cve@mitre.org","published":"2004-10-06T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the parsing of Skin file names in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in an RJS filename."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:H/Au:N/C:P/I:N/A:N","accessVector":"NETWORK","accessComplexity":"HIGH","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":2.6},"baseSeverity":"LOW","exploitabilityScore":4.9,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:1.0:*:*:*:*:*:*:*","matchCriteriaId":"7E940DAB-0CD5-4EC0-916F-6C0B2AE26D19"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realone_player:2.0:*:*:*:*:*:*:*","matchCriteriaId":"CF6535A6-6647-4E60-B5AA-24DFC06360AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:de:*:*:*:*","matchCriteriaId":"EF2A171E-6E39-4FCC-88CC-655D18232FCE"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:en:*:*:*:*","matchCriteriaId":"4EBB6E97-C8C0-49A7-BCDA-794C4986BAA3"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:*:*:ja:*:*:*:*","matchCriteriaId":"0C9031C2-95D1-46D0-965A-F4BAA76FB29F"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.0:beta:*:*:*:*:*:*","matchCriteriaId":"B4B6C4B6-9031-451B-B58B-45DA88173E0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:realnetworks:realplayer:10.5:*:*:*:*:*:*:*","matchCriteriaId":"348F3214-E5C2-4D39-916F-1B0263D13F40"}]}]}],"references":[{"url":"http://marc.info/?l=bugtraq&m=109707741022291&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110616302008401&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://service.real.com/help/faq/security/040928_player/EN/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.ngssoftware.com/advisories/real-03full.txt","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18984","source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=bugtraq&m=109707741022291&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110616302008401&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://service.real.com/help/faq/security/040928_player/EN/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.ngssoftware.com/advisories/real-03full.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18984","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2005-0373","sourceIdentifier":"cve@mitre.org","published":"2004-10-07T04:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code."}],"vendorComments":[{"organization":"Red Hat","comment":"Not vulnerable. This issue did not affect the versions of Cyrus SASL as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.","lastModified":"2006-08-30T00:00:00.000"}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:sasl:1.5.24:*:*:*:*:*:*:*","matchCriteriaId":"F5B837A3-E1D7-469D-9A2C-1648DB869524"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:sasl:1.5.27:*:*:*:*:*:*:*","matchCriteriaId":"6D5319DC-7C56-4661-83A6-6F226DD6804F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:sasl:1.5.28:*:*:*:*:*:*:*","matchCriteriaId":"6BFA8CBB-D990-489B-BBA1-72392B45511F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:sasl:2.1.9:*:*:*:*:*:*:*","matchCriteriaId":"9ABBB175-E5D7-4270-A599-666233B6420B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:sasl:2.1.10:*:*:*:*:*:*:*","matchCriteriaId":"A8765C3F-45F4-403A-900C-EDC95476A5DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:sasl:2.1.11:*:*:*:*:*:*:*","matchCriteriaId":"1BAE912B-3905-40D2-A2A3-34A87B743244"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:sasl:2.1.12:*:*:*:*:*:*:*","matchCriteriaId":"0B860C12-E0C6-4365-8199-BDCA7303B549"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:sasl:2.1.13:*:*:*:*:*:*:*","matchCriteriaId":"D836C743-2957-4FE7-A396-E68466B29266"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:sasl:2.1.14:*:*:*:*:*:*:*","matchCriteriaId":"26AC8F82-1FE2-418E-A90B-3011C31274E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:sasl:2.1.15:*:*:*:*:*:*:*","matchCriteriaId":"D75CC348-B708-4B44-80AE-98C10B498876"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:sasl:2.1.16:*:*:*:*:*:*:*","matchCriteriaId":"6BBB6270-112B-4BC2-A72F-1FD44C7E6DA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:sasl:2.1.17:*:*:*:*:*:*:*","matchCriteriaId":"E35EEADE-B717-4851-8D45-60E0F8800E8E"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:sasl:2.1.18:*:*:*:*:*:*:*","matchCriteriaId":"798B1672-529E-4D61-9CE6-A3C362AA3FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cyrus:sasl:2.1.18_r1:*:*:*:*:*:*:*","matchCriteriaId":"DD156C94-966C-4EF7-A386-DA5516B77DD2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:2.1:*:*:*:*:*:*:*","matchCriteriaId":"37042CDE-E4FE-442E-891A-CD84433D36E2"},{"vulnerable":true,"criteria":"cpe:2.3:a:openpkg:openpkg:2.2:*:*:*:*:*:*:*","matchCriteriaId":"11F6E348-01DF-4FA4-808E-39A2A7A2B97B"},{"vulnerable":true,"criteria":"cpe:2.3:a:suse:suse_cvsup:16.1h_36.i586:*:*:*:*:*:*:*","matchCriteriaId":"C930F134-76A8-4628-8B2E-B06CAC1F32CC"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"F4007B0D-9606-46BD-866A-7911BEA292BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*","matchCriteriaId":"99C273D1-ADFE-4B4C-B543-7B9CA741A117"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*","matchCriteriaId":"77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*","matchCriteriaId":"8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*","matchCriteriaId":"066ABC3B-B395-42D2-95C0-5B810F91A6F0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*","matchCriteriaId":"01BC19FC-6E03-4000-AE4B-232E47FA76F2"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"421FC2DD-0CF7-44A2-A63C-5221689E2363"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"0F8B70BC-42B7-453A-B506-7BE69D49A4B5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"CA32F7D8-02F8-4CFE-B193-2888807BC4D6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*","matchCriteriaId":"CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"AE52A344-8B07-480D-A57F-B1F6E6574F3B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"56CC0444-570C-4BB5-B53A-C5CA0BD87935"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"62E3EED7-FE30-4620-B40B-9CC49B77408A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"D7A24978-2891-425C-ACF6-E8F5C839C54A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"9B20E130-6078-4336-B614-273C27142B46"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"AB461678-560D-436E-A3AE-9E1E16DB0412"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*","matchCriteriaId":"BFDADE04-29F0-446B-824B-0518880CF0A0"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"ED9BE602-A740-4CF7-9CAF-59061B16AB31"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"33E698C1-C313-40E6-BAF9-7C8F9CF02484"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"BF2D00AC-FA2A-4C39-B796-DC19072862CF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"421079DA-B605-4E05-9454-C30CF7631CF4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"93B734BA-3435-40A9-B22B-5D56CEB865A7"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"30897327-44DD-4D6C-B8B6-2D66C44EA55D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"B79D8F73-2E78-4A67-96BB-21AD9BCB0094"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*","matchCriteriaId":"DB279593-17D1-4A65-BF54-969B38B74B23"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*","matchCriteriaId":"80F5B731-D5A7-4694-9B27-CEE1DCC810EC"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*","matchCriteriaId":"36F4618C-1408-4097-B97D-5F32DE6D01DF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5F558C40-D0DA-4700-95DA-DF1322C020E6"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*","matchCriteriaId":"64F8F30B-E4B8-4745-AFFA-8FD620E61994"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*","matchCriteriaId":"00AE033B-5F16-4262-A397-02D7450189B8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*","matchCriteriaId":"2E831F3E-A980-47AF-BD05-2DB1A14689B4"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*","matchCriteriaId":"36991737-904F-4B26-AEE2-7B30411279E8"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*","matchCriteriaId":"F7EE6036-1A18-43F1-8A92-7DF39E1516E3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*","matchCriteriaId":"620ECFC8-293D-4C2B-9698-67185BB6E2EF"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*","matchCriteriaId":"C1F14A45-BDDB-4C12-9370-D5241975A928"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*","matchCriteriaId":"46BC34D4-A1E8-4E01-982D-EAF03A0EB886"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*","matchCriteriaId":"35932546-B614-47C0-98E6-8EF1EFE06725"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*","matchCriteriaId":"38F17066-C090-4DD7-A1AC-D8FF70D268CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*","matchCriteriaId":"1E997653-C744-4F1F-9948-47579AB3BED3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*","matchCriteriaId":"DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*","matchCriteriaId":"384C130F-D1A9-4482-AF20-FC81933473A3"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*","matchCriteriaId":"E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*","matchCriteriaId":"3CA6BD2A-3022-408D-8E4F-50865996E965"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*","matchCriteriaId":"463D5628-7536-4029-99D6-5E525050059E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*","matchCriteriaId":"69A39B11-1C23-4A6C-B4C5-AEC40836F173"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*","matchCriteriaId":"78D48FD1-CB91-4310-9432-A4365FA67B11"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*","matchCriteriaId":"750C6C37-8460-4ED8-83AD-ACAF993E4A6E"},{"vulnerable":true,"criteria":"cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*","matchCriteriaId":"3C84296C-2C8A-4DCD-9751-52951F8BEA9F"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*","matchCriteriaId":"C7EAAD04-D7C4-43DE-B488-1AAD014B503E"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"28CD54FE-D682-4063-B7C3-8B29B26B39AD"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*","matchCriteriaId":"37F124FE-15F1-49D7-9E03-8E036CE1A20C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*","matchCriteriaId":"F8C55338-3372-413F-82E3-E1B476D6F41A"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*","matchCriteriaId":"1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*","matchCriteriaId":"F7446746-87B7-4BD3-AABF-1E0FAA8265AB"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*","matchCriteriaId":"56EF103F-5668-4754-A83B-D3662D0CE815"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*","matchCriteriaId":"CFABFCE5-4F86-4AE8-9849-BC360AC72098"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*","matchCriteriaId":"D5F98B9A-880E-45F0-8C16-12B22970F0D1"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*","matchCriteriaId":"CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"},{"vulnerable":true,"criteria":"cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*","matchCriteriaId":"B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"}]}]}],"references":[{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-05.xml","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linuxcompatible.org/print42495.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:054","source":"cve@mitre.org"},{"url":"http://www.monkey.org/openbsd/archive/ports/0407/msg00265.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11347","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c.diff?r1=1.170&r2=1.171","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c?rev=1.171&content-type=text/x-cvsweb-markup","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17642","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-05.xml","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.linuxcompatible.org/print42495.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2005:054","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.monkey.org/openbsd/archive/ports/0407/msg00265.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11347","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c.diff?r1=1.170&r2=1.171","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c?rev=1.171&content-type=text/x-cvsweb-markup","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17642","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-0441","sourceIdentifier":"cve@mitre.org","published":"2004-12-22T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users to execute arbitrary code via the (1) attrib_valid function, (2) covert function, (3) declare statement, or (4) a crafted query plan, or remote authenticated users with database owner or \"sa\" role privileges to execute arbitrary code via (5) a crafted install java statement."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE","baseScore":10.0},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:11.03.3:*:linux:*:*:*:*:*","matchCriteriaId":"2CDEB3AA-AC0F-4D2E-B376-B6E0B6D1125B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:digital_unix:*:*:*:*:*","matchCriteriaId":"351C0856-F606-4984-88D6-80441103AD67"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:hp:*:*:*:*:*","matchCriteriaId":"DFA1A00E-3623-4DC5-B5A9-C43ACEB361AA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:sun:*:*:*:*:*","matchCriteriaId":"B51FF66F-2E1B-4B67-B7F1-1E320461679A"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:11.5:*:win:*:*:*:*:*","matchCriteriaId":"22FAE724-0C7E-4B22-B968-38A5FC6CF549"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:digital_unix:*:*:*:*:*","matchCriteriaId":"D5C70B3D-F7FD-40D2-A92E-FC158BBCF9CD"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:hp:*:*:*:*:*","matchCriteriaId":"E8D15B30-66BE-4299-9B49-F96E5B675FF3"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:sun:*:*:*:*:*","matchCriteriaId":"9FC688E2-ACE7-4AB9-A92D-C5C13F03D41F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:11.5.1:*:win:*:*:*:*:*","matchCriteriaId":"B8FD8D4B-C375-400A-A139-99CB4CBC886F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:digital_unix:*:*:*:*:*","matchCriteriaId":"D1EF8909-5238-4FED-A5B0-4C830A15030B"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:hp:*:*:*:*:*","matchCriteriaId":"98ABCB89-3FDF-495C-B4C2-D39D063C132C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:sun:*:*:*:*:*","matchCriteriaId":"11EB359A-2FCA-4E93-A6D2-5134A4B81312"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:11.9.2:*:win:*:*:*:*:*","matchCriteriaId":"A892D682-CC14-4EAA-A394-52F104C33D81"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:digital_unix:*:*:*:*:*","matchCriteriaId":"CB19AA67-3F78-4A01-BA31-76F681E81DE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:hp:*:*:*:*:*","matchCriteriaId":"1F780727-2552-4275-BA67-87A18E7C42B5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:sun:*:*:*:*:*","matchCriteriaId":"D267399F-B2D4-46FB-943E-61A4D660BFE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:12.0:*:win:*:*:*:*:*","matchCriteriaId":"6BA8947D-330C-4F65-BBD0-CBB2EF1C0058"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:digital_unix:*:*:*:*:*","matchCriteriaId":"D6964976-4D18-4580-A793-9D26FFDD8804"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:hp:*:*:*:*:*","matchCriteriaId":"BC529C3A-16E7-4B90-A7AD-93E99F4F79DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:sun:*:*:*:*:*","matchCriteriaId":"B4E9EE64-8E9C-4004-9C5B-A67AFE831151"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:12.0.1:*:win:*:*:*:*:*","matchCriteriaId":"ACC81C45-21C0-454F-916E-476002E4EF2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:digital_unix:*:*:*:*:*","matchCriteriaId":"4021B54C-6C0B-46E0-BCE0-2BA7357488DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:hp:*:*:*:*:*","matchCriteriaId":"AB43D0DC-62DB-4D33-B84E-2227964A1A70"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:linux:*:*:*:*:*","matchCriteriaId":"A1A11319-C5D5-4947-B9CE-34F952453FA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sgi:*:*:*:*:*","matchCriteriaId":"47C266AB-6862-4FE5-B801-7A112F620C0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:sun:*:*:*:*:*","matchCriteriaId":"36C8D9D2-4DAC-4EF0-9AB5-92296CE82543"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:12.5:*:win:*:*:*:*:*","matchCriteriaId":"CB5AA123-3426-4B7A-A790-F89DC8BF9AB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.2:*:*:*:*:*:*:*","matchCriteriaId":"42709C69-248F-4054-95C6-4DBDCBB92413"},{"vulnerable":true,"criteria":"cpe:2.3:a:sybase:adaptive_server_enterprise:12.5.3:*:*:*:*:*:*:*","matchCriteriaId":"392C16A9-1F35-4459-A364-D047A3D27016"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=111272918117194&w=2","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/13632","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ngssoftware.com/advisories/sybase-ase.txt","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/393851","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/12080","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.sybase.com/detail/1%2C6904%2C1033894%2C00.html","source":"cve@mitre.org"},{"url":"http://www.sybase.com/detail?id=1034520","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.sybase.com/detail?id=1034752","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19354","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19974","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19976","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19978","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19979","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19980","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/bugtraq/2004-12/0315.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=111272918117194&w=2","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/13632","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.ngssoftware.com/advisories/sybase-ase.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/393851","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/12080","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.sybase.com/detail/1%2C6904%2C1033894%2C00.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.sybase.com/detail?id=1034520","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.sybase.com/detail?id=1034752","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19354","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19974","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19976","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19978","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19979","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19980","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-1247","sourceIdentifier":"cve@mitre.org","published":"2004-01-15T05:00:00.000","lastModified":"2025-04-03T01:03:51.193","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability."}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:nsure_audit:1.0.1:*:*:*:*:*:*:*","matchCriteriaId":"01631D6A-0E07-409C-84AD-A53159537EC6"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0021.html","source":"cve@mitre.org"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097379.htm","source":"cve@mitre.org"},{"url":"http://www.cirt.dk/advisories/cirt-31-advisory.pdf","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0126.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0021.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097379.htm","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.cirt.dk/advisories/cirt-31-advisory.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0126.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}}]}